Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/92eb2724ea36ea5753d99c32e05e0b4cee921cb0.roa
File:                     92eb2724ea36ea5753d99c32e05e0b4cee921cb0.roa (raw, json)
Hash identifier:          mlztFYEUlA03sGfU1uVJoajIuEEenAeiJgC7pcXSLEk=
Subject key identifier:   52:E4:8F:55:7B:55:63:8C:79:38:B6:4B:C3:DC:8E:52:10:3A:10:21
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       127043
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/92eb2724ea36ea5753d99c32e05e0b4cee921cb0.roa
Signing time:             Wed 29 Nov 2023 21:11:42 +0000
ROA not before:           Wed 29 Nov 2023 21:11:42 +0000
ROA not after:            Sat 29 Nov 2025 21:11:42 +0000
asID:                     262231
IP address blocks:        186.56.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208387 (0x127043)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:11:42 2023 GMT
            Not After : Nov 29 21:11:42 2025 GMT
        Subject: CN=92eb2724ea36ea5753d99c32e05e0b4cee921cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:65:b6:1b:56:c3:19:12:11:0e:3e:ac:ed:
                    d6:23:ab:7a:9e:7e:6d:ab:70:c3:4f:a5:23:17:c1:
                    66:29:4a:95:00:04:10:90:81:f8:78:31:cc:1f:4d:
                    be:ad:e2:39:74:1b:63:8f:bd:95:ef:41:69:cb:6c:
                    de:5e:73:98:31:ea:86:cc:7e:65:59:67:c3:7d:38:
                    e5:60:00:c5:f2:8d:99:db:05:50:42:2d:26:07:c8:
                    0d:82:75:7b:0b:3c:ce:4a:cf:34:8f:39:30:30:43:
                    a5:cb:5d:41:37:76:1f:e8:4b:a9:dc:b8:e9:84:94:
                    10:3c:18:dd:7a:9b:4b:94:75:60:82:89:25:4a:65:
                    22:cb:09:51:8d:52:b3:54:3e:a1:8e:8e:d6:92:e1:
                    6a:16:53:64:0b:be:cc:bc:5c:90:de:12:68:8c:c2:
                    06:78:c7:26:f0:87:1f:33:96:da:6e:31:73:ec:dd:
                    25:c4:9c:f8:55:97:67:56:1b:4c:13:68:a4:0a:d5:
                    99:d0:3a:9c:cf:71:fe:9d:38:c9:1e:8e:59:d4:d7:
                    98:30:89:7a:dc:0d:64:cb:a3:9c:32:b9:63:1f:d7:
                    d4:b4:43:3e:80:f3:78:56:2d:69:76:e5:4b:20:c2:
                    10:63:64:14:21:aa:72:82:95:7a:7e:80:5d:34:ef:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E4:8F:55:7B:55:63:8C:79:38:B6:4B:C3:DC:8E:52:10:3A:10:21
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/92eb2724ea36ea5753d99c32e05e0b4cee921cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:d3:a6:4b:b8:1a:a2:2d:6b:9d:dd:f2:26:90:8c:25:6f:
         7e:c5:f1:27:dc:37:bc:22:36:1b:89:a5:83:3a:bf:a2:17:4f:
         d1:25:6f:3e:4a:6d:42:11:58:b5:2a:fb:62:90:eb:84:a3:6a:
         59:26:98:c0:b4:db:c9:48:05:84:92:38:e6:d4:22:67:41:18:
         be:8c:91:b3:37:90:91:c2:cb:7f:f6:48:16:2b:94:d1:0d:04:
         1e:a7:46:bc:df:ce:c6:86:80:54:f7:ff:73:e0:6e:a5:ea:5d:
         95:22:84:b2:db:d1:9c:49:52:4b:b1:59:66:87:0e:d3:da:95:
         49:da:11:00:8b:e8:28:2b:76:c7:e0:cb:3f:93:ae:84:ab:d4:
         f6:40:04:89:a0:c0:35:0a:a1:dd:01:48:47:f3:af:94:3d:2a:
         78:11:39:bf:b7:9c:18:ba:8c:a3:94:30:fc:96:40:4c:2f:0f:
         3c:49:64:fc:d1:4e:ee:8f:56:64:3b:13:c6:d2:53:61:c1:fd:
         83:93:11:56:d7:a3:c4:5a:9a:51:96:f7:16:71:88:66:92:86:
         28:27:42:a6:7a:d6:30:a3:c2:c9:70:98:e5:6e:b5:9f:b6:74:
         36:23:29:66:e7:35:0b:1d:af:6e:51:53:19:b8:7c:cb:e3:b6:
         6b:ca:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org