Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e538b9f14669373d46a42e2c5111bf073212e2b8.roa
File:                     e538b9f14669373d46a42e2c5111bf073212e2b8.roa (raw, json)
Hash identifier:          FUPGv7yHURS7fdahf8bUPyZUtSV2IFebaL2ozoh+u6g=
Subject key identifier:   7F:45:9F:C4:02:FC:13:B6:8C:B4:0A:77:96:B1:9B:50:F3:93:5E:25
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       141EC1
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e538b9f14669373d46a42e2c5111bf073212e2b8.roa
Signing time:             Tue 30 Jan 2024 18:05:15 +0000
ROA not before:           Tue 30 Jan 2024 18:05:15 +0000
ROA not after:            Fri 30 Jan 2026 18:05:15 +0000
asID:                     10834
IP address blocks:        200.9.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318593 (0x141ec1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Jan 30 18:05:15 2024 GMT
            Not After : Jan 30 18:05:15 2026 GMT
        Subject: CN=e538b9f14669373d46a42e2c5111bf073212e2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:16:4a:b5:c3:2e:06:1e:99:78:9c:f9:97:
                    ec:df:d9:44:36:d4:fb:86:e7:5c:f3:2d:a9:9c:0c:
                    ad:e8:28:f6:65:f8:f7:7e:7e:12:00:03:46:67:60:
                    09:3f:f0:62:c0:93:1f:c3:b1:6e:db:18:72:15:74:
                    10:ba:31:ba:b1:6d:de:45:f7:82:d9:07:65:e3:92:
                    a1:bf:e3:66:9e:eb:79:c7:c3:8d:4a:5e:99:d6:97:
                    09:c2:aa:68:11:27:56:d0:1f:8f:92:9f:bc:39:98:
                    4a:09:12:62:b3:4c:ac:05:ac:3d:d2:68:3e:7c:61:
                    3a:93:79:fa:30:96:67:7d:2b:a7:07:bb:89:20:71:
                    04:b6:37:a8:b9:ec:1e:a8:f9:24:f9:52:ab:e4:c3:
                    9e:31:b8:3e:2f:95:8b:75:90:83:7c:a4:e1:85:de:
                    97:9c:21:84:67:34:3a:a4:ce:b7:af:8f:bc:c4:22:
                    ea:67:02:1a:63:e6:5e:cc:8d:ef:34:93:59:e7:f0:
                    01:50:e7:f1:01:bd:bc:08:3a:47:a3:6e:1a:a6:8b:
                    39:85:58:61:a5:bd:26:0b:b8:91:79:ac:36:5c:65:
                    d3:7e:75:ce:14:cd:4b:30:13:15:5c:61:36:7f:8b:
                    f0:22:11:2a:7d:e7:9a:22:d4:27:98:88:df:0c:77:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:45:9F:C4:02:FC:13:B6:8C:B4:0A:77:96:B1:9B:50:F3:93:5E:25
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e538b9f14669373d46a42e2c5111bf073212e2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c1:fc:6b:3b:b1:97:68:3d:b7:69:b5:f0:cb:94:79:a2:03:
         a9:fc:22:0d:bc:6c:bb:61:2a:91:16:b8:f3:43:bb:24:02:6d:
         49:e0:12:cb:29:f9:96:ca:7f:76:4b:26:15:93:c6:bb:f6:1c:
         3f:8d:d9:6a:38:b6:fa:83:5a:b3:32:07:72:8d:1d:23:75:84:
         04:f0:78:79:59:16:94:45:85:9d:25:01:99:ad:bf:d7:45:c8:
         51:b9:a3:9e:ce:d8:2a:66:1a:1b:13:92:fe:00:a9:71:d0:fa:
         75:24:6d:69:c6:2b:cc:88:6f:b6:bf:5f:3d:6e:a9:e4:eb:35:
         ae:ee:ba:49:c2:c0:6b:a9:db:7a:92:d0:ee:5f:90:7e:11:dd:
         d9:e6:33:25:8c:be:74:6f:c9:46:4e:f1:1c:32:45:eb:42:e3:
         ed:67:40:b4:41:f5:b6:5c:74:76:92:85:f5:01:c9:d6:65:24:
         c9:b5:08:a6:5b:55:b2:7f:ed:38:ba:82:b8:b3:08:0f:51:e5:
         38:0e:a1:37:38:28:72:b4:36:32:6d:71:78:f0:c9:a1:89:4d:
         a4:56:62:e1:ab:a3:e5:d0:73:8a:47:bd:d0:3d:36:25:bc:0c:
         44:22:6f:75:bf:ca:c4:7f:6e:15:ac:c9:91:a6:4b:90:a9:db:
         dc:fc:b2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org