Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/6217e26042f9e7fe7bf59f81882ac4901d56e9ad.roa
File:                     6217e26042f9e7fe7bf59f81882ac4901d56e9ad.roa (raw, json)
Hash identifier:          iukGPqGNPClH4Ckw8B1OsbMsf0wPaFEJVK+aU5tINXY=
Subject key identifier:   2D:4B:0B:A2:7E:DE:75:12:49:77:80:A4:48:DA:22:73:CF:AF:84:AF
Certificate issuer:       /CN=551ee44031263fb7ea75afe75460eef74dd1f0a1
Certificate serial:       12242D
Authority key identifier: 82:94:DF:54:9D:3E:AE:0B:3F:B8:48:AE:A9:5C:07:B5:4C:33:21:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/551ee44031263fb7ea75afe75460eef74dd1f0a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/6217e26042f9e7fe7bf59f81882ac4901d56e9ad.roa
Signing time:             Mon 27 Nov 2023 07:30:00 +0000
ROA not before:           Mon 27 Nov 2023 07:30:00 +0000
ROA not after:            Wed 26 Nov 2025 07:30:00 +0000
asID:                     264634
IP address blocks:        138.219.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188909 (0x12242d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551ee44031263fb7ea75afe75460eef74dd1f0a1
        Validity
            Not Before: Nov 27 07:30:00 2023 GMT
            Not After : Nov 26 07:30:00 2025 GMT
        Subject: CN=6217e26042f9e7fe7bf59f81882ac4901d56e9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ac:d0:11:1c:8b:18:d3:58:bf:f8:16:a8:9e:
                    0b:52:63:4d:e7:ae:77:aa:36:4d:0b:23:9f:6e:30:
                    ef:13:13:77:d2:d6:c9:d4:72:c1:e9:26:b6:98:02:
                    a1:53:dc:c1:bf:3b:8c:3b:ab:6e:94:65:73:05:e1:
                    47:68:7a:42:0b:2c:ee:28:9c:fa:a1:8a:a5:4a:c7:
                    09:34:1e:8a:df:d6:7c:f3:33:3e:af:40:dc:10:f7:
                    43:38:06:40:45:69:23:25:db:29:05:7b:82:25:c5:
                    bd:8f:2f:7e:63:c7:be:72:4a:27:5f:64:c0:39:a9:
                    be:1d:7d:88:c6:60:1c:c4:f9:23:e5:d7:be:71:5e:
                    68:fd:7c:3f:dd:de:61:23:ca:12:16:4d:40:19:ec:
                    bb:f1:35:77:3d:d3:1f:83:50:15:2f:e2:b7:c5:02:
                    d7:f8:6a:17:41:c5:d9:25:00:fe:04:88:74:89:60:
                    2d:7f:c3:45:52:99:67:21:bd:8d:fa:c8:6f:6e:85:
                    42:5b:6a:92:c2:11:01:ce:69:91:79:85:34:e8:bb:
                    94:ac:f5:fb:d4:a2:13:16:c8:a2:c2:3a:65:39:e7:
                    3c:8c:81:2a:3e:de:a0:3f:cb:bb:14:60:6f:03:13:
                    68:2c:34:a3:23:2b:90:52:1f:45:b7:e4:3b:e4:30:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4B:0B:A2:7E:DE:75:12:49:77:80:A4:48:DA:22:73:CF:AF:84:AF
            X509v3 Authority Key Identifier:
                keyid:82:94:DF:54:9D:3E:AE:0B:3F:B8:48:AE:A9:5C:07:B5:4C:33:21:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/551ee44031263fb7ea75afe75460eef74dd1f0a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/6217e26042f9e7fe7bf59f81882ac4901d56e9ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/551ee44031263fb7ea75afe75460eef74dd1f0a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:11:a2:b0:69:b9:aa:7c:84:33:1d:98:e6:93:39:80:33:
         93:89:2b:82:d0:bd:e3:2a:48:7b:fb:84:4d:1b:8a:e7:a4:b9:
         bb:86:9b:65:2d:76:78:87:d5:fc:90:0d:ca:70:f8:02:bf:2e:
         5c:10:e9:5a:75:cc:4e:ba:47:0a:52:77:48:0e:be:f7:cb:a1:
         d8:78:16:38:c8:6a:00:07:a6:35:c8:52:14:66:fe:d6:31:e2:
         b0:f4:4b:09:72:0d:2d:2f:ef:f5:69:d6:c4:c3:6f:94:80:0b:
         03:36:fb:a0:2a:c6:24:da:da:33:52:11:d9:13:3e:4a:48:7f:
         06:cb:39:4d:dc:bd:c1:e2:a9:df:41:0c:cc:d7:a4:79:d6:6f:
         d2:fb:33:39:0c:fe:13:73:cc:f2:26:fb:f8:2f:1f:43:ef:ba:
         e2:c9:85:3a:0a:d2:aa:84:ca:d1:2b:eb:ba:55:3f:12:52:a7:
         f8:93:0d:99:35:fd:92:5e:fd:b4:93:9e:fc:43:c4:32:07:91:
         99:64:5b:e6:93:5c:61:b5:5f:00:74:8c:aa:5c:00:76:5b:8d:
         b8:d3:6b:25:39:b4:77:6f:ff:e9:02:e5:60:30:16:4d:d2:c5:
         10:0b:c7:29:fe:07:d0:48:f5:e0:a4:c4:6d:fe:14:ef:9e:86:
         ab:59:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org