Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/ae9f730a722c9500c5b2f6ed09eec9bbed137046.roa
File:                     ae9f730a722c9500c5b2f6ed09eec9bbed137046.roa (raw, json)
Hash identifier:          yBam1AkeOhqConxACQjhWjEB1PDDIVquoz8UnVoDayY=
Subject key identifier:   9A:15:C7:B0:E9:D5:29:4D:18:AB:1B:78:62:E2:BC:1E:A0:65:6E:5A
Certificate issuer:       /CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Certificate serial:       1A7C8F
Authority key identifier: 29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/ae9f730a722c9500c5b2f6ed09eec9bbed137046.roa
Signing time:             Wed 14 Sep 2022 14:48:29 +0000
ROA not before:           Wed 14 Sep 2022 14:48:29 +0000
ROA not after:            Tue 14 Sep 2027 14:48:29 +0000
asID:                     7303
IP address blocks:        138.121.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735823 (0x1a7c8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
        Validity
            Not Before: Sep 14 14:48:29 2022 GMT
            Not After : Sep 14 14:48:29 2027 GMT
        Subject: CN=ae9f730a722c9500c5b2f6ed09eec9bbed137046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:c3:0c:d7:45:f3:58:17:53:58:d2:39:d9:
                    40:19:ff:46:cd:99:8e:44:7c:38:59:7a:07:d0:04:
                    8b:a1:96:ef:5c:72:85:19:5b:26:b4:b8:3f:ca:83:
                    2e:86:35:4d:13:67:c5:cb:f4:13:f7:9b:7c:71:a4:
                    cd:e4:06:d9:39:72:71:75:7a:58:73:ee:fc:f0:e2:
                    76:7a:34:dd:de:90:96:f0:ae:bd:e4:01:e5:e3:0d:
                    a4:40:b9:b3:50:fa:7f:fd:ea:f7:7a:7d:d5:44:f1:
                    33:98:59:07:cc:5b:3f:da:5c:25:d4:45:62:73:78:
                    cd:c2:b3:83:61:c0:bd:30:5a:5d:60:4a:97:1c:b0:
                    ff:25:d8:b8:87:66:75:ab:64:87:fe:3d:73:eb:5d:
                    68:d3:15:b9:a6:58:be:6e:8d:4d:70:95:cf:b3:cf:
                    9c:0b:63:a0:81:fd:8c:4c:89:2e:3b:25:af:96:87:
                    e3:24:e5:46:83:f7:0c:e0:d9:ba:20:fb:2f:13:c9:
                    85:7f:c2:ff:fc:10:86:e6:91:bf:78:cc:5b:90:d2:
                    f7:e7:02:86:be:30:c3:d1:21:5e:cf:1a:7d:13:4e:
                    53:d6:cb:1f:ba:c7:56:7f:59:6c:5e:98:61:91:72:
                    6d:86:46:26:f4:cd:4a:28:9f:17:5d:f7:ff:f9:17:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:15:C7:B0:E9:D5:29:4D:18:AB:1B:78:62:E2:BC:1E:A0:65:6E:5A
            X509v3 Authority Key Identifier:
                keyid:29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/ae9f730a722c9500c5b2f6ed09eec9bbed137046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:9b:e4:64:7b:1f:1e:2a:8e:0a:a2:9a:7f:9d:6b:b8:2d:
         cb:2b:4b:47:6f:be:c5:99:67:fc:17:5f:17:62:53:c4:71:5f:
         7b:27:b2:cb:22:df:1f:91:5f:e9:3a:38:f3:d2:2f:9f:28:90:
         70:db:a1:31:57:fd:85:0e:98:a5:ed:4d:5a:d3:7b:02:6a:2d:
         9e:db:fb:8a:18:12:af:59:09:eb:96:75:e0:8f:5b:dd:ad:aa:
         3f:6f:94:d6:a5:67:fb:83:bb:8f:3d:0d:96:b1:57:b9:a8:32:
         37:16:35:27:8f:fc:09:dc:f4:67:3f:22:e7:fd:34:44:2f:b3:
         68:22:e1:e7:b4:1d:84:04:0e:3b:c3:a3:d7:5b:12:2e:9e:27:
         1b:ce:34:8f:f9:14:6b:50:24:31:1f:42:fa:e3:61:08:59:2c:
         f6:8b:d7:29:c8:00:9c:3e:5e:9b:4c:8e:ca:ce:07:a3:7f:06:
         36:5c:45:a8:94:d5:6a:87:eb:77:c1:60:2d:13:82:d9:34:68:
         22:20:0e:bc:ef:e9:b2:10:4f:24:6d:6e:ed:69:94:48:95:03:
         98:c0:96:d3:cc:96:bc:44:32:e2:cb:ac:a7:7f:2c:e0:b4:f5:
         20:f3:f2:e8:b1:b3:68:fe:45:fe:0e:5a:da:32:3a:df:72:20:
         91:65:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org