Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/ac28f4ae6a8bfb4735fd9bcc99609bf6c06c09d1.roa
File:                     ac28f4ae6a8bfb4735fd9bcc99609bf6c06c09d1.roa (raw, json)
Hash identifier:          ckFZ2RrVJnPyQTWpurcnkXZwKAEl3CQRDoFkNyzaVag=
Subject key identifier:   55:D9:3B:ED:EE:19:76:0A:20:89:E4:5E:62:B1:C1:DB:CF:B3:E9:2C
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       0B7392
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/ac28f4ae6a8bfb4735fd9bcc99609bf6c06c09d1.roa
Signing time:             Wed 24 Mar 2021 14:32:12 +0000
ROA not before:           Wed 24 Mar 2021 14:32:12 +0000
ROA not after:            Tue 24 Mar 2026 14:32:12 +0000
asID:                     263793
IP address blocks:        138.117.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750482 (0xb7392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Mar 24 14:32:12 2021 GMT
            Not After : Mar 24 14:32:12 2026 GMT
        Subject: CN=ac28f4ae6a8bfb4735fd9bcc99609bf6c06c09d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:80:18:89:7d:3e:c7:c0:4d:01:29:34:d1:
                    63:e8:81:2b:9d:1c:5b:c6:20:35:45:85:1c:72:f7:
                    0e:27:6d:8d:17:03:04:f2:6e:97:d8:ce:17:5d:e8:
                    92:04:f8:c5:d2:cd:90:f3:a7:1e:bf:43:2c:6f:34:
                    eb:a4:fb:1e:9b:9d:ba:9e:b9:8f:68:bd:ad:97:b1:
                    43:80:9c:36:df:7a:4c:10:ba:a3:7b:30:8a:c2:8f:
                    4f:bf:95:a7:64:5e:08:48:80:50:ff:ee:8c:11:ee:
                    f3:4c:e3:04:7c:e8:93:0b:08:11:c3:d2:c4:02:80:
                    8f:ad:12:aa:bc:fd:96:c2:88:47:6f:73:09:19:76:
                    8f:1d:75:f2:fb:4a:38:f1:26:72:4e:66:80:14:8b:
                    ff:b7:f5:b5:15:44:0c:bb:95:06:03:12:0d:5d:77:
                    51:64:fc:4c:72:98:2c:62:6d:79:f1:a3:d6:91:dd:
                    a9:4c:d8:2c:e8:03:82:ef:68:9a:6b:47:be:01:d5:
                    8b:ff:3c:f1:46:2e:34:a7:1e:95:3b:9e:97:5f:fe:
                    e3:a1:df:18:8d:dc:1d:dc:bf:e9:dc:ba:41:e2:74:
                    a3:39:3c:ca:4d:26:9b:ee:48:07:35:aa:67:00:a8:
                    d0:91:49:9f:4a:33:53:4f:4e:c2:af:4d:9a:5e:90:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D9:3B:ED:EE:19:76:0A:20:89:E4:5E:62:B1:C1:DB:CF:B3:E9:2C
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/ac28f4ae6a8bfb4735fd9bcc99609bf6c06c09d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:03:04:d2:a7:3e:83:65:17:ae:3a:80:8b:0f:fa:99:87:03:
         80:11:ae:0c:e6:26:05:51:46:7b:4e:97:7d:9d:0e:05:b7:95:
         88:2a:dd:6a:c5:3b:c2:58:fe:53:64:53:ec:c4:8b:e4:6b:9c:
         2f:de:4b:24:64:65:33:5c:59:1f:9e:e5:fb:93:2e:6a:13:e1:
         3a:01:a6:16:80:cd:06:2c:88:42:63:cb:ef:a4:8c:a7:bb:23:
         60:a0:7a:28:27:c3:4b:ee:af:fd:73:13:61:25:6b:81:98:76:
         1a:6d:ec:72:5d:e4:69:34:25:1f:1f:51:ec:7a:ab:83:7a:7a:
         60:d6:a7:1b:10:35:48:c5:f3:5a:c4:51:6a:6d:b8:80:18:10:
         de:8d:89:de:c8:67:15:da:09:25:ef:22:f1:d8:e0:12:da:53:
         d1:0c:3a:ef:36:df:ac:8b:b8:e3:13:e9:e0:4d:5e:00:96:a7:
         6c:82:60:03:a8:2c:e1:76:89:df:85:b8:53:5f:bd:db:c6:c8:
         4d:2f:57:ea:cf:9a:22:30:8b:07:55:a6:85:8e:a8:80:30:dd:
         e1:d1:7c:7b:70:47:6b:50:6c:81:f2:32:d5:25:54:cd:74:a8:
         bf:79:c1:c6:de:95:6c:59:15:09:bc:14:d7:ab:5d:00:29:02:
         ba:ba:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org