Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/f59c05dcb819519679a651fdb13b1422a3308f06.roa
File:                     f59c05dcb819519679a651fdb13b1422a3308f06.roa (raw, json)
Hash identifier:          gxh+uEnUZY07RmDfiDTw+5qyDXUrtFNP2eCAiq5Qvr8=
Subject key identifier:   59:24:5C:F5:99:57:EF:6D:3B:8D:8E:01:2C:20:EC:F2:11:BD:6C:D1
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       125C40
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/f59c05dcb819519679a651fdb13b1422a3308f06.roa
Signing time:             Wed 29 Nov 2023 21:07:04 +0000
ROA not before:           Wed 29 Nov 2023 21:07:04 +0000
ROA not after:            Sat 29 Nov 2025 21:07:04 +0000
asID:                     263181
IP address blocks:        186.56.8.0/23 maxlen: 24
                          186.56.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203264 (0x125c40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:07:04 2023 GMT
            Not After : Nov 29 21:07:04 2025 GMT
        Subject: CN=f59c05dcb819519679a651fdb13b1422a3308f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:4b:da:cd:1c:cd:64:13:d4:d0:ce:43:e5:
                    ad:82:cd:24:d1:37:e7:40:64:41:93:f1:4a:dc:82:
                    8f:b3:ad:62:53:4d:39:d3:2d:70:7e:8d:70:4f:8f:
                    e0:e7:ed:1c:c0:7d:fc:1c:25:78:1b:31:f9:5c:ca:
                    52:62:5e:03:9f:34:43:10:6d:76:77:d2:28:9f:67:
                    12:a8:21:21:f4:2b:8a:46:a1:70:a6:1e:22:37:48:
                    da:c2:18:e1:58:4d:c3:81:aa:2b:cb:f6:26:bb:2f:
                    a1:d3:7d:71:57:1f:3c:60:36:54:fc:7d:3a:d5:ad:
                    bd:97:ff:03:85:8e:a9:56:f7:82:95:38:f8:5c:4a:
                    6f:6d:5c:b9:49:51:8a:8a:7b:c3:d5:e1:e4:c8:72:
                    35:b5:28:6a:55:52:a5:b8:31:bd:d9:03:f7:fc:a4:
                    25:6b:c2:a7:05:08:8c:f9:9b:96:2e:07:ca:e6:8d:
                    c9:53:7f:cf:44:0a:bd:dc:ef:f4:56:49:b6:0e:f7:
                    7b:6c:d8:92:9f:53:75:e4:cf:a9:2b:01:04:2c:37:
                    82:eb:13:cd:6a:e2:95:6a:33:68:e1:4c:53:bb:2f:
                    76:15:02:51:8b:cb:46:c8:9b:95:d0:29:46:81:25:
                    61:1f:04:9c:b8:40:cb:cc:26:25:20:c0:95:5d:f2:
                    e7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:5C:F5:99:57:EF:6D:3B:8D:8E:01:2C:20:EC:F2:11:BD:6C:D1
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/f59c05dcb819519679a651fdb13b1422a3308f06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.8.0-186.56.10.255

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:d8:2a:63:b5:a8:6e:f5:ee:92:19:01:25:bf:de:5e:1b:
         db:af:22:56:86:1f:10:07:ae:1e:d8:bf:11:fd:1f:d5:3b:24:
         05:ee:ff:35:08:ac:5b:69:fb:47:52:6e:b5:b0:d1:01:7a:5c:
         b1:fd:e2:e6:db:70:59:7f:26:93:71:ec:f2:d0:ca:7c:fb:c7:
         3c:d2:29:78:e6:81:ed:98:3b:32:81:e6:19:b1:77:28:e9:fc:
         59:73:b8:ca:d2:d5:92:c1:7a:dd:51:32:22:c1:fe:14:8a:a2:
         e8:ab:f6:b5:60:be:d1:48:2d:f3:d3:30:b7:59:72:aa:0a:39:
         23:14:11:43:af:71:e7:14:4c:0b:6f:d7:b5:b5:d3:e9:0b:f3:
         03:d8:90:d2:17:2b:4f:3c:aa:be:e7:d3:99:cd:df:f9:72:81:
         ee:68:00:b4:5a:f3:d8:92:19:02:4b:b5:ba:67:49:4f:5f:dc:
         61:7c:21:53:a9:cc:45:39:a0:19:89:9f:97:9f:43:0b:ed:6f:
         94:8c:f3:e9:1e:3a:3d:ca:3b:bb:e0:8b:77:11:07:2d:5a:97:
         c7:71:2a:0e:0b:1d:16:65:df:11:d1:80:69:e9:65:82:9b:86:
         e5:c8:6d:8d:6b:ef:9f:c2:70:24:f1:98:93:d7:b8:48:ef:ed:
         4e:9a:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org