Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/180b37816681e72f2f6910b296b7ac99ac054831.roa
File:                     180b37816681e72f2f6910b296b7ac99ac054831.roa (raw, json)
Hash identifier:          tG2HbZ1ker5Lgas1FFTtlaU7mB3g10gTO8PzeA72qAo=
Subject key identifier:   B6:27:67:33:B4:CC:30:7F:9E:CD:96:1C:11:46:F1:12:7E:CC:9C:D3
Certificate issuer:       /CN=c804815bcdfef674dc896f6b3f2e0b169560053d
Certificate serial:       038D
Authority key identifier: 50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/180b37816681e72f2f6910b296b7ac99ac054831.roa
Signing time:             Mon 04 Oct 2021 21:01:47 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     263740
IP address blocks:        138.99.36.0/22 maxlen: 22
                          143.137.164.0/22 maxlen: 22
                          161.0.0.0/19 maxlen: 19
                          168.205.160.0/22 maxlen: 22
                          170.246.52.0/22 maxlen: 22
                          186.65.112.0/20 maxlen: 20
                          2803:6c00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c804815bcdfef674dc896f6b3f2e0b169560053d
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=180b37816681e72f2f6910b296b7ac99ac054831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e8:8e:18:82:bd:bd:e8:3c:98:b0:73:99:f1:
                    69:7c:80:18:1d:f9:68:26:12:48:fb:96:11:81:1e:
                    66:63:82:75:92:cc:e0:7c:20:d1:f1:da:52:02:38:
                    85:e6:8e:3d:6c:3a:73:23:9b:52:2f:50:65:89:46:
                    de:31:dc:46:c9:57:0c:e7:b1:3c:5e:a3:01:25:6c:
                    4e:cf:16:0d:e5:9e:32:d0:cc:b7:01:2e:09:dd:29:
                    f7:e6:87:ad:8e:0a:8c:94:b6:17:c5:79:2e:51:b6:
                    eb:2f:a7:76:58:1e:6f:12:80:74:25:4f:e7:6f:30:
                    e9:85:40:e5:6b:0d:b7:43:7a:79:cb:e0:9d:d0:84:
                    94:72:94:ce:49:9f:98:76:cf:0a:05:1a:a7:7f:98:
                    9e:4e:eb:96:0d:c1:29:30:b4:a7:23:d9:ba:8c:5a:
                    77:1a:ac:27:e3:53:bf:5b:88:6b:c1:f0:c1:a1:bd:
                    71:38:6e:85:d0:f3:b4:2d:33:c7:79:1b:40:68:8f:
                    25:67:7e:86:dc:a5:39:96:37:05:ea:4e:7f:a3:6a:
                    52:cb:d5:55:fe:b9:24:44:79:a8:31:43:c5:94:f0:
                    d7:b2:c9:e1:da:5e:7a:25:d4:83:d0:55:29:6a:61:
                    11:46:e9:b7:fc:00:17:13:9f:3d:4c:1d:f8:32:3a:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:27:67:33:B4:CC:30:7F:9E:CD:96:1C:11:46:F1:12:7E:CC:9C:D3
            X509v3 Authority Key Identifier:
                keyid:50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/180b37816681e72f2f6910b296b7ac99ac054831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/c804815bcdfef674dc896f6b3f2e0b169560053d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.36.0/22
                  143.137.164.0/22
                  161.0.0.0/19
                  168.205.160.0/22
                  170.246.52.0/22
                  186.65.112.0/20
                IPv6:
                  2803:6c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:13:b9:40:f7:17:bc:d9:97:06:e1:00:ce:91:9a:88:1d:
         73:77:1e:90:d7:0d:6a:c2:be:57:c8:76:18:36:43:69:aa:e4:
         ef:a7:8a:5c:c3:30:4c:97:8d:52:73:6f:e4:a3:03:9a:cb:a1:
         e1:69:2f:24:37:dc:73:bb:39:68:ac:cf:8d:35:ff:e7:21:ca:
         9d:da:38:5c:90:2d:3c:8d:f8:86:50:99:e7:a7:1f:b0:18:af:
         31:4c:e9:72:ae:f1:30:9f:77:dc:e5:e1:a7:6e:eb:f8:18:a1:
         3f:8a:08:f4:a8:31:bf:8c:7c:c5:aa:f1:02:84:bc:1f:35:3d:
         38:db:f3:0f:8a:0c:73:c6:be:27:72:c4:2c:87:4f:23:89:35:
         a0:16:e0:e6:82:ae:02:ba:22:8a:af:7e:c2:28:41:20:fd:a6:
         44:92:3a:af:33:79:3b:cf:af:92:ec:34:b0:37:1d:24:1b:44:
         44:86:ee:83:82:23:e0:00:0a:dc:05:c1:3b:64:11:4f:8e:11:
         3f:16:15:ea:07:01:17:ce:98:bb:af:1e:54:73:f2:c8:3c:ab:
         05:00:c3:58:8f:63:db:7f:b8:b2:58:bf:c1:e3:e4:70:b8:95:
         17:ab:65:a1:ac:b6:a6:9a:6a:23:4e:bb:33:aa:82:3c:de:da:
         42:9d:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org