Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef58a62f-40a8-4ba0-9635-921558eae0ff/e2fa256248ee235e943ae373eb371310323832aa.roa
File:                     e2fa256248ee235e943ae373eb371310323832aa.roa (raw, json)
Hash identifier:          +IqcndhwrdmygHc0QJZ70GsuGnpg5oByBm3AYMHDJPg=
Subject key identifier:   3C:85:9C:7D:5C:D2:86:B8:6E:7D:CA:B1:37:BC:FA:47:6E:CA:E2:FC
Certificate issuer:       /CN=05494298ecc662a5797ae3a631ee83303a944b5f
Certificate serial:       081F
Authority key identifier: DA:8F:F5:C6:F1:07:9E:BF:70:CA:47:BC:F1:09:87:55:78:74:25:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05494298ecc662a5797ae3a631ee83303a944b5f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef58a62f-40a8-4ba0-9635-921558eae0ff/e2fa256248ee235e943ae373eb371310323832aa.roa
Signing time:             Mon 30 May 2022 20:09:30 +0000
ROA not before:           Mon 30 May 2022 03:00:00 +0000
ROA not after:            Thu 30 May 2024 03:00:00 +0000
asID:                     269750
IP address blocks:        138.186.176.0/22 maxlen: 24
                          168.194.108.0/22 maxlen: 24
                          190.8.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05494298ecc662a5797ae3a631ee83303a944b5f
        Validity
            Not Before: May 30 03:00:00 2022 GMT
            Not After : May 30 03:00:00 2024 GMT
        Subject: CN=e2fa256248ee235e943ae373eb371310323832aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:96:0a:74:3b:31:3b:88:84:f5:e2:d1:62:
                    99:d8:21:13:a1:60:05:99:45:bd:ee:84:da:35:e0:
                    95:d7:25:93:4e:9b:60:b9:ae:af:db:4a:3b:6a:05:
                    85:2b:1c:9a:e6:64:8c:70:e0:3d:af:15:66:30:28:
                    4f:a6:a3:1c:2c:94:eb:3b:eb:47:71:2c:10:22:3b:
                    c2:91:7b:d2:99:93:8d:fa:af:87:25:1b:75:67:67:
                    35:01:35:ee:50:37:fd:e7:d0:8b:32:43:a2:29:ee:
                    65:8d:c3:44:64:3b:6f:eb:db:5f:24:b4:b3:f2:b8:
                    74:13:8c:6b:21:3a:6d:92:5f:53:cd:9e:55:a2:b8:
                    ed:83:aa:88:7e:1e:18:ae:25:86:c0:1d:df:a2:66:
                    d1:11:26:f5:d9:b7:ef:38:ed:0d:ea:65:02:79:a3:
                    d4:40:73:77:dc:28:92:0e:1f:8b:ea:75:44:53:d0:
                    27:27:a1:0b:4d:ed:29:ee:13:3f:7d:df:3f:bc:c8:
                    5f:2c:29:70:e9:05:11:56:8d:e4:0f:48:09:89:64:
                    92:38:7c:9c:4d:90:07:4c:df:78:3a:88:7b:f9:36:
                    6e:36:2d:b3:22:7e:24:1a:30:8d:2a:c4:f8:f4:8f:
                    25:e1:c3:20:5c:13:81:28:3f:b4:83:0c:2b:a0:30:
                    3b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:85:9C:7D:5C:D2:86:B8:6E:7D:CA:B1:37:BC:FA:47:6E:CA:E2:FC
            X509v3 Authority Key Identifier:
                keyid:DA:8F:F5:C6:F1:07:9E:BF:70:CA:47:BC:F1:09:87:55:78:74:25:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05494298ecc662a5797ae3a631ee83303a944b5f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef58a62f-40a8-4ba0-9635-921558eae0ff/e2fa256248ee235e943ae373eb371310323832aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef58a62f-40a8-4ba0-9635-921558eae0ff/05494298ecc662a5797ae3a631ee83303a944b5f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.176.0/22
                  168.194.108.0/22
                  190.8.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:de:64:c7:34:83:63:a0:4f:11:a3:b3:cd:21:d4:dd:ac:01:
         b2:34:80:b2:94:9e:50:90:41:d6:41:ba:46:8c:61:27:f9:c7:
         66:c1:91:67:ec:d0:84:cd:e7:ad:b2:2f:f6:04:a5:4e:34:1c:
         01:54:3f:73:7a:2f:3f:0d:65:53:e4:27:08:9e:59:7b:83:2d:
         7a:c6:34:bf:ff:b3:68:29:dd:33:79:da:7e:1f:f2:c5:1f:ac:
         46:ca:0a:f8:fb:f1:8a:53:6f:4c:52:cd:47:0e:6b:99:dc:93:
         d2:4d:a9:f9:a1:bd:6e:c5:d9:44:c1:ba:36:54:66:9b:ba:cc:
         bf:d5:3a:e4:b3:a6:93:31:3c:a1:93:5a:a9:8f:3e:22:1a:05:
         9d:84:94:db:d9:17:80:7f:a7:0d:62:72:cc:58:ee:9a:70:7c:
         61:4c:93:a3:6a:d0:03:12:26:3b:da:e6:f8:07:cd:48:c0:56:
         ff:3b:62:cb:ae:d5:49:83:5b:6f:fc:6d:47:9d:be:65:d8:1c:
         5e:32:fe:84:4e:42:6a:c0:eb:00:6b:90:50:0f:ed:85:de:62:
         1a:47:25:5d:59:4a:ba:ec:ec:d3:d4:6c:a7:b6:cf:08:52:5f:
         14:db:51:d9:20:56:40:cb:74:3d:f2:9d:43:6a:c7:d0:03:16:
         49:bc:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org