Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/136465c70f3bf92fbfefe201e48c73bfb785bf70.roa
File:                     136465c70f3bf92fbfefe201e48c73bfb785bf70.roa (raw, json)
Hash identifier:          +gHyPjvfdhOLyI94ZQRNAjTrw4AMP4ujBFx++oIFqXQ=
Subject key identifier:   9E:9E:44:2B:90:E7:33:ED:43:17:A3:46:3B:8A:9E:89:C4:79:A9:87
Certificate issuer:       /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial:       0B6754
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/136465c70f3bf92fbfefe201e48c73bfb785bf70.roa
Signing time:             Sat 09 Jul 2022 02:25:17 +0000
ROA not before:           Fri 08 Jul 2022 03:00:00 +0000
ROA not after:            Wed 14 Mar 2029 03:00:00 +0000
asID:                     14593
IP address blocks:        138.84.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747348 (0xb6754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
        Validity
            Not Before: Jul  8 03:00:00 2022 GMT
            Not After : Mar 14 03:00:00 2029 GMT
        Subject: CN=136465c70f3bf92fbfefe201e48c73bfb785bf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:e7:71:ba:ac:82:ec:28:38:5c:77:2f:7a:
                    90:1b:f5:02:63:f8:25:84:21:3f:bd:07:6f:44:ef:
                    b3:2c:5b:4d:2d:10:fd:f4:e4:29:38:53:2b:09:4d:
                    f9:72:5d:9d:05:2f:3b:75:99:7a:06:b7:61:c8:c2:
                    50:b9:7e:99:96:a0:4a:b9:67:6a:aa:9b:5d:ce:4d:
                    f2:13:40:b9:0b:c5:58:e2:30:02:7a:af:b4:8b:b9:
                    dd:f4:60:08:34:76:36:5c:03:b1:8b:f8:1e:99:e0:
                    ef:ef:c9:da:4f:3d:60:1c:f5:cb:91:f6:46:3b:7b:
                    1f:c8:bc:44:11:54:c0:13:0f:15:b3:6f:cb:51:49:
                    a0:39:4b:b3:c0:6d:f5:ea:33:9f:0a:2c:11:85:6c:
                    d6:92:c0:ba:82:8f:1c:84:f8:51:23:46:46:fd:ce:
                    1e:5d:a6:ae:90:d5:85:33:22:7f:8a:b7:ad:26:ac:
                    be:4e:3c:91:d7:38:09:4d:fa:b6:e4:0a:c1:23:10:
                    6c:74:ea:ea:bd:fb:00:da:bb:34:30:99:e8:b4:ba:
                    c0:17:e7:44:08:3f:02:97:94:fd:84:c0:86:87:78:
                    ec:fe:15:5d:d7:3e:43:cd:ab:e9:bc:73:35:1f:d3:
                    50:b9:af:b7:cb:4e:cd:93:e0:50:c4:40:a8:2f:2f:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9E:44:2B:90:E7:33:ED:43:17:A3:46:3B:8A:9E:89:C4:79:A9:87
            X509v3 Authority Key Identifier:
                keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/136465c70f3bf92fbfefe201e48c73bfb785bf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:a2:4e:47:4d:52:32:c4:86:48:c0:da:4e:41:5e:f0:71:98:
