Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b.roa
File:                     a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b.roa (raw, json)
Hash identifier:          hYMsEY3hctY9zFLdJqw76EWOaSTR1079UxRR3pd6JcY=
Subject key identifier:   79:45:C6:F4:A1:FD:1D:2E:C2:62:D7:6A:7C:47:16:57:31:04:E0:DE
Certificate issuer:       /CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
Certificate serial:       185A99
Authority key identifier: 9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b.roa
Signing time:             Thu 07 Jul 2022 03:51:03 +0000
ROA not before:           Fri 01 Jul 2022 03:00:00 +0000
ROA not after:            Sun 07 Jul 2024 03:00:00 +0000
asID:                     263795
IP address blocks:        138.204.108.0/24 maxlen: 24
                          138.204.109.0/24 maxlen: 24
                          138.204.110.0/24 maxlen: 24
                          190.105.168.0/22 maxlen: 22
                          2803:ac40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596057 (0x185a99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
        Validity
            Not Before: Jul  1 03:00:00 2022 GMT
            Not After : Jul  7 03:00:00 2024 GMT
        Subject: CN=a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:46:8e:9c:b5:a0:3d:5f:eb:e0:08:a8:83:
                    28:81:65:55:76:ba:31:32:ce:2a:74:a9:8e:d6:86:
                    be:53:5a:8f:03:e6:f7:bd:e0:06:68:12:63:c3:ce:
                    53:34:30:5e:0c:39:1e:72:6b:bc:74:a0:c1:2e:91:
                    01:a9:97:c6:5c:12:ec:93:f9:8d:d3:58:cf:ca:bc:
                    55:30:de:29:eb:a0:16:83:bf:0b:cd:61:03:1a:ab:
                    fb:88:03:e9:54:80:63:a2:f4:ca:19:a5:e8:5a:02:
                    2a:21:c7:f9:75:49:d8:28:99:ef:44:e9:5e:db:40:
                    c0:3e:9d:16:1b:3a:13:3f:27:4d:96:da:7c:7f:cc:
                    36:be:e0:c8:8c:34:8c:11:3c:c4:31:0e:56:7d:a6:
                    f4:71:7c:6d:b6:a2:e4:89:ba:26:73:f7:d9:9f:a4:
                    6a:34:4d:fb:79:7f:48:04:bc:a4:b1:60:3f:85:7a:
                    08:14:46:ae:01:cc:78:0e:f2:0c:bc:3a:e5:1a:89:
                    90:6a:86:ad:f0:06:40:90:c0:06:4f:3d:ff:0f:c3:
                    60:1e:e6:2d:24:ab:82:51:ce:e4:17:62:83:52:b2:
                    fe:14:e8:6f:c8:61:09:0b:d5:4c:d6:39:17:35:58:
                    79:a8:6b:80:73:1e:1f:9d:f2:68:af:de:c9:b6:18:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:45:C6:F4:A1:FD:1D:2E:C2:62:D7:6A:7C:47:16:57:31:04:E0:DE
            X509v3 Authority Key Identifier:
                keyid:9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.108.0-138.204.110.255
                  190.105.168.0/22
                IPv6:
                  2803:ac40::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:c9:bb:c4:8b:f4:be:71:58:c2:6e:70:7d:29:a5:13:1e:
         61:79:30:02:6e:9a:69:91:c6:18:39:7b:00:3c:67:89:4e:47:
         7d:99:0f:56:3f:ca:ea:1a:2b:c7:a1:5b:25:4d:d1:ac:4d:6c:
         07:4c:80:55:36:8a:f8:87:5e:b9:c5:fd:32:6d:4f:c2:fa:78:
         f9:09:35:eb:81:1d:0a:6d:bb:f1:4d:4d:91:b5:c7:4e:dd:54:
         20:d7:89:1f:5f:6b:ec:10:19:91:66:cb:ef:7b:df:91:f5:d9:
         d5:dd:1c:19:98:04:1d:46:7f:16:88:e4:2f:38:25:20:db:7c:
         16:19:b1:29:59:42:74:19:f4:b3:e6:0c:78:df:e4:ea:29:e4:
         f4:de:90:95:71:8d:03:33:f8:97:36:ae:80:ac:69:80:50:0a:
         c8:d6:e0:c1:f3:47:bf:15:5f:d8:66:7b:0c:96:fd:b2:26:53:
         7b:31:6f:10:b6:84:2f:74:c7:23:4e:46:42:6d:75:ca:34:b1:
         a4:04:a5:52:c6:29:6a:36:a8:56:24:02:eb:12:84:01:c6:b8:
         4d:34:13:8c:66:9e:ee:ce:ae:59:00:47:22:45:3c:41:c2:1a:
         f2:3a:8a:ee:20:cc:f8:8e:49:c0:e3:12:59:4c:ea:f3:37:df:
         6c:1c:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org