Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/a39d58c04e15ba04b4ac6e761364f3ed2529f6a8.roa
File:                     a39d58c04e15ba04b4ac6e761364f3ed2529f6a8.roa (raw, json)
Hash identifier:          qGnyTKkjjfu7+k8v3IAhD2W+1D1rEEsFDVEVdp2Tpus=
Subject key identifier:   C8:F5:DE:08:8C:DD:BC:6A:58:4B:6F:35:B2:E5:3B:C6:7E:60:6C:44
Certificate issuer:       /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial:       2CA3
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/a39d58c04e15ba04b4ac6e761364f3ed2529f6a8.roa
Signing time:             Tue 27 Jun 2023 19:45:14 +0000
ROA not before:           Mon 26 Jun 2023 19:45:13 +0000
ROA not after:            Fri 27 Jun 2025 19:45:13 +0000
asID:                     28067
IP address blocks:        64.28.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11427 (0x2ca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
        Validity
            Not Before: Jun 26 19:45:13 2023 GMT
            Not After : Jun 27 19:45:13 2025 GMT
        Subject: CN=a39d58c04e15ba04b4ac6e761364f3ed2529f6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:86:71:02:80:1a:bc:1d:03:a7:10:e8:64:
                    0e:04:28:5a:90:26:ee:ca:9b:7e:55:98:20:44:02:
                    c1:50:43:73:29:bc:67:d2:fc:2c:67:57:88:25:6f:
                    ed:7d:dd:47:0d:65:71:68:03:4f:29:dc:2f:80:28:
                    2a:94:76:02:2d:08:31:e0:50:94:7e:6f:6d:b9:5d:
                    97:fb:34:b8:a4:f7:ac:51:c6:60:8b:b4:66:9e:dd:
                    48:6a:c1:5b:96:1d:f6:5c:62:83:32:72:b1:28:ff:
                    57:08:78:bf:bb:8d:9b:cc:de:49:a3:06:73:07:85:
                    96:a5:c0:14:f6:da:e7:fc:a4:fb:39:40:29:e4:4c:
                    20:7b:82:db:f2:62:c3:9b:3f:e5:2b:34:9a:04:28:
                    3b:d3:ba:3b:81:07:0f:df:dc:9a:16:f6:4c:6b:5b:
                    e7:89:4c:29:ab:10:4a:96:f1:83:d6:d0:f9:29:b8:
                    f6:88:99:88:7e:4b:15:74:2c:32:a7:7e:f8:5f:b4:
                    9f:db:c3:7e:56:5e:8f:73:da:8a:79:bf:b9:4e:15:
                    9a:93:78:1e:8a:5f:13:0f:e7:01:c4:a5:49:94:ef:
                    0e:43:d8:ee:e9:47:49:66:05:ef:b1:d8:d0:b3:52:
                    e8:b6:9b:62:19:1d:5a:8b:ae:6f:1a:17:74:85:b2:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F5:DE:08:8C:DD:BC:6A:58:4B:6F:35:B2:E5:3B:C6:7E:60:6C:44
            X509v3 Authority Key Identifier:
                keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/a39d58c04e15ba04b4ac6e761364f3ed2529f6a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:21:1e:98:03:13:22:c7:91:40:7d:a6:87:a3:d0:86:07:39:
         4d:71:2e:24:ba:f0:42:b3:e6:b4:e1:fb:5f:00:c9:68:84:62:
         61:66:d9:f7:fd:f5:33:32:44:f8:ee:46:02:a2:cf:01:23:95:
         2a:7c:c6:fe:5c:22:d9:ab:d3:99:84:af:b4:a4:28:bc:37:7d:
         24:8b:00:a8:65:76:c7:af:f5:15:55:a9:99:71:f1:69:61:ee:
         f0:20:7d:79:0f:72:08:a3:80:99:d1:85:64:d6:6c:ae:da:71:
         3f:33:1d:f0:a4:20:1a:dc:db:c6:e9:35:86:28:e6:5f:be:18:
         18:79:f6:ba:65:5a:b0:54:2c:a7:fc:a6:e3:2e:40:50:be:72:
         88:7c:39:e4:6f:4e:25:b4:e9:47:e8:39:67:05:9a:6d:f6:0d:
         c2:2b:cf:bd:8c:a2:72:93:57:4d:fc:b6:04:30:a9:5d:6d:b0:
         7f:b4:10:25:fa:09:e4:c0:04:93:a2:f7:42:fb:c4:b6:57:c7:
         0e:17:13:bb:ac:ce:1b:96:1b:db:f0:dd:5b:2e:a0:57:d6:87:
         32:a6:c1:43:29:9a:c4:f9:69:a6:c6:05:93:e5:0b:b1:32:ad:
         9d:47:d0:ac:a5:11:47:02:16:13:89:42:ec:bb:72:84:d6:0c:
         4f:c1:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org