Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ab362d2c79da43853cdecf7f936b39e2dabe8813.roa
File:                     ab362d2c79da43853cdecf7f936b39e2dabe8813.roa (raw, json)
Hash identifier:          EegGp3QOQn99HI3yyFiVfulPIor3+zmhwIlEELtbhtE=
Subject key identifier:   18:5A:15:5A:AD:4C:B0:F8:1E:48:F9:B7:F3:22:20:F2:03:8A:14:98
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       0418
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ab362d2c79da43853cdecf7f936b39e2dabe8813.roa
Signing time:             Fri 04 Jun 2021 02:20:36 +0000
ROA not before:           Thu 03 Jun 2021 03:00:00 +0000
ROA not after:            Sat 03 Jun 2023 03:00:00 +0000
asID:                     263833
IP address blocks:        138.255.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Jun  3 03:00:00 2021 GMT
            Not After : Jun  3 03:00:00 2023 GMT
        Subject: CN=ab362d2c79da43853cdecf7f936b39e2dabe8813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:23:dc:b9:7a:70:51:fd:16:32:e6:cb:e2:
                    ee:ea:56:ca:bc:3a:3d:d1:38:75:5a:96:1e:d5:e5:
                    a0:ee:4b:0c:b1:eb:be:d0:b5:6d:df:dc:28:4f:54:
                    3e:dd:bf:23:db:ba:6c:35:d8:de:2d:5f:c4:90:64:
                    7e:03:1b:fb:c0:d8:e2:e5:fe:9d:ea:f0:ec:bb:06:
                    ea:cb:83:39:5a:72:93:49:25:b2:74:ce:bf:42:01:
                    d5:25:78:6a:16:64:f9:f9:ce:36:73:02:7d:da:de:
                    6d:25:9f:9c:7e:e7:75:15:24:73:54:00:c2:ae:22:
                    6a:6a:45:12:c7:ee:3a:1f:ec:5c:d6:a1:00:23:0e:
                    75:d5:78:96:16:81:06:35:e1:5b:ad:d3:b2:c2:87:
                    b0:3b:21:3e:4b:17:aa:2a:1d:1e:b4:c1:d6:fe:24:
                    8f:84:d4:15:6d:f2:11:6e:4e:fe:d4:12:7d:11:2c:
                    ff:ba:9e:41:f6:b3:e5:76:08:d3:aa:31:75:34:a2:
                    2c:2b:6b:53:20:0a:2a:14:29:fe:76:94:75:cd:03:
                    f8:92:70:fb:b3:b5:22:98:33:e2:35:20:23:87:7b:
                    65:80:16:d0:90:ea:67:fa:35:31:1c:22:4c:ab:52:
                    6b:d0:4e:75:ed:24:ca:60:88:e8:f7:ef:75:02:ac:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5A:15:5A:AD:4C:B0:F8:1E:48:F9:B7:F3:22:20:F2:03:8A:14:98
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ab362d2c79da43853cdecf7f936b39e2dabe8813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:0e:b5:f2:06:c7:9b:98:c4:2a:3c:1b:76:c8:a4:02:d3:03:
         89:a9:66:c6:e2:56:e2:62:f7:ea:b4:fa:5f:38:e9:46:9e:ec:
         1d:86:ee:a8:81:dd:20:74:ae:bf:5f:fd:a5:f2:0f:0d:38:49:
         66:25:69:01:b8:70:6e:34:7b:26:5e:f0:21:41:87:77:77:07:
         06:a6:64:18:ae:95:ec:cd:05:2d:7b:ae:8b:e8:ee:03:ff:5e:
         34:90:ca:dc:e6:80:2c:13:8f:6b:d7:e1:83:59:2c:09:99:a4:
         aa:b8:05:f0:84:ef:5b:02:83:78:7a:ca:d6:a6:d7:fc:3e:bf:
         cc:fc:53:4a:f2:aa:cb:80:54:57:3f:8c:b6:5e:67:01:3b:2b:
         c5:41:da:87:bf:4f:b7:f4:64:34:65:d9:5a:aa:40:f9:80:c6:
         ea:ca:6c:e7:05:71:a2:40:be:49:8c:91:cf:5e:59:21:e1:6c:
         22:b6:2b:c6:59:f4:77:93:43:48:a8:c9:46:f2:5c:a6:a5:92:
         c2:69:e6:da:39:4d:bd:ab:38:54:a9:76:08:85:28:24:fd:89:
         20:93:f7:5e:9c:72:71:0b:51:a3:52:51:57:f5:6d:f7:1d:57:
         9f:5d:77:04:68:01:66:2a:7e:7f:e5:ad:29:24:b6:04:e9:ae:
         09:0d:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org