Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/e9e32dfedb559ae3bcd0ac9e3c4692328c8a7dff.roa
File:                     e9e32dfedb559ae3bcd0ac9e3c4692328c8a7dff.roa (raw, json)
Hash identifier:          IT51joV2SpFUJ35YdhAvs73N7ouAEGQcRNPOj4rLW9M=
Subject key identifier:   9F:86:8D:FF:6E:95:90:23:CC:C2:9E:6B:8B:97:B7:26:75:CC:A6:B1
Certificate issuer:       /CN=8fd397f8d47b3a369017afd14e695229eb571750
Certificate serial:       1C09CE
Authority key identifier: 45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/e9e32dfedb559ae3bcd0ac9e3c4692328c8a7dff.roa
Signing time:             Wed 05 Jul 2023 12:33:38 +0000
ROA not before:           Tue 04 Jul 2023 12:33:37 +0000
ROA not after:            Sat 05 Jul 2025 12:33:37 +0000
asID:                     272928
IP address blocks:        138.117.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837518 (0x1c09ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd397f8d47b3a369017afd14e695229eb571750
        Validity
            Not Before: Jul  4 12:33:37 2023 GMT
            Not After : Jul  5 12:33:37 2025 GMT
        Subject: CN=e9e32dfedb559ae3bcd0ac9e3c4692328c8a7dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:75:dc:94:e7:59:89:60:44:39:06:c5:53:
                    2f:be:38:5b:12:60:22:e4:66:4f:66:ec:e0:37:0b:
                    00:a9:bf:19:c0:0f:28:4b:db:3b:41:18:ae:8b:ce:
                    8b:2e:6b:58:ba:89:af:35:7a:2c:48:c9:90:ab:a1:
                    d3:f1:1e:79:7a:94:0f:72:1e:14:28:2e:3c:57:f0:
                    11:aa:ed:bc:64:c0:04:b8:59:f8:f0:c9:d2:a3:4f:
                    42:c3:e9:59:d7:4e:0d:7e:65:e8:05:8f:56:93:ba:
                    1a:80:47:67:bd:25:97:70:09:8c:18:9e:9d:0d:e5:
                    fb:d8:49:73:f7:7e:07:8c:00:36:ab:e7:92:1e:0e:
                    d4:4a:54:c9:e0:6e:d7:74:0a:2b:0d:08:f2:ec:9e:
                    01:8a:b9:03:ac:52:2d:75:89:05:8a:ae:1f:32:8f:
                    25:f9:c9:ea:fb:d3:cd:b0:c5:cf:91:49:3a:7b:38:
                    e8:ce:49:cc:8e:34:96:f2:be:42:01:73:96:6a:83:
                    37:d2:85:a6:40:a6:88:13:f3:7c:38:44:b9:b7:33:
                    52:97:12:1a:f7:c4:f5:b3:53:c8:de:82:18:fa:49:
                    33:6e:8f:d1:06:59:14:84:53:4e:87:27:8c:8d:9e:
                    56:e1:10:07:dc:7b:41:79:8b:11:55:c8:a1:c0:2f:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:86:8D:FF:6E:95:90:23:CC:C2:9E:6B:8B:97:B7:26:75:CC:A6:B1
            X509v3 Authority Key Identifier:
                keyid:45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/e9e32dfedb559ae3bcd0ac9e3c4692328c8a7dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/8fd397f8d47b3a369017afd14e695229eb571750.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:2e:fa:6f:8e:9c:a7:fb:e2:79:f9:86:2d:8e:7c:c0:8e:9c:
