Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/d8dc48d4be9becb9c871804d5dd4b4f61c69a74d.roa
File:                     d8dc48d4be9becb9c871804d5dd4b4f61c69a74d.roa (raw, json)
Hash identifier:          x0jOpzXVXu+6m8VXai3Qa19s/zAS1RYOoX5B5/p6Rug=
Subject key identifier:   DB:FC:D7:A0:CC:B0:02:72:60:81:7F:68:EA:14:0B:DD:C7:48:6D:B2
Certificate issuer:       /CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Certificate serial:       0D0BFD
Authority key identifier: 29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/d8dc48d4be9becb9c871804d5dd4b4f61c69a74d.roa
Signing time:             Wed 24 Mar 2021 14:32:14 +0000
ROA not before:           Wed 24 Mar 2021 14:32:14 +0000
ROA not after:            Tue 24 Mar 2026 14:32:14 +0000
asID:                     7303
IP address blocks:        138.121.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855037 (0xd0bfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
        Validity
            Not Before: Mar 24 14:32:14 2021 GMT
            Not After : Mar 24 14:32:14 2026 GMT
        Subject: CN=d8dc48d4be9becb9c871804d5dd4b4f61c69a74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:bd:f9:5e:3d:be:ca:a0:21:fc:c1:d8:95:
                    52:c2:19:be:fa:40:28:7f:ae:7c:bd:80:9d:37:40:
                    28:0b:8f:c5:c7:ff:b8:7d:13:79:61:d3:3b:1e:ef:
                    87:c8:e9:86:c6:dc:04:97:01:f5:f0:88:b9:11:b4:
                    d7:b9:89:7e:fe:30:64:66:9b:7e:ba:bd:0b:09:34:
                    ee:93:48:04:ad:fa:a1:09:78:63:5d:6b:cb:1c:fd:
                    87:5d:a6:88:c5:77:51:7d:af:99:d3:cc:9f:45:49:
                    55:fc:85:de:ee:23:9f:40:1b:32:d2:5e:36:c1:be:
                    41:54:a2:1c:a2:c1:d0:f9:8a:1a:9e:7a:2c:96:1e:
                    db:eb:a6:82:1d:25:59:5d:ce:82:77:65:55:fb:ac:
                    76:04:9c:5d:53:fb:dc:0f:27:d1:a6:95:ee:cd:7d:
                    0d:9d:5f:d8:b1:54:97:d9:4b:f6:26:34:37:44:72:
                    87:02:0e:1e:f8:1a:d2:78:63:2a:f0:dc:92:2e:48:
                    33:af:af:f3:75:6d:24:ff:81:3e:a8:47:a2:05:8f:
                    7e:7f:17:20:61:5a:2f:b6:48:18:c2:98:ca:f0:44:
                    ce:1c:35:6c:e3:06:90:4e:8f:e7:79:e4:10:44:58:
                    c5:1f:ca:30:b0:55:67:70:3c:46:1e:c2:c4:fb:b6:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FC:D7:A0:CC:B0:02:72:60:81:7F:68:EA:14:0B:DD:C7:48:6D:B2
            X509v3 Authority Key Identifier:
                keyid:29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/d8dc48d4be9becb9c871804d5dd4b4f61c69a74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:d7:a5:ab:cb:70:b6:52:e5:6b:20:f7:94:c2:33:24:0f:
         44:ef:b0:1b:eb:aa:ba:5f:9e:0c:44:dc:84:a9:01:1f:c6:b6:
         b7:47:02:7d:43:57:42:97:cd:73:6b:e4:35:61:d4:dc:ef:4a:
         a7:09:ac:d6:f6:b2:e6:d2:23:10:4f:a5:37:4e:27:98:5a:61:
         d2:5b:23:bd:5a:01:5f:3a:ea:01:db:50:f3:76:a3:60:a1:09:
         56:52:58:67:84:09:ad:b8:97:e9:f5:13:b2:5f:da:ac:c0:99:
         f0:4a:35:81:c9:23:cf:2c:1f:18:7b:21:03:36:43:41:7e:30:
         3f:73:56:89:bf:86:4e:ed:fc:1a:6d:3b:92:2a:1b:3e:2e:85:
         4b:c4:e5:69:71:5b:9c:eb:40:43:dc:95:1b:99:51:f7:91:77:
         2c:bd:9c:57:b6:8e:f4:44:a1:f1:ac:95:06:dd:d5:01:73:36:
         af:dd:1f:61:39:00:1d:9e:07:91:ff:3b:11:37:2a:77:0a:23:
         ec:a5:f3:e2:1f:ac:7b:a4:9a:55:02:31:45:aa:02:08:93:0f:
         b9:94:85:a9:30:02:32:5a:36:5a:91:54:81:fc:0e:57:73:84:
         5b:17:48:67:1d:6d:43:33:79:a1:df:f0:88:70:a4:0b:0c:d1:
         f4:bc:29:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org