Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e65946f6-1f47-409f-a11c-7e3505bebf3a/5e12398a6beea59619bcb1c5c98d5304bfd61e56.roa
File:                     5e12398a6beea59619bcb1c5c98d5304bfd61e56.roa (raw, json)
Hash identifier:          jGL/o1mGccp5aAvSLszEVhShn7rb9W8I7MuHy07BqGE=
Subject key identifier:   BD:2C:FC:EC:2D:47:51:F4:D2:36:6A:7D:D4:B2:A6:9D:BB:78:2F:DD
Certificate issuer:       /CN=4c1e2a981bc2f6315b444fd175be279aa44a75a8
Certificate serial:       0D7004
Authority key identifier: 56:07:63:52:05:47:55:03:BF:8E:96:ED:36:2F:9F:EE:43:05:59:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c1e2a981bc2f6315b444fd175be279aa44a75a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e65946f6-1f47-409f-a11c-7e3505bebf3a/5e12398a6beea59619bcb1c5c98d5304bfd61e56.roa
Signing time:             Wed 24 Mar 2021 14:29:15 +0000
ROA not before:           Wed 24 Mar 2021 14:29:14 +0000
ROA not after:            Tue 24 Mar 2026 14:29:14 +0000
asID:                     52328
IP address blocks:        138.99.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880644 (0xd7004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e2a981bc2f6315b444fd175be279aa44a75a8
        Validity
            Not Before: Mar 24 14:29:14 2021 GMT
            Not After : Mar 24 14:29:14 2026 GMT
        Subject: CN=5e12398a6beea59619bcb1c5c98d5304bfd61e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:81:69:8e:4c:17:9f:50:63:42:58:86:90:
                    1a:0f:d0:a2:f0:e9:f3:a7:b2:f7:f8:70:f6:f2:6f:
                    66:9d:93:4c:17:c5:63:e7:d7:3a:c0:a8:67:37:33:
                    e0:66:68:7a:46:36:3e:11:df:43:2e:96:47:72:00:
                    7c:d7:9b:9d:9c:23:aa:37:f1:00:e6:b7:49:24:4e:
                    e6:29:fa:1b:b3:26:dd:e7:9a:df:fb:8d:58:02:3e:
                    32:ff:ba:7c:64:3f:7c:f2:db:9e:db:4f:50:ea:4c:
                    60:38:17:55:18:6f:6e:b4:b1:81:ff:00:f2:21:b7:
                    69:eb:aa:85:32:84:82:4a:be:7c:50:62:67:8a:ad:
                    2b:0a:e2:77:ce:2c:60:bb:27:71:dc:60:78:a8:86:
                    7d:c8:09:b8:6c:07:6b:98:e3:af:1a:83:fd:33:34:
                    0a:9f:47:d8:ad:c9:79:fc:9a:dd:e6:be:77:7b:da:
                    31:0d:25:58:d3:48:73:0a:3c:8c:e5:f7:87:30:2a:
                    13:87:81:8a:e4:ab:b7:1c:32:60:4a:d2:5c:59:a9:
                    83:63:8c:e1:0d:ea:26:3b:c7:1c:de:fb:54:48:d0:
                    98:71:ad:ad:42:af:93:99:32:02:30:c4:d0:b8:a8:
                    8b:90:42:68:1f:52:91:0a:0a:1d:4d:21:9d:9e:7e:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2C:FC:EC:2D:47:51:F4:D2:36:6A:7D:D4:B2:A6:9D:BB:78:2F:DD
            X509v3 Authority Key Identifier:
                keyid:56:07:63:52:05:47:55:03:BF:8E:96:ED:36:2F:9F:EE:43:05:59:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c1e2a981bc2f6315b444fd175be279aa44a75a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e65946f6-1f47-409f-a11c-7e3505bebf3a/5e12398a6beea59619bcb1c5c98d5304bfd61e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e65946f6-1f47-409f-a11c-7e3505bebf3a/4c1e2a981bc2f6315b444fd175be279aa44a75a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:da:64:ae:e5:39:47:fe:02:6e:a4:db:8b:2c:50:e4:72:e8:
         7f:7c:1b:2e:86:48:f9:48:0d:2e:1c:80:78:0e:84:3c:d0:7d:
         e7:91:01:3b:ee:33:69:1c:53:30:4e:e4:fb:90:a4:ce:e8:28:
         66:3b:4d:f8:5a:fd:83:5a:f1:e8:cf:cd:c8:9e:c8:82:91:1a:
         16:32:08:b1:f2:be:d1:68:70:d5:af:93:d4:6c:ec:17:ff:0e:
         7b:c0:39:ed:c9:53:7d:67:e9:48:fe:5e:a4:e1:8c:f8:98:53:
         0c:01:12:46:02:21:1a:01:ad:4b:ac:18:28:bd:77:b0:24:6b:
         92:37:b3:6a:be:28:4e:52:7a:6d:18:e8:bd:16:85:e3:01:9b:
         ee:d8:aa:e7:89:67:5c:67:2c:87:f1:59:ac:eb:43:eb:9e:61:
         47:c0:d4:c2:c0:c8:53:d6:86:d0:4f:6b:d7:d3:6b:b5:60:16:
         e0:e9:cb:54:85:84:c0:de:22:e8:ef:b6:5f:c2:19:fa:49:3f:
         94:20:c0:92:28:86:5f:29:d9:5d:5d:20:14:ba:51:53:57:ae:
         2c:fa:f1:2c:dc:5d:37:8c:d6:9e:e6:af:82:8c:6d:88:31:1b:
         88:08:6b:ec:09:f3:2e:02:ee:12:52:f6:61:a4:44:31:e8:5f:
         10:de:e2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org