         ea:20:35:1f:b4:6f:af:f5:bf:38:7e:f1:e7:74:2e:c8:76:4e:
         31:d4:bd:8f:4f:58:94:a9:6d:0a:8b:8b:8f:2d:28:9b:b1:e3:
         0a:7a:67:47:d3:84:ea:9e:99:f6:dd:ed:36:66:d1:d7:39:34:
         3b:51:b9:27:d5:f0:67:bb:2b:16:6b:78:88:78:66:7d:8c:a2:
         4c:75:1e:5e:3f:d3:d6:59:e2:f5:0e:86:59:af:05:4c:12:9b:
         a9:c7:41:da:c4:80:df:8a:00:6a:ea:a2:4d:c0:94:0f:cd:5a:
         db:9b:42:a3:24:ba:43:e9:6a:47:64:aa:aa:81:38:48:b4:13:
         69:17:47:23:83:45:48:99:66:8c:c8:c3:9b:ab:fe:14:70:00:
         7c:e6:fb:9c:4c:df:88:c5:78:81:e6:79:7a:44:7e:07:ff:75:
         84:5a:7a:a3:32:b3:78:0c:4d:8a:ed:c6:ae:40:7c:c3:40:a0:
         7f:4c:de:99:b5:9a:a4:30:51:75:60:a7:54:ad:90:9c:0f:11:
         16:e9:75:35:32:ee:26:97:25:2a:9d:b3:24:94:d1:33:21:af:
         3a:71:9a:fd:3d:8a:c0:c6:57:6e:3c:33:00:a2:88:07:bc:ea:
         96:cc:6d:d7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHAnOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhm
ZDM5N2Y4ZDQ3YjNhMzY5MDE3YWZkMTRlNjk1MjI5ZWI1NzE3NTAwHhcNMjMwNzA0
MTIzMzM3WhcNMjUwNzA1MTIzMzM3WjAzMTEwLwYDVQQDEyhlOWUzMmRmZWRiNTU5
YWUzYmNkMGFjOWUzYzQ2OTIzMjhjOGE3ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2u113JTnWYlgRDkGxVMvvjhbEmAi5GZPZuzgNwsAqb8ZwA8o
S9s7QRiui86LLmtYuomvNXosSMmQq6HT8R55epQPch4UKC48V/ARqu28ZMAEuFn4
8MnSo09Cw+lZ104NfmXoBY9Wk7oagEdnvSWXcAmMGJ6dDeX72Elz934HjAA2q+eS
Hg7USlTJ4G7XdAorDQjy7J4BirkDrFItdYkFiq4fMo8l+cnq+9PNsMXPkUk6ezjo
zknMjjSW8r5CAXOWaoM30oWmQKaIE/N8OES5tzNSlxIa98T1s1PI3oIY+kkzbo/R
BlkUhFNOhyeMjZ5W4RAH3HtBeYsRVcihwC9RAwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ+Gjf9ulZAjzMKea4uXtyZ1zKaxMB8GA1UdIwQYMBaAFEXepqSvg9cyd+Za
SafsipPXSe0kMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGZkMzk3
ZjhkNDdiM2EzNjkwMTdhZmQxNGU2OTUyMjllYjU3MTc1MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDQwZTQzOTctNzU2YS00ODNiLWIyMmEtOGIyM2Fl
ZjQ4OTRhL2U5ZTMyZGZlZGI1NTlhZTNiY2QwYWM5ZTNjNDY5MjMyOGM4YTdkZmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNDBlNDM5Ny03NTZhLTQ4M2ItYjIyYS04YjIz
YWVmNDg5NGEvOGZkMzk3ZjhkNDdiM2EzNjkwMTdhZmQxNGU2OTUyMjllYjU3MTc1
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIp1DjANBgkqhkiG9w0BAQsFAAOCAQEAGy76b46cp/viefmG
LY58wI6c6iA1H7Rvr/W/OH7x53QuyHZOMdS9j09YlKltCouLjy0om7HjCnpnR9OE
6p6Z9t3tNmbR1zk0O1G5J9XwZ7srFmt4iHhmfYyiTHUeXj/T1lni9Q6GWa8FTBKb
qcdB2sSA34oAauqiTcCUD81a25tCoyS6Q+lqR2SqqoE4SLQTaRdHI4NFSJlmjMjD
m6v+FHAAfOb7nEzfiMV4geZ5ekR+B/91hFp6ozKzeAxNiu3GrkB8w0Cgf0zembWa
pDBRdWCnVK2QnA8RFul1NTLuJpclKp2zJJTRMyGvOnGa/T2KwMZXbjwzAKKIB7zq
lsxt1w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org