Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/90a321e5f33966202ccb4fa008675a68237821ad.roa
File:                     90a321e5f33966202ccb4fa008675a68237821ad.roa (raw, json)
Hash identifier:          KKz0lS8O4pxo1+lbO4QuJibP9VdTqu6A9nalNOCScmo=
Subject key identifier:   2A:82:5E:43:6A:11:7A:49:BB:3B:BF:1C:D6:0C:3D:B3:A7:F1:F6:3B
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       128C4F
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/90a321e5f33966202ccb4fa008675a68237821ad.roa
Signing time:             Wed 29 Nov 2023 21:31:45 +0000
ROA not before:           Wed 29 Nov 2023 21:31:45 +0000
ROA not after:            Sat 29 Nov 2025 21:31:45 +0000
asID:                     263221
IP address blocks:        201.251.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215567 (0x128c4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:31:45 2023 GMT
            Not After : Nov 29 21:31:45 2025 GMT
        Subject: CN=90a321e5f33966202ccb4fa008675a68237821ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:85:39:e9:1e:cb:03:d2:f4:61:d3:4e:cc:
                    82:cf:9b:23:01:b7:b5:d8:49:ad:4c:df:b0:f8:62:
                    9e:ba:9d:b7:8f:b8:e5:4d:e9:c7:97:68:00:9d:6f:
                    17:5d:fd:bf:0d:59:3b:d0:fb:b6:07:50:ff:28:1a:
                    8a:c4:7b:09:dc:44:e7:95:e3:2b:91:e4:76:63:fd:
                    19:9a:e9:f5:31:31:a9:20:68:f5:d1:7a:4d:1b:88:
                    59:c2:46:57:33:77:4d:0b:58:98:59:e5:3c:7d:00:
                    79:39:56:0e:0c:ad:ab:40:b6:eb:7a:e8:76:ca:3f:
                    43:5b:19:f6:59:5f:ad:0e:03:6d:7b:c1:4d:2b:6f:
                    24:b4:06:bc:36:29:d4:72:b7:7c:44:20:7c:13:97:
                    7e:fd:b7:d0:3f:75:18:ca:da:59:9d:24:63:f1:99:
                    1c:d8:ca:ea:3d:f8:63:bc:8f:7a:4a:30:ab:0b:d4:
                    3d:dd:76:bf:a9:a2:73:f8:ba:cb:30:7d:c0:e8:d8:
                    b6:47:cc:80:36:12:c4:8a:b7:5f:10:6f:71:ea:f4:
                    3c:02:28:0d:f9:a8:00:ef:a2:f6:10:3c:97:d8:b9:
                    5e:b6:e3:e9:39:a7:a8:25:dd:41:6d:2d:89:71:3c:
                    47:d1:dc:e2:e0:0c:ab:52:2d:83:83:8b:28:b6:96:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:82:5E:43:6A:11:7A:49:BB:3B:BF:1C:D6:0C:3D:B3:A7:F1:F6:3B
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/90a321e5f33966202ccb4fa008675a68237821ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b8:29:c1:8d:5d:5d:fd:e3:fc:16:01:2a:d0:19:67:7b:80:
         0e:18:9a:d7:72:a0:a5:b6:bf:54:d2:33:b7:ed:2f:54:4e:3a:
         11:97:24:ec:f7:3c:b3:16:dc:61:48:d3:17:0a:b5:25:f0:de:
         4d:f0:ab:57:c2:f0:b3:48:e6:b1:9d:93:8f:11:fd:1f:57:52:
         0a:c9:67:06:e8:c4:de:15:57:dd:b9:37:f6:aa:92:f4:fa:21:
         4c:ee:48:48:52:9e:78:2d:ae:5d:aa:67:48:e9:66:1e:68:29:
         10:d1:b3:23:93:20:f3:d0:ab:52:6c:f3:21:88:e9:9b:f9:d6:
         d6:11:9e:81:5b:bc:c7:50:5d:53:95:4d:84:2a:5b:d4:c2:f4:
         3a:6d:84:f2:b5:77:9b:b7:33:ed:22:56:bb:46:37:e2:52:08:
         b3:d6:90:0c:94:4f:71:3e:3f:41:b0:a0:40:ff:1a:08:4d:c5:
         2d:21:2b:8c:c0:e1:a8:aa:b1:91:61:c4:36:7d:1b:2c:c0:81:
         3b:8f:2d:ff:f4:7d:f0:6f:85:e7:17:02:39:5d:11:df:a2:3e:
         ce:bf:ce:b9:79:c7:c3:35:12:4d:e4:fe:33:33:32:4f:23:be:
         34:b8:d4:ca:a4:a5:9f:e2:6d:27:cb:5a:db:dc:16:2f:98:71:
         1f:7c:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org