Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7aadbaa9-b09a-4e7e-b76d-22821c747363/d7e47bfffdd3a04bb00e484b786a797c8d255fed.roa
File:                     d7e47bfffdd3a04bb00e484b786a797c8d255fed.roa (raw, json)
Hash identifier:          jGOgARfQpqzkRCn/KD8dAHQk2LxaeQOPPgyF7kArOJg=
Subject key identifier:   E6:24:31:E0:91:7C:F3:D3:B5:89:8B:C7:0B:85:5E:91:4A:26:FC:A0
Certificate issuer:       /CN=bc05f3e5965615da271682162ecc883c90349479
Certificate serial:       28674E
Authority key identifier: FD:0A:D3:7E:79:7E:E9:D9:D7:5A:1A:78:EB:83:95:1B:82:DD:47:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc05f3e5965615da271682162ecc883c90349479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7aadbaa9-b09a-4e7e-b76d-22821c747363/d7e47bfffdd3a04bb00e484b786a797c8d255fed.roa
Signing time:             Fri 15 Mar 2024 23:54:23 +0000
ROA not before:           Fri 15 Mar 2024 23:54:23 +0000
ROA not after:            Sun 15 Mar 2026 23:54:23 +0000
asID:                     265741
IP address blocks:        128.201.80.0/22 maxlen: 22
                          128.201.80.0/24 maxlen: 24
                          128.201.81.0/24 maxlen: 24
                          128.201.82.0/24 maxlen: 24
                          128.201.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2647886 (0x28674e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc05f3e5965615da271682162ecc883c90349479
        Validity
            Not Before: Mar 15 23:54:23 2024 GMT
            Not After : Mar 15 23:54:23 2026 GMT
        Subject: CN=d7e47bfffdd3a04bb00e484b786a797c8d255fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:26:a0:52:6a:04:eb:6b:3b:b3:a4:ab:59:
                    06:d6:f2:fb:2f:15:31:ae:ac:1c:43:e0:65:fb:61:
                    db:0e:a9:b0:05:c1:ac:81:59:89:7e:9a:cc:41:fa:
                    67:da:b0:a3:15:c9:b3:c9:c0:a5:35:16:ca:28:56:
                    de:82:d3:90:b6:ad:2b:89:0f:25:47:78:18:72:11:
                    9c:60:2d:ee:d8:6a:cb:a7:ef:86:4a:17:1a:38:66:
                    9e:55:61:a1:50:d8:13:8c:52:62:18:50:a1:3b:48:
                    9f:4f:1c:07:04:a9:94:87:67:34:fc:aa:89:03:53:
                    04:b3:3a:79:bc:0e:ac:8a:bf:df:d4:2f:4b:27:73:
                    3a:b2:ec:c0:67:41:a6:89:56:13:d3:59:88:b0:c3:
                    dd:36:f9:41:a4:96:9a:0e:1b:72:a2:90:29:91:c9:
                    bc:4a:2d:8e:b3:ea:7c:e2:6f:f1:19:40:58:e9:71:
                    79:5a:96:a1:82:48:52:50:24:df:ef:d1:79:b0:7e:
                    96:22:3f:9d:04:02:a3:cb:cd:8e:05:1d:2d:b2:c8:
                    9e:b9:a9:8b:34:a1:b9:90:95:85:3e:e1:e4:28:a4:
                    f0:5b:de:c8:e6:e3:23:33:2b:c4:1e:62:d9:66:58:
                    6f:03:c6:4a:e6:f7:da:d8:4d:98:e2:45:df:21:06:
                    0d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:24:31:E0:91:7C:F3:D3:B5:89:8B:C7:0B:85:5E:91:4A:26:FC:A0
            X509v3 Authority Key Identifier:
                keyid:FD:0A:D3:7E:79:7E:E9:D9:D7:5A:1A:78:EB:83:95:1B:82:DD:47:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc05f3e5965615da271682162ecc883c90349479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7aadbaa9-b09a-4e7e-b76d-22821c747363/d7e47bfffdd3a04bb00e484b786a797c8d255fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7aadbaa9-b09a-4e7e-b76d-22821c747363/bc05f3e5965615da271682162ecc883c90349479.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:8d:d5:b7:b1:01:c9:4b:cd:41:d6:ab:3d:20:25:e3:f0:
         12:8a:67:ac:c9:2b:21:3f:2a:32:f2:4d:ef:04:94:d1:e7:1d:
         2a:1b:22:b0:f3:a8:05:ac:40:1e:81:a5:6f:9c:3b:2b:1b:5d:
         ff:b0:b5:5d:e6:45:66:0f:18:c0:82:a0:27:c4:db:cb:82:47:
         a8:fc:c7:11:55:05:00:06:17:fb:1f:4a:c4:5b:f2:7d:23:ed:
         a4:dd:8f:37:2f:c7:da:72:8b:19:04:ec:ae:98:88:e8:6d:75:
         e2:e8:22:1d:f3:6d:05:6c:40:9b:99:8b:bb:4b:fa:3d:7a:3b:
         18:86:c5:b9:73:be:7a:b7:21:26:6c:43:c0:e1:ba:d4:3a:e5:
         ff:c6:6c:d8:5d:39:ae:1a:50:37:ce:c6:6d:17:9d:f7:38:dc:
         0c:9a:93:a6:58:f3:d4:49:4a:1c:e5:af:b1:29:af:ab:3b:35:
         2a:53:88:6a:5c:40:55:c8:cb:33:dc:9f:f0:47:70:ed:f3:e3:
         df:8d:2f:b0:92:3a:49:7d:d5:cd:01:14:46:5e:95:42:54:d8:
         b2:fb:86:ef:12:09:c9:67:04:c6:9d:ed:12:8a:0d:34:88:22:
         bb:b8:cf:93:53:51:8a:d2:05:c0:d0:7d:7c:ea:50:07:0e:76:
         f6:4a:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org