Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/1b11725e538d43a58f111f6a99dee87e0de6eb88.roa
File:                     1b11725e538d43a58f111f6a99dee87e0de6eb88.roa (raw, json)
Hash identifier:          4cfHnyl1qTPOY8YbwtTtZsp7tSEEBRFpHAzikcpfoEs=
Subject key identifier:   A0:FE:20:3D:66:99:CF:68:B6:CB:B3:F2:6C:61:B3:A7:90:FA:91:4D
Certificate issuer:       /CN=69dbd374c2a561eac76283ef20e457a087a19243
Certificate serial:       0D486C
Authority key identifier: 0B:D4:59:AC:B4:12:5D:9D:96:D3:DE:53:14:41:98:F9:21:92:91:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69dbd374c2a561eac76283ef20e457a087a19243.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/1b11725e538d43a58f111f6a99dee87e0de6eb88.roa
Signing time:             Wed 24 Mar 2021 14:33:13 +0000
ROA not before:           Wed 24 Mar 2021 14:33:13 +0000
ROA not after:            Tue 24 Mar 2026 14:33:13 +0000
asID:                     263784
IP address blocks:        138.121.96.0/22 maxlen: 22
                          170.247.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870508 (0xd486c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dbd374c2a561eac76283ef20e457a087a19243
        Validity
            Not Before: Mar 24 14:33:13 2021 GMT
            Not After : Mar 24 14:33:13 2026 GMT
        Subject: CN=1b11725e538d43a58f111f6a99dee87e0de6eb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:3a:fc:f1:6f:21:17:dd:1b:26:e8:8a:61:
                    f3:e9:ab:28:da:3a:d0:c2:97:ee:b0:91:98:da:0c:
                    39:52:04:b5:5c:19:97:99:e5:31:db:ba:2b:96:c7:
                    cb:04:a3:2e:86:5b:75:b7:77:ac:b3:5c:15:aa:46:
                    3d:89:58:8c:96:a9:e7:a0:f9:70:89:3f:2f:31:19:
                    5f:35:02:3e:ea:aa:16:a0:91:18:51:9e:97:55:cc:
                    80:72:03:04:55:2c:9c:d2:c8:1a:9a:98:b0:04:8f:
                    5c:c2:c4:31:01:8f:d6:c9:1f:a7:f6:87:51:00:53:
                    53:25:db:a4:47:01:cc:fa:cc:35:13:0d:dd:87:8a:
                    b9:29:82:19:45:b0:db:f6:c8:4d:bc:95:8b:e5:7c:
                    a8:20:c3:a9:1b:a2:16:25:ae:1e:5d:d4:52:06:80:
                    e6:1f:7f:4e:f6:63:65:64:4a:02:7a:7c:a3:d2:83:
                    85:ad:d5:89:9f:e7:21:f5:3e:dd:97:78:2a:ca:e1:
                    f6:18:52:b7:16:a5:99:9f:9f:6d:2f:f0:fe:f7:5b:
                    4b:20:b3:b4:e5:8f:fd:c8:c8:cb:a5:76:96:da:0d:
                    72:b1:41:b5:8d:a3:e4:1b:53:57:6d:fd:df:a0:66:
                    93:6b:a7:54:42:c6:28:a8:ea:ef:d6:e8:fd:d4:34:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FE:20:3D:66:99:CF:68:B6:CB:B3:F2:6C:61:B3:A7:90:FA:91:4D
            X509v3 Authority Key Identifier:
                keyid:0B:D4:59:AC:B4:12:5D:9D:96:D3:DE:53:14:41:98:F9:21:92:91:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69dbd374c2a561eac76283ef20e457a087a19243.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/1b11725e538d43a58f111f6a99dee87e0de6eb88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/69dbd374c2a561eac76283ef20e457a087a19243.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.96.0/22
                  170.247.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:27:af:70:d6:4c:b1:42:af:04:40:df:76:c1:9a:5f:58:97:
         b9:61:20:ed:56:dd:7d:2d:fb:fe:75:a4:fd:57:36:5c:3d:9f:
         67:fd:40:ff:cc:42:be:7c:a4:0f:bf:3e:cb:7b:12:1f:4a:48:
         51:cd:72:27:5e:cf:3b:08:55:c2:94:bf:03:41:ad:01:57:91:
         68:e9:a0:08:4a:a1:1f:68:85:f9:51:07:ba:ad:20:9d:5d:7f:
         82:dc:8b:f5:74:f6:e2:dc:f8:4d:58:b9:62:11:64:df:c5:76:
         61:59:c8:ef:2d:25:dc:00:8a:ba:40:e9:37:3f:cf:68:6a:69:
         9c:f4:3c:52:ba:ab:01:0f:9f:e4:d9:7b:cb:fc:35:43:1c:3f:
         d8:d5:ad:96:be:17:5e:ab:ab:6c:de:f5:14:4b:d5:35:a1:d0:
         15:99:30:d9:0e:3d:fe:ea:ac:d4:56:f3:e1:f5:3a:40:f1:7c:
         62:9a:96:35:5d:1f:2d:23:b8:82:cf:93:3d:77:82:8e:be:76:
         87:ce:d5:30:bb:41:dd:7b:5d:ef:49:f7:d9:35:2f:b1:6e:55:
         53:c2:ad:14:87:ae:1d:54:dd:07:10:59:56:62:c6:ff:cb:b8:
         5d:d7:9d:ac:00:21:62:f3:7f:70:3d:cf:e7:f2:1c:e8:db:a3:
         a0:6e:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org