Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ab9a58fbb6ad8758e81124895c862cd44df0d979.roa
File:                     ab9a58fbb6ad8758e81124895c862cd44df0d979.roa (raw, json)
Hash identifier:          5SvBmEfQnYNQ9D/Ck6QpjtPcN/xESVLu2/Gw5M5R7qQ=
Subject key identifier:   67:44:E4:F2:79:DE:13:47:86:B7:D5:3D:55:97:23:70:D6:53:CE:45
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       0617
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ab9a58fbb6ad8758e81124895c862cd44df0d979.roa
Signing time:             Fri 04 Jun 2021 02:30:18 +0000
ROA not before:           Thu 03 Jun 2021 03:00:00 +0000
ROA not after:            Sat 03 Jun 2023 03:00:00 +0000
asID:                     263833
IP address blocks:        138.255.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Jun  3 03:00:00 2021 GMT
            Not After : Jun  3 03:00:00 2023 GMT
        Subject: CN=ab9a58fbb6ad8758e81124895c862cd44df0d979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:af:0e:90:5a:96:cb:46:62:ea:46:10:1c:
                    33:9e:f9:a9:29:81:77:ef:94:34:19:96:fa:85:09:
                    bc:af:a7:1c:04:9c:ba:57:28:74:89:a1:34:ac:1f:
                    f1:0c:17:c9:0f:6b:6b:23:09:46:7f:5d:8f:a1:ec:
                    16:b9:b7:bc:23:4b:f2:3d:c2:c4:43:75:52:6e:fd:
                    e5:3a:91:5c:c1:03:b8:68:61:27:d9:99:43:8d:09:
                    19:43:c8:ae:a5:12:18:a5:9b:ce:3a:da:d9:4b:7a:
                    dd:7c:99:32:aa:44:0a:58:9b:d8:81:ef:f4:62:f3:
                    f0:95:d1:ea:43:f1:f7:9b:86:4b:e8:60:d3:8d:aa:
                    1c:cf:3d:1d:41:ec:1d:3c:10:b0:b8:dc:6e:10:f1:
                    35:cc:da:6c:e8:cc:73:5b:6b:2d:6b:d2:a8:c6:f8:
                    c8:51:a0:43:74:bc:7c:54:62:fc:c5:94:69:bb:d0:
                    61:0d:20:d9:ae:bd:f0:b2:4a:72:17:7f:be:ea:d9:
                    4c:3a:de:5e:00:27:ef:1a:6f:6c:bb:b1:f3:f5:79:
                    fb:11:7e:9f:54:35:17:ce:4a:5a:7f:8e:66:b0:86:
                    f8:48:48:be:4a:b3:d2:f1:a7:1c:08:61:92:09:c9:
                    38:6d:08:18:a3:be:ff:cb:cd:67:38:dd:b3:38:94:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:44:E4:F2:79:DE:13:47:86:B7:D5:3D:55:97:23:70:D6:53:CE:45
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ab9a58fbb6ad8758e81124895c862cd44df0d979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:05:dd:07:15:3b:60:70:b3:c0:48:14:13:03:8d:0c:6d:
         5a:c4:8a:70:ed:19:b2:89:62:cf:ad:51:89:d2:fb:eb:dc:22:
         59:8e:dd:e2:3e:4c:3e:36:43:bc:57:28:7e:ef:ce:e0:cc:e3:
         2b:5e:20:41:73:a5:66:7d:e4:3b:9e:13:d0:db:cf:a5:36:c9:
         4c:b1:07:be:11:4d:77:0b:a1:d6:2c:a7:4f:f1:71:de:43:6c:
         2f:2e:a0:f8:14:5e:83:99:d6:e0:b7:a0:ab:f4:ef:53:70:8c:
         7c:6b:24:29:6e:46:22:3e:32:c0:1d:2d:6e:21:ef:0d:e9:8d:
         57:8f:99:10:24:56:10:f2:46:b2:00:14:d3:bc:e8:a9:27:d9:
         d4:10:fc:b7:60:ae:7a:86:bb:46:3f:62:cf:f1:d7:46:1a:92:
         26:cf:51:93:36:76:ee:64:1f:52:54:ea:f9:46:0f:9d:6f:46:
         e6:91:13:eb:b8:dd:3b:50:82:12:a3:ce:93:1c:c6:98:e7:6f:
         5b:1e:52:f3:ac:6b:50:da:6b:51:23:40:01:c4:07:25:78:ec:
         fc:95:65:c9:e0:83:8d:17:42:5a:8f:4c:32:ff:ee:b5:a0:0c:
         14:1c:b1:c8:3e:9f:9f:40:75:dc:65:f3:bd:da:33:fa:51:30:
         aa:ee:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org