Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ccd8c7f1b10d01e9b950982dcb6fc8d97fb60773.roa
File:                     ccd8c7f1b10d01e9b950982dcb6fc8d97fb60773.roa (raw, json)
Hash identifier:          0KsyCR9t25uffk2F67IE0bTT3wvILnkRUiMnceAoO68=
Subject key identifier:   23:E1:30:3A:80:A2:87:3A:8D:7B:75:87:55:38:DB:0F:44:69:0D:0E
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       1411DE
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ccd8c7f1b10d01e9b950982dcb6fc8d97fb60773.roa
Signing time:             Tue 30 Jan 2024 17:46:58 +0000
ROA not before:           Tue 30 Jan 2024 17:46:58 +0000
ROA not after:            Fri 30 Jan 2026 17:46:58 +0000
asID:                     10834
IP address blocks:        200.5.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315294 (0x1411de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Jan 30 17:46:58 2024 GMT
            Not After : Jan 30 17:46:58 2026 GMT
        Subject: CN=ccd8c7f1b10d01e9b950982dcb6fc8d97fb60773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:07:68:5e:c3:7b:69:ac:6b:45:2c:63:5b:
                    a3:1b:67:a0:43:07:6a:2c:ef:11:8d:11:dc:bc:e1:
                    4b:3c:a6:6d:a8:2c:e7:c6:58:8e:d5:b2:bb:42:18:
                    a7:0c:fb:c0:78:79:47:78:e8:8e:4e:a2:07:a7:97:
                    9f:e9:a0:bb:fc:1a:a7:ea:57:04:b9:7d:7f:57:9f:
                    b1:23:7e:03:c8:90:09:20:e0:b6:f5:0a:f6:8b:8a:
                    6d:2d:af:61:bb:e0:d1:9e:53:37:05:7a:3a:7f:86:
                    29:7c:35:38:d6:40:69:24:7c:b9:d0:8f:9d:57:68:
                    a7:c1:74:9f:07:0b:29:f6:f4:12:30:4f:86:04:1e:
                    78:d2:2d:d7:29:88:3e:ae:0f:57:8f:df:2d:ab:13:
                    0b:92:29:5c:79:b9:ad:af:ff:ae:9a:74:a5:ad:ad:
                    26:3b:8c:2d:12:10:3f:28:d9:5a:c1:82:c9:6a:28:
                    42:66:bd:ca:28:f9:aa:a4:21:77:35:f8:b5:51:e3:
                    96:8b:33:72:12:e6:19:fb:9b:11:ec:a7:25:cd:27:
                    79:8b:54:8d:09:db:fe:ce:1f:f2:4a:98:c0:97:7c:
                    9f:fe:b4:7b:bc:4d:b5:82:c2:5e:45:29:65:85:ab:
                    bb:a8:e5:c5:55:a7:82:7b:19:73:38:3c:b5:40:d6:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E1:30:3A:80:A2:87:3A:8D:7B:75:87:55:38:DB:0F:44:69:0D:0E
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ccd8c7f1b10d01e9b950982dcb6fc8d97fb60773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8a:81:4f:56:c8:83:a6:b4:b3:4a:57:36:9b:63:2d:13:ac:60:
         75:b7:d2:dc:c4:93:66:b3:a7:01:ca:dc:68:b6:7e:99:a8:db:
         ce:cb:79:e6:9f:e4:14:6d:6c:65:5f:59:db:54:41:5b:72:bd:
         53:20:d6:df:d0:98:ad:2f:a6:58:9f:c1:54:15:fe:41:f7:5b:
         7b:73:7c:dd:b6:b4:7d:84:06:33:40:e1:e1:ca:58:5f:ed:52:
         b5:5a:93:a4:1b:62:4b:d2:d1:a1:12:2f:ab:de:0a:e0:38:3b:
         f5:27:d6:2d:21:a3:0f:fc:16:f8:6a:9d:f5:f2:e5:b2:31:7b:
         f9:17:a0:65:09:44:e7:6d:5e:fa:98:c9:72:d6:3d:83:dd:bb:
         0e:23:a6:20:38:f8:d3:4e:b5:0a:af:2b:e9:80:29:0b:30:22:
         a2:d7:97:3a:3d:f9:5d:ed:a7:e3:31:1f:86:67:3e:c8:37:97:
         59:78:81:22:ca:18:d4:76:65:a7:e2:41:4d:a9:64:c8:87:43:
         6e:2b:9a:0e:4a:78:75:55:f6:4a:82:71:bb:b1:9d:d2:32:91:
         6f:52:23:ec:7f:57:02:d0:7a:45:02:8f:09:6d:5d:9e:74:74:
         6a:79:01:a5:11:15:66:55:a3:96:a3:5a:14:4e:92:35:a2:35:
         6d:ec:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org