         85:84:f6:3d:61:ac:29:c1:a1:40:d6:53:eb:68:f7:03:c9:ed:
         75:c1:ab:9f:6a:0a:56:8a:ce:06:db:11:e0:53:bf:a2:99:2d:
         1f:ee:b7:ca:31:35:28:bc:b3:9a:db:4e:42:d9:38:fe:c1:41:
         0a:0d:d0:92:96:4e:a1:83:06:16:4c:fe:10:1e:c3:6c:21:6c:
         e6:cb:32:f9:c1:0e:5f:da:90:26:f8:8d:9e:81:ab:31:60:df:
         cc:85:7e:35:f4:95:6d:1e:69:b3:50:6f:56:61:65:39:20:ad:
         0c:a2:11:ff:ee:72:d0:e0:02:3d:fa:e0:26:d6:8b:46:92:e3:
         16:f3:f6:b6:80:aa:d8:07:7b:ca:c5:44:37:73:ae:da:37:f5:
         91:f7:9f:29:66:b3:8a:a5:9c:84:f0:73:93:a1:a6:42:07:59:
         a3:cc:21:44:4e:1c:d3:dd:1f:79:18:92:d4:e2:6c:f4:a8:24:
         c7:12:06:e7:a9:bf:4f:d2:7d:8f:34:44:07:c9:a7:16:2b:fa:
         4b:27:d5:1b:db:a8:c0:e0:9f:03:8b:90:af:c7:78:41:4f:c0:
         66:c1:1d:5e:81:15:82:1a:4b:38:b9:54:b8:3f:c8:60:a6:65:
         c2:ae:62:2b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC2dUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZm
Zjc1ZTljZGU4NmI1YzQ5MGQxNzFhODk5MzI2N2UyMzI3MDc4N2EwHhcNMjIwNzA4
MDMwMDAwWhcNMjkwMzE0MDMwMDAwWjAzMTEwLwYDVQQDEygxMzY0NjVjNzBmM2Jm
OTJmYmZlZmUyMDFlNDhjNzNiZmI3ODViZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA15fncbqsguwoOFx3L3qQG/UCY/glhCE/vQdvRO+zLFtNLRD9
9OQpOFMrCU35cl2dBS87dZl6BrdhyMJQuX6ZlqBKuWdqqptdzk3yE0C5C8VY4jAC
eq+0i7nd9GAINHY2XAOxi/gemeDv78naTz1gHPXLkfZGO3sfyLxEEVTAEw8Vs2/L
UUmgOUuzwG316jOfCiwRhWzWksC6go8chPhRI0ZG/c4eXaaukNWFMyJ/iretJqy+
TjyR1zgJTfq25ArBIxBsdOrqvfsA2rs0MJnotLrAF+dECD8Cl5T9hMCGh3js/hVd
1z5DzavpvHM1H9NQua+3y07Nk+BQxECoLy+Y6wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ6eRCuQ5zPtQxejRjuKnonEeamHMB8GA1UdIwQYMBaAFJWmZw95jexuNC+g
Gb+b2Ie6oOIjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmZmNzVl
OWNkZTg2YjVjNDkwZDE3MWE4OTkzMjY3ZTIzMjcwNzg3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjk1YTU1ZTgtZmIzMS00OTg3LWFjOGQtMzQzZGY5
N2ZmMzg3LzEzNjQ2NWM3MGYzYmY5MmZiZmVmZTIwMWU0OGM3M2JmYjc4NWJmNzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yOTVhNTVlOC1mYjMxLTQ5ODctYWM4ZC0zNDNk
Zjk3ZmYzODcvNmZmNzVlOWNkZTg2YjVjNDkwZDE3MWE4OTkzMjY3ZTIzMjcwNzg3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBYpUIDANBgkqhkiG9w0BAQsFAAOCAQEAD6JOR01SMsSGSMDa
TkFe8HGYhYT2PWGsKcGhQNZT62j3A8ntdcGrn2oKVorOBtsR4FO/opktH+63yjE1
KLyzmttOQtk4/sFBCg3QkpZOoYMGFkz+EB7DbCFs5ssy+cEOX9qQJviNnoGrMWDf
zIV+NfSVbR5ps1BvVmFlOSCtDKIR/+5y0OACPfrgJtaLRpLjFvP2toCq2Ad7ysVE
N3Ou2jf1kfefKWaziqWchPBzk6GmQgdZo8whRE4c090feRiS1OJs9KgkxxIG56m/
T9J9jzREB8mnFiv6SyfVG9uowOCfA4uQr8d4QU/AZsEdXoEVghpLOLlUuD/IYKZl
wq5iKw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org