Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/fa3fcd2018dc42164e86f3730690ea97de450080.roa
File:                     fa3fcd2018dc42164e86f3730690ea97de450080.roa (raw, json)
Hash identifier:          TeouKR0Cu8J9c0qCZwC6jgFE3l0DxJmTbAapP5E2mo0=
Subject key identifier:   10:42:A0:AD:CE:D9:30:1E:3E:83:A6:17:54:D6:17:DE:4C:61:14:E9
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       1260B4
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/fa3fcd2018dc42164e86f3730690ea97de450080.roa
Signing time:             Wed 29 Nov 2023 21:09:07 +0000
ROA not before:           Wed 29 Nov 2023 21:09:07 +0000
ROA not after:            Sat 29 Nov 2025 21:09:07 +0000
asID:                     52367
IP address blocks:        186.56.48.0/24 maxlen: 24
                          186.56.49.0/24 maxlen: 24
                          186.56.57.0/24 maxlen: 24
                          186.56.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204404 (0x1260b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:09:07 2023 GMT
            Not After : Nov 29 21:09:07 2025 GMT
        Subject: CN=fa3fcd2018dc42164e86f3730690ea97de450080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:1c:11:f5:c1:37:53:80:5a:48:f4:22:4b:
                    26:f5:94:8b:af:c8:05:84:01:c7:3f:7c:49:2c:2e:
                    a6:49:d0:37:cb:8c:23:68:fe:c9:dd:c6:7b:0f:37:
                    4b:18:81:46:05:c8:c5:85:9f:2e:7e:dc:75:f5:34:
                    c3:36:c3:88:2c:60:50:b8:4a:1f:a3:e0:2a:61:08:
                    3e:e3:e6:ac:17:20:f3:ef:b1:a3:42:29:ca:d2:3b:
                    93:33:e3:12:8c:29:7a:5f:d9:8d:cb:28:d6:09:0c:
                    f4:0c:a9:c4:79:b6:0a:4f:0c:d3:71:fc:23:60:c5:
                    52:8c:5b:05:48:fc:c2:bf:85:49:ef:5a:c1:db:3b:
                    a7:1b:7a:53:ff:43:87:c1:1e:16:3a:d0:b6:dd:04:
                    69:e0:2d:f7:2b:7a:05:75:73:46:21:bf:94:4f:02:
                    e4:50:09:40:5c:58:52:81:d6:b6:47:1f:7f:03:fd:
                    16:79:eb:b6:fa:c6:9c:6d:0b:24:3b:29:4c:ce:ac:
                    c5:b8:bf:f2:52:0b:81:98:31:76:20:b6:dc:4b:22:
                    99:f1:9b:f1:d2:79:93:8d:12:62:ae:96:36:e6:77:
                    86:0f:e0:c3:62:1c:6d:ef:a4:f4:76:63:55:72:29:
                    2f:8a:b9:b1:59:4b:d3:ec:12:72:dc:4f:dc:10:f9:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:42:A0:AD:CE:D9:30:1E:3E:83:A6:17:54:D6:17:DE:4C:61:14:E9
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/fa3fcd2018dc42164e86f3730690ea97de450080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.48.0/23
                  186.56.57.0-186.56.58.255

    Signature Algorithm: sha256WithRSAEncryption
         89:e8:16:14:75:9f:c4:f8:9e:b4:4d:ff:18:bc:87:f7:5e:08:
         5c:23:32:7d:a5:e4:dc:28:cd:26:a1:1f:fe:b8:7c:4e:b2:03:
         e1:2c:39:9e:a5:24:bd:a1:ad:b2:18:6a:18:4d:cf:ec:cd:19:
         a0:0a:23:90:39:f6:b4:6d:61:69:7f:f3:f4:fd:68:a9:00:f6:
         7d:ac:c9:f7:3e:cc:cf:f9:fd:8f:88:af:83:c5:9e:7f:90:fa:
         28:b4:d5:5a:92:81:18:47:03:a6:47:cf:06:35:ba:90:7c:23:
         60:0d:03:9c:bd:1d:0a:cc:24:12:e8:6b:fb:c0:91:88:11:55:
         de:60:99:12:db:8b:fb:1b:cf:32:bb:f4:2b:2a:00:d2:5d:e1:
         00:ce:8b:0f:d3:69:ba:33:ae:d2:68:e0:2d:3c:48:b2:ac:20:
         33:a0:15:3b:b2:5e:69:42:7b:25:4a:bf:5e:29:f9:47:28:d2:
         b9:cd:bd:51:9a:41:e6:c6:e8:14:99:ac:a5:14:3b:13:50:76:
         de:a7:d3:13:f7:77:e7:c7:72:c4:00:c1:91:3e:74:56:9a:9c:
         c8:65:c8:ef:19:ae:3e:69:9e:13:12:84:08:0f:0f:df:5e:f8:
         b4:be:db:b3:8c:65:77:61:dc:c4:62:91:c2:ee:ec:5c:fe:6d:
         67:27:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org