Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cbe9610538e042f4d1caadb73811db61cfa5d956.roa
File:                     cbe9610538e042f4d1caadb73811db61cfa5d956.roa (raw, json)
Hash identifier:          5pS6yBkyDCXRbaSCa3++IwFR3dOPd+j0mv7A1+Z8GTE=
Subject key identifier:   C4:07:AE:16:E4:55:30:10:25:37:98:D1:F1:42:E5:1B:58:15:73:6A
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       128E38
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cbe9610538e042f4d1caadb73811db61cfa5d956.roa
Signing time:             Wed 29 Nov 2023 21:32:48 +0000
ROA not before:           Wed 29 Nov 2023 21:32:48 +0000
ROA not after:            Sat 29 Nov 2025 21:32:48 +0000
asID:                     262231
IP address blocks:        201.251.48.0/24 maxlen: 24
                          201.251.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216056 (0x128e38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:32:48 2023 GMT
            Not After : Nov 29 21:32:48 2025 GMT
        Subject: CN=cbe9610538e042f4d1caadb73811db61cfa5d956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:86:af:4a:65:29:ee:68:08:ae:ed:af:da:
                    22:5d:8b:c0:85:30:42:98:5b:a2:ed:28:a8:af:2c:
                    05:c5:47:2b:d1:d9:3f:f4:bf:d0:df:28:38:a1:27:
                    c2:92:73:14:fa:0c:08:18:5b:2f:6f:6e:9c:86:05:
                    1a:95:19:d7:6e:02:cb:8f:53:bb:1f:82:54:42:15:
                    db:5a:08:0b:f7:43:8f:b7:fd:4a:3f:dc:90:0e:48:
                    29:54:c2:dd:48:7a:6d:90:9f:63:f2:50:30:0d:7d:
                    64:fc:63:3f:fa:f0:f4:a8:78:6e:af:5d:78:c8:03:
                    72:c5:a3:0e:23:64:86:8a:bd:c4:e8:c6:72:e0:c6:
                    bf:c4:c8:92:38:fd:fa:3b:ef:47:91:4d:76:6d:6d:
                    02:46:6a:98:84:03:d4:84:e2:06:97:74:e1:90:8e:
                    a4:b0:1c:4f:2e:0e:77:ca:b6:15:3a:9c:d3:9f:c8:
                    ed:0d:50:c7:25:c4:b1:78:8a:9c:d7:bf:21:31:78:
                    d9:1b:69:c1:4d:f7:b6:ad:a0:53:9a:70:f5:8c:56:
                    97:b3:5a:7c:8a:22:dd:98:64:6f:70:b7:69:6c:00:
                    1d:7d:c2:21:18:8e:43:c5:6d:35:e6:24:4f:6e:dc:
                    a2:7e:be:f7:01:17:88:9d:d8:4b:e9:3a:aa:5c:cc:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:07:AE:16:E4:55:30:10:25:37:98:D1:F1:42:E5:1B:58:15:73:6A
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cbe9610538e042f4d1caadb73811db61cfa5d956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.48.0/24
                  201.251.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:13:35:25:7b:50:ce:6b:56:d1:5f:5f:be:57:a6:73:f1:e3:
         f5:d9:f4:e2:9a:39:19:e6:5c:58:cb:ad:5f:d9:5a:32:b7:5e:
         c9:c9:a4:ec:2e:df:bc:44:e2:e8:53:de:19:72:03:1c:e3:06:
         96:10:22:00:16:9f:36:47:62:85:b1:09:6d:38:01:89:50:3c:
         fb:cf:c5:fa:85:07:9d:37:01:19:d9:31:71:4f:19:d0:65:3e:
         fd:a4:a3:68:c5:0a:e1:40:83:b3:63:b0:7c:e0:2c:bb:70:2a:
         b4:b3:15:0a:08:d9:a6:d1:ed:50:7b:64:e3:d8:e0:07:52:c9:
         ab:34:16:87:0a:29:f3:19:16:48:83:53:82:b5:61:a2:cc:fa:
         eb:a4:b9:5a:01:d3:fb:3c:49:4e:08:25:67:60:c8:57:a6:28:
         3d:ff:50:cb:37:da:ce:ac:e2:da:2c:69:ab:c2:88:db:e7:b6:
         1d:a2:8f:79:d7:de:05:70:8d:35:37:f5:b8:dd:b0:fe:dd:86:
         02:ca:50:ed:50:c5:02:cf:63:c4:64:4d:42:34:a6:9e:c4:34:
         bf:fb:68:87:6c:fb:d1:0c:91:53:33:8a:d1:6c:06:b6:ad:97:
         35:9e:43:e8:d1:b9:0e:58:79:bd:32:8b:16:e5:33:62:e1:c5:
         e1:8a:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org