Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/3ded578f16da883f298692cf5fbd9f3ea641c75d.roa
File:                     3ded578f16da883f298692cf5fbd9f3ea641c75d.roa (raw, json)
Hash identifier:          scpCcMCGfUOqbwmEn7qahHd5RKyZEEHlcuTNtaO+lZk=
Subject key identifier:   21:F7:97:F6:D3:F3:F6:52:26:F0:D3:4B:45:A4:FA:6E:15:5D:EB:25
Certificate issuer:       /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial:       0DAB9D
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/3ded578f16da883f298692cf5fbd9f3ea641c75d.roa
Signing time:             Wed 24 Mar 2021 14:47:42 +0000
ROA not before:           Wed 24 Mar 2021 14:47:41 +0000
ROA not after:            Tue 24 Mar 2026 14:47:41 +0000
asID:                     264660
IP address blocks:        138.186.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895901 (0xdab9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
        Validity
            Not Before: Mar 24 14:47:41 2021 GMT
            Not After : Mar 24 14:47:41 2026 GMT
        Subject: CN=3ded578f16da883f298692cf5fbd9f3ea641c75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:ca:24:45:f9:61:7d:99:be:c1:da:48:98:
                    75:13:5b:2e:15:a9:ee:25:f5:43:21:ca:eb:e8:a1:
                    13:1a:95:63:c2:0e:a7:29:5a:52:e0:02:2b:72:bf:
                    e3:97:f8:7b:1d:02:a6:46:b2:91:ad:ca:91:73:dd:
                    e9:7b:a4:0f:d0:e0:5c:6b:f0:f4:ae:23:74:a4:11:
                    ce:60:10:32:db:c6:f7:ad:a6:52:be:2a:e8:bc:3a:
                    00:f6:62:ca:70:21:c4:de:48:e9:f2:14:8c:48:81:
                    88:27:88:a5:b9:43:05:db:43:08:42:99:1f:12:56:
                    12:37:e1:b3:0e:22:9f:7f:e5:36:63:db:07:d4:64:
                    ae:b9:84:02:fd:7f:d9:44:3b:98:ad:19:e5:d3:a5:
                    d0:6d:c3:e5:b9:6d:2d:94:6a:00:e6:b5:ce:32:de:
                    f6:15:3f:65:1d:59:bf:4e:36:9b:24:12:34:44:64:
                    ed:d3:b1:35:19:bb:aa:fe:03:a5:5d:4e:1a:5b:ea:
                    e8:f0:24:eb:ae:da:24:6f:07:29:cb:d2:57:01:7b:
                    66:4f:b3:cd:b5:f9:e3:ca:9d:c9:78:1d:44:e0:7b:
                    9d:b0:88:43:97:54:37:27:6a:c9:e0:45:09:bb:32:
                    ea:df:59:e7:e1:70:c8:c7:b5:59:1d:00:e0:b3:ef:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F7:97:F6:D3:F3:F6:52:26:F0:D3:4B:45:A4:FA:6E:15:5D:EB:25
            X509v3 Authority Key Identifier:
                keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/3ded578f16da883f298692cf5fbd9f3ea641c75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:29:ce:30:db:4b:42:79:ea:a9:47:87:25:d9:84:17:3c:e1:
         14:85:9b:4c:be:5f:e9:ec:86:27:ad:ba:2f:76:00:cd:65:a5:
         9c:4c:03:8b:d5:e7:df:79:2d:24:47:1c:b6:aa:67:ce:48:21:
         d6:00:df:90:af:f3:9e:81:8d:d9:48:29:f2:d7:27:13:17:9c:
         c5:cd:5a:7c:85:16:b7:cf:32:7d:0d:7c:3a:81:b9:18:64:88:
         60:0a:e8:1e:73:98:28:46:66:d4:82:f9:c9:b9:10:89:98:8c:
         0c:24:c3:bc:8c:0c:42:fe:dd:2a:c4:28:11:e3:61:58:89:ed:
         94:08:04:5d:ff:73:e8:13:cb:8f:f5:7b:f8:a3:e2:8d:d8:ca:
         ab:4f:00:45:ee:59:66:7b:7a:b3:64:d6:0d:fb:fa:1f:b5:0f:
         10:d9:05:60:66:3f:82:72:5b:b9:6c:c0:f8:a9:0a:1c:b5:0e:
         b8:38:9b:c8:cf:2e:f0:bb:40:65:c9:9e:48:e4:e1:e4:38:0c:
         03:10:f0:73:5a:87:69:e1:4b:51:f2:23:b8:16:18:d3:e1:c7:
         b6:80:06:1f:d0:3c:56:c5:a8:73:c0:87:0d:3e:fb:bb:46:32:
         d5:16:ed:1c:28:4b:33:e3:fa:bf:06:c3:70:03:7d:3f:17:32:
         3a:b5:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org