Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/e3097c5f7d6126993a009091aa81fad78540d96d.roa
File:                     e3097c5f7d6126993a009091aa81fad78540d96d.roa (raw, json)
Hash identifier:          iE80onVKf+IY75NQHpt1SsF6cTrRoi+Lx786fBTtxD0=
Subject key identifier:   A2:5D:1C:EA:4E:6B:6F:86:D9:A9:EB:58:B4:DC:EF:2F:F5:74:FE:BE
Certificate issuer:       /CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Certificate serial:       1B0CF2
Authority key identifier: 29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/e3097c5f7d6126993a009091aa81fad78540d96d.roa
Signing time:             Tue 04 Oct 2022 20:43:18 +0000
ROA not before:           Tue 04 Oct 2022 20:43:05 +0000
ROA not after:            Fri 04 Oct 2024 21:43:05 +0000
asID:                     263746
IP address blocks:        138.121.240.0/23 maxlen: 23
                          138.121.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772786 (0x1b0cf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
        Validity
            Not Before: Oct  4 20:43:05 2022 GMT
            Not After : Oct  4 21:43:05 2024 GMT
        Subject: CN=e3097c5f7d6126993a009091aa81fad78540d96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:4f:58:60:d4:78:c6:c9:25:50:21:c8:d5:
                    15:8f:8a:84:c0:38:69:c0:b7:4a:0b:50:15:db:08:
                    90:5b:ec:ab:66:f9:0d:05:c4:cb:b5:78:b8:dd:ab:
                    ea:6b:0f:62:56:3a:5f:a9:ba:4f:2d:9c:2a:b9:1d:
                    62:e2:13:4a:c4:17:2c:11:1d:53:8d:3b:15:71:19:
                    53:fe:0f:1d:bb:df:6a:d0:07:3d:bf:f1:1a:35:b0:
                    5e:18:33:c4:34:42:2d:1c:55:3e:9e:25:60:57:32:
                    84:ac:dc:ed:50:86:5b:f4:6c:e8:c7:25:c0:4b:28:
                    ba:df:1e:13:14:8f:5b:16:69:5d:1f:50:bb:81:39:
                    b4:fa:8f:6e:d0:a7:03:aa:cc:d4:d5:8a:34:e5:4f:
                    f1:ff:34:a9:9a:10:e7:d1:48:3a:f6:77:72:20:10:
                    70:b8:5a:4b:f4:8d:cd:ef:2f:fc:92:e8:1e:24:87:
                    07:04:22:df:d0:1e:1e:82:24:04:9d:e7:77:b4:1c:
                    4d:79:6e:d4:71:71:c2:96:b7:c0:f6:74:f3:a7:12:
                    45:aa:c4:07:46:74:6a:a9:d2:fc:98:17:f8:2b:9a:
                    c8:de:e7:bd:27:1e:0c:41:ae:f8:a0:53:c3:cf:1c:
                    27:0f:d5:2e:5a:2d:16:0d:7d:cb:ee:8c:4c:a1:38:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5D:1C:EA:4E:6B:6F:86:D9:A9:EB:58:B4:DC:EF:2F:F5:74:FE:BE
            X509v3 Authority Key Identifier:
                keyid:29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/e3097c5f7d6126993a009091aa81fad78540d96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.240.0-138.121.242.255

    Signature Algorithm: sha256WithRSAEncryption
         67:89:2a:7e:a1:6a:17:ed:5d:42:2c:9b:1c:bc:c5:06:8a:ed:
         42:ba:19:73:9b:b7:b7:df:59:56:6b:be:c9:73:25:8f:08:18:
         12:3d:db:6f:58:ad:68:55:26:ff:b2:f4:f4:79:e0:14:17:c7:
         ed:a8:b1:9b:9b:ca:46:7e:ce:56:6f:c0:85:b8:31:08:a0:99:
         43:d6:2c:c6:e4:f9:4c:83:e4:be:d6:fc:25:82:8f:ba:39:10:
         90:10:6a:fe:bc:cb:00:78:8f:28:7a:74:a8:15:3a:7d:a2:41:
         14:cc:c1:37:04:1d:e6:93:bf:37:c8:53:a3:9d:f7:e6:37:1e:
         06:dc:8c:4e:c4:6c:1c:d2:6a:78:66:12:07:95:a1:5e:16:8a:
         f2:29:a5:a2:3b:ec:1a:25:21:fd:16:8e:e5:26:69:e3:a0:2f:
         8c:be:8b:f0:d9:34:cc:9e:c1:b8:81:65:e4:9b:43:cf:c9:dd:
         27:61:58:57:34:80:67:59:ee:be:4e:61:80:91:16:3e:32:80:
         65:85:16:15:ff:67:40:8d:45:c1:5d:da:43:7a:fa:29:06:57:
         86:e6:40:bd:2d:fd:db:e8:e2:38:62:d2:dd:26:84:dc:3d:c9:
         57:47:b0:9e:84:24:14:88:31:b6:8d:01:b3:3a:21:12:c9:c7:
         ee:11:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org