Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/ffbc28bcdbf606ca7e754fa0e89546bab90df2c4.roa
File:                     ffbc28bcdbf606ca7e754fa0e89546bab90df2c4.roa (raw, json)
Hash identifier:          KSpXSrZ3+bv6u13iw77/3CnUf7uIhbTWBw/oPXWqWA8=
Subject key identifier:   9F:84:69:C1:5D:C7:C9:61:E7:51:5A:7C:35:5A:6F:E4:92:AE:85:A2
Certificate issuer:       /CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
Certificate serial:       185899
Authority key identifier: 9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/ffbc28bcdbf606ca7e754fa0e89546bab90df2c4.roa
Signing time:             Thu 07 Jul 2022 03:27:02 +0000
ROA not before:           Fri 01 Jul 2022 03:00:00 +0000
ROA not after:            Sun 07 Jul 2024 03:00:00 +0000
asID:                     23470
IP address blocks:        138.204.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595545 (0x185899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
        Validity
            Not Before: Jul  1 03:00:00 2022 GMT
            Not After : Jul  7 03:00:00 2024 GMT
        Subject: CN=ffbc28bcdbf606ca7e754fa0e89546bab90df2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:1b:53:af:79:15:c2:17:44:58:37:c9:39:
                    a8:9f:bf:90:b7:93:a1:61:e7:20:7c:33:ae:65:c4:
                    42:6e:04:d1:b4:65:f0:43:d9:41:da:f4:3c:3e:99:
                    cd:be:22:4d:27:f3:a2:4a:94:af:d2:56:f6:7d:27:
                    a1:78:af:8c:a6:d9:39:14:83:10:9c:92:9b:56:4f:
                    0f:11:1e:b2:58:4f:a4:e3:6d:d0:61:2e:c8:64:42:
                    1c:16:bb:80:71:33:27:2e:1a:6b:50:89:7b:ee:0c:
                    11:29:3d:8f:4a:51:80:7a:d0:ad:2f:b1:be:8d:cc:
                    ed:73:06:be:fd:9e:bd:55:ce:6b:6c:d6:1b:1f:6d:
                    39:26:25:01:74:36:75:93:e2:9b:16:47:40:0f:6b:
                    f7:0c:65:6f:56:a3:9a:b8:d7:4f:18:0a:60:23:6a:
                    a4:85:64:bf:ad:70:58:d1:0e:dc:a0:d0:7c:88:b8:
                    dd:ec:8b:bc:fe:9a:63:81:5b:c9:ea:77:cf:4d:90:
                    ab:a9:a2:80:fc:13:1c:fc:77:9b:62:28:20:c4:94:
                    be:17:8f:1a:f7:a8:79:9c:58:06:1d:f1:6c:07:db:
                    45:88:68:22:56:6d:38:76:7a:44:fd:38:45:ef:bf:
                    1c:d3:56:83:9b:4d:ab:51:28:21:c4:e3:bc:d7:ef:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:84:69:C1:5D:C7:C9:61:E7:51:5A:7C:35:5A:6F:E4:92:AE:85:A2
            X509v3 Authority Key Identifier:
                keyid:9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/ffbc28bcdbf606ca7e754fa0e89546bab90df2c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c3:5b:3c:1b:17:7c:35:3e:98:bd:4d:01:94:8f:e8:5d:a1:
         93:90:27:59:25:d4:54:90:96:d4:53:31:bd:f6:2d:53:1f:a4:
         27:e9:75:9d:3b:a1:f4:b4:d2:eb:bb:57:56:ad:44:e4:83:a8:
         d3:cb:e1:8c:d5:ae:e3:23:d4:49:b4:b1:4b:f3:79:6a:60:20:
         2c:b2:51:66:9e:66:6c:03:00:9f:47:1b:ee:2d:04:c7:ff:ed:
         c0:9d:ae:d7:ac:3a:63:ca:9f:67:e3:ac:a0:8f:6f:34:37:20:
         1e:8d:f9:9c:13:a8:14:a2:40:b1:99:70:cf:75:ab:fb:02:9d:
         ce:e6:0e:25:f8:52:eb:e0:1e:be:56:77:ae:25:d2:fd:cf:51:
         49:36:11:68:da:db:3b:17:ba:cc:b5:de:d0:5b:58:53:22:65:
         40:88:6d:7e:19:b3:31:2d:fd:05:3e:87:46:87:93:83:89:b6:
         3e:38:c9:71:eb:20:4a:95:0d:d6:8e:08:1b:f9:c1:e7:96:55:
         17:c9:33:a1:19:f3:a5:d4:fe:f9:8d:6b:83:be:e9:b1:6a:67:
         ae:b2:72:3c:e2:8a:ec:a4:ed:4f:69:fb:5f:c6:37:62:8c:4a:
         b0:b3:e0:59:16:af:ab:29:ef:e6:2c:dc:04:d7:7e:54:6b:7e:
         47:b2:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org