Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e143902f1bd6a52c190307bcea64ec31cc0e2d54.roa
File:                     e143902f1bd6a52c190307bcea64ec31cc0e2d54.roa (raw, json)
Hash identifier:          iy6iZ3/H0LEs7oCFC5l75+jwj5dKKfBBTm9nZ8eCPJ4=
Subject key identifier:   6E:4F:C1:6B:A9:3C:57:3B:0A:6F:E3:61:8A:9C:05:C1:B8:3C:76:5D
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       123481
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e143902f1bd6a52c190307bcea64ec31cc0e2d54.roa
Signing time:             Wed 29 Nov 2023 15:39:48 +0000
ROA not before:           Wed 29 Nov 2023 15:39:48 +0000
ROA not after:            Sat 29 Nov 2025 15:39:48 +0000
asID:                     272113
IP address blocks:        201.251.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193089 (0x123481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 15:39:48 2023 GMT
            Not After : Nov 29 15:39:48 2025 GMT
        Subject: CN=e143902f1bd6a52c190307bcea64ec31cc0e2d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5c:17:fd:35:db:5d:dd:4c:2e:95:57:44:75:
                    2f:ae:85:2c:1b:35:5d:e3:14:3d:f3:d0:73:73:b3:
                    14:05:a1:8f:d4:25:39:d9:9f:64:17:d4:33:7f:8e:
                    19:a4:e2:95:a3:3f:7e:6f:da:82:26:00:fd:04:37:
                    61:f7:c7:26:07:e5:9f:4b:f0:14:1f:7a:cf:13:8d:
                    6f:03:f3:1a:20:06:30:e6:ad:f8:87:03:aa:ed:a2:
                    43:66:e6:d4:6a:6c:82:11:3e:d2:d8:c7:bd:c2:0a:
                    93:84:f9:e0:01:72:9c:26:db:67:0f:b4:ab:07:3e:
                    31:43:d2:76:f6:90:d8:17:c7:28:60:33:e1:42:28:
                    f8:a9:ae:f2:40:13:98:f4:be:67:df:9d:9e:6a:f3:
                    6a:5a:7a:b6:24:a0:e5:e6:7e:d2:a1:32:48:3f:f1:
                    8c:d3:3e:99:e2:b6:0c:f1:8c:1b:04:fc:f6:f8:71:
                    2c:60:02:cb:81:e3:c4:28:c9:f1:28:66:6a:1c:8c:
                    ff:6d:0f:d4:e5:d2:b3:0e:f6:15:3b:28:24:35:cd:
                    cc:b9:18:cc:9f:f8:58:6b:a7:26:d6:d1:ad:a5:25:
                    a7:4e:3f:0f:7f:f5:6c:f3:c4:9a:a8:9b:63:39:aa:
                    c1:ca:a4:0a:98:ad:59:23:2d:00:01:e2:e0:74:da:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4F:C1:6B:A9:3C:57:3B:0A:6F:E3:61:8A:9C:05:C1:B8:3C:76:5D
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e143902f1bd6a52c190307bcea64ec31cc0e2d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:57:3e:a1:fc:46:e3:6b:c6:a8:ba:3b:0d:ae:db:04:50:e5:
         5f:a7:92:61:96:d4:c8:ad:d0:2d:7b:c2:35:8b:45:ce:46:e3:
         de:82:12:7b:60:49:5d:16:82:19:87:24:1c:fb:9f:17:50:60:
         ed:c5:28:b7:1d:04:bd:fd:65:26:ee:86:eb:8b:a3:54:92:dc:
         a1:2c:9b:8b:90:7c:56:b8:1c:de:b7:84:94:42:b4:7c:b8:69:
         b6:7d:58:11:c6:a9:38:10:26:c7:ac:79:21:36:0b:6d:92:4f:
         ce:ed:29:97:94:fc:85:b6:ca:4a:1e:49:0b:19:88:11:53:71:
         04:5c:ae:24:9d:f1:89:7d:f4:3e:0c:e3:59:a7:3d:96:0b:3c:
         f0:05:c6:40:d5:54:f0:7e:62:11:50:6a:49:ed:e2:9d:35:ad:
         2c:1b:aa:2f:87:ff:2e:4c:45:88:eb:9a:74:b5:bf:f5:0d:ac:
         89:66:bf:c7:7f:a7:54:5b:03:96:e4:ee:c8:b0:f2:a9:4f:5a:
         f8:4c:c2:03:50:f5:36:67:00:cc:ac:0a:86:9c:76:31:80:18:
         46:74:52:8b:37:8d:79:5e:4b:c8:3e:77:ce:de:53:b7:70:c9:
         47:b8:37:21:e2:e6:7c:1a:cb:2e:86:b1:00:7a:80:17:4b:97:
         f4:11:96:f5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEjSBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MTUzOTQ4WhcNMjUxMTI5MTUzOTQ4WjAzMTEwLwYDVQQDEyhlMTQzOTAyZjFiZDZh
NTJjMTkwMzA3YmNlYTY0ZWMzMWNjMGUyZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhVwX/TXbXd1MLpVXRHUvroUsGzVd4xQ989Bzc7MUBaGP1CU5
2Z9kF9Qzf44ZpOKVoz9+b9qCJgD9BDdh98cmB+WfS/AUH3rPE41vA/MaIAYw5q34
hwOq7aJDZubUamyCET7S2Me9wgqThPngAXKcJttnD7SrBz4xQ9J29pDYF8coYDPh
Qij4qa7yQBOY9L5n352eavNqWnq2JKDl5n7SoTJIP/GM0z6Z4rYM8YwbBPz2+HEs
YALLgePEKMnxKGZqHIz/bQ/U5dKzDvYVOygkNc3MuRjMn/hYa6cm1tGtpSWnTj8P
f/Vs88SaqJtjOarByqQKmK1ZIy0AAeLgdNo83wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG5PwWupPFc7Cm/jYYqcBcG4PHZdMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2L2UxNDM5MDJmMWJkNmE1MmMxOTAzMDdiY2VhNjRlYzMxY2MwZTJkNTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMn78jANBgkqhkiG9w0BAQsFAAOCAQEAjFc+ofxG42vGqLo7
Da7bBFDlX6eSYZbUyK3QLXvCNYtFzkbj3oISe2BJXRaCGYckHPufF1Bg7cUotx0E
vf1lJu6G64ujVJLcoSybi5B8Vrgc3reElEK0fLhptn1YEcapOBAmx6x5ITYLbZJP
zu0pl5T8hbbKSh5JCxmIEVNxBFyuJJ3xiX30PgzjWac9lgs88AXGQNVU8H5iEVBq
Se3inTWtLBuqL4f/LkxFiOuadLW/9Q2siWa/x3+nVFsDluTuyLDyqU9a+EzCA1D1
NmcAzKwKhpx2MYAYRnRSizeNeV5LyD53zt5Tt3DJR7g3IeLmfBrLLoaxAHqAF0uX
9BGW9Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org