Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/17c99601803a567bc538ad4eb93e0f58e7197a65.roa
File:                     17c99601803a567bc538ad4eb93e0f58e7197a65.roa (raw, json)
Hash identifier:          GUh4Eh00SbTs8NvhAlk7u5NTAM8HBVE2zq4veCnDhdo=
Subject key identifier:   44:14:29:55:B8:EE:D3:85:C7:31:C9:57:F0:A8:4C:B3:E3:F5:B7:D5
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       144ACB
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/17c99601803a567bc538ad4eb93e0f58e7197a65.roa
Signing time:             Thu 31 Aug 2023 08:30:00 +0000
ROA not before:           Wed 30 Aug 2023 08:30:00 +0000
ROA not after:            Fri 29 Aug 2025 08:30:00 +0000
asID:                     263833
IP address blocks:        138.255.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329867 (0x144acb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Aug 30 08:30:00 2023 GMT
            Not After : Aug 29 08:30:00 2025 GMT
        Subject: CN=17c99601803a567bc538ad4eb93e0f58e7197a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:0b:b4:d0:65:22:31:bf:05:a4:ba:49:ad:
                    fd:36:5b:ce:f5:5d:9f:42:da:1c:84:ae:c2:6e:4f:
                    26:7b:99:f8:c3:5e:78:0d:14:06:50:c5:bc:5e:b9:
                    40:e5:f3:ee:52:f9:32:88:23:78:55:8f:96:b4:15:
                    86:e0:a0:dc:b5:e5:16:bb:c9:c4:a1:43:30:7c:8f:
                    be:1f:35:e0:cd:51:9d:18:62:ac:2f:14:ae:1c:1a:
                    04:7e:d0:2d:8d:7b:19:85:f0:ff:ce:6d:da:6b:f8:
                    d0:fc:93:06:5a:4d:86:ac:47:29:a7:10:94:8b:69:
                    c4:64:04:20:2e:88:ff:1c:32:b4:da:6d:58:36:29:
                    9e:1b:f4:4c:8d:0d:c9:fe:37:bc:b6:1e:e2:88:76:
                    06:0f:79:af:db:1f:11:28:5a:32:e5:b0:de:5f:30:
                    44:5d:fd:b9:bd:23:f5:f3:00:6e:57:5b:d6:36:dd:
                    fc:cf:b7:f4:61:d1:06:46:76:fc:9e:19:b0:cd:56:
                    8d:46:b9:51:a6:e9:95:04:7e:ca:b2:e6:b9:58:6b:
                    74:c7:5b:9f:5f:8f:09:c9:ae:19:02:79:95:7c:ca:
                    19:83:20:95:95:64:db:3a:a2:95:aa:da:b3:a8:59:
                    e6:9a:c2:1d:fc:29:fa:8a:96:f0:fb:3b:bb:c0:7d:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:14:29:55:B8:EE:D3:85:C7:31:C9:57:F0:A8:4C:B3:E3:F5:B7:D5
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/17c99601803a567bc538ad4eb93e0f58e7197a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:fc:47:21:92:68:c6:19:64:d0:79:59:25:b3:ce:e6:85:ad:
         0a:e2:9f:92:9d:bd:3f:0e:fd:7a:b9:c5:38:5e:ca:f1:f2:1d:
         c3:5e:05:71:1b:ea:32:2c:bb:cc:87:2a:aa:5a:07:15:42:7a:
         31:50:98:97:2b:d0:d4:02:67:66:d6:6c:b5:d7:a7:9a:da:03:
         50:58:1a:a3:9c:5e:7c:2a:57:b1:6e:03:f5:2a:9e:3e:75:ab:
         b8:c1:46:05:70:f2:3e:55:08:97:55:53:5a:55:b5:9b:16:ed:
         7b:26:db:52:0d:2b:5f:f0:81:46:a2:46:9a:10:c5:07:f8:00:
         ff:92:96:ce:83:4e:75:46:13:9c:92:85:ea:39:23:ce:43:8f:
         ba:8e:16:1a:1f:a8:54:28:3f:b9:cf:09:16:cc:09:05:62:9c:
         08:30:d0:d3:82:74:65:39:61:d7:ec:53:48:30:ac:68:58:b7:
         49:dd:7d:0e:97:2e:21:e8:fe:f2:ad:de:12:eb:6a:47:f4:5c:
         d7:35:bb:4e:57:f1:7c:5a:df:b0:a9:4b:f3:7e:fd:70:6b:15:
         09:06:51:0c:65:e3:9c:02:ac:05:02:9b:bd:00:e4:39:ed:2b:
         c4:50:ef:11:4b:13:39:3a:8c:48:28:6c:8c:e8:88:c5:a5:45:
         21:1f:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org