Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/2b13c0730764557b658681ff44e33cddca5ac8db.roa
File:                     2b13c0730764557b658681ff44e33cddca5ac8db.roa (raw, json)
Hash identifier:          Bap3mTrnplEzhpWiBwXZ5lzlS73Yvv7/0kBhTsVyXhY=
Subject key identifier:   3E:8E:E2:07:56:2C:7F:E7:A6:F7:28:C2:CF:15:3A:65:1F:7A:83:0A
Certificate issuer:       /CN=abc5395f6470797c32ddfe8eb37ee50a47c505fd
Certificate serial:       219B
Authority key identifier: 13:A6:72:D8:AB:A6:7F:39:F5:C3:15:54:9E:93:1D:0E:9C:E8:DE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abc5395f6470797c32ddfe8eb37ee50a47c505fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/2b13c0730764557b658681ff44e33cddca5ac8db.roa
Signing time:             Fri 09 Sep 2022 20:58:22 +0000
ROA not before:           Wed 07 Sep 2022 14:11:30 +0000
ROA not after:            Sat 07 Sep 2024 14:11:30 +0000
asID:                     61500
IP address blocks:        138.121.80.0/23 maxlen: 24
                          138.121.82.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8603 (0x219b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc5395f6470797c32ddfe8eb37ee50a47c505fd
        Validity
            Not Before: Sep  7 14:11:30 2022 GMT
            Not After : Sep  7 14:11:30 2024 GMT
        Subject: CN=2b13c0730764557b658681ff44e33cddca5ac8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:08:7a:03:f0:43:1e:d2:08:79:5e:7f:30:
                    ea:1e:f8:c9:99:0b:bf:4f:2b:95:36:ca:9e:ce:62:
                    5b:24:01:7d:8d:6c:98:2a:a0:bc:14:09:2a:5e:96:
                    17:5b:5e:fd:f2:c1:bd:3b:f4:39:61:9e:46:bf:76:
                    51:0a:ce:fe:fa:21:43:af:8b:25:07:c5:94:44:b1:
                    58:05:11:bf:db:6d:1b:40:9c:57:01:84:16:ee:0a:
                    c5:ac:5c:69:e8:be:d0:8f:78:69:e2:5d:43:a5:08:
                    7f:72:7f:26:e7:d9:84:88:02:0c:f0:b8:b1:18:f5:
                    f7:04:31:51:37:34:2e:c4:8b:4b:a1:08:93:89:81:
                    55:a5:b3:b0:33:b1:07:09:d5:35:4f:9f:32:5c:35:
                    43:e7:59:d1:79:ec:3c:ef:dd:d6:55:92:63:0f:53:
                    c3:4f:23:bf:c5:49:f4:0b:5f:09:cc:48:2e:63:a0:
                    ac:29:3e:bc:00:79:45:1c:05:a6:40:29:10:ca:fd:
                    6e:73:95:ae:fd:a7:7f:7b:7d:97:9e:f5:f6:01:88:
                    cb:fa:99:6f:54:ab:05:62:bd:ac:19:d1:14:3d:16:
                    b5:5c:51:4f:83:7b:66:24:c9:1d:27:d8:65:7f:ce:
                    7c:4d:d0:d6:05:86:12:f0:34:03:af:2d:ae:ff:03:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8E:E2:07:56:2C:7F:E7:A6:F7:28:C2:CF:15:3A:65:1F:7A:83:0A
            X509v3 Authority Key Identifier:
                keyid:13:A6:72:D8:AB:A6:7F:39:F5:C3:15:54:9E:93:1D:0E:9C:E8:DE:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abc5395f6470797c32ddfe8eb37ee50a47c505fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/2b13c0730764557b658681ff44e33cddca5ac8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/abc5395f6470797c32ddfe8eb37ee50a47c505fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:1d:ad:97:15:e9:2b:7a:19:0d:d4:a0:fb:17:18:a3:76:fb:
         a1:5f:fd:5d:38:30:1b:5c:62:53:49:c2:da:43:07:d6:14:4f:
         63:13:9d:cc:14:de:05:08:ba:51:be:4b:e8:3c:c7:8b:64:00:
         33:fe:c3:85:b9:38:07:60:71:ac:55:94:13:26:dc:0a:d7:32:
         c2:7d:cb:04:cd:1b:3f:ca:a6:5b:26:49:87:f7:41:47:4d:b6:
         0b:52:6f:d7:99:5a:8f:83:bd:e6:cc:78:10:35:10:00:73:c2:
         ee:3c:37:51:c7:96:aa:d2:7b:7e:a2:4e:e9:43:07:bd:2a:c8:
         75:54:da:97:dd:e5:b9:a4:0b:47:b7:01:37:2d:96:63:4d:14:
         87:2c:0e:e7:fe:8a:f2:7b:6a:65:27:0f:8d:40:1d:49:34:22:
         49:e3:8d:e1:92:10:bd:94:9a:47:d4:2e:6c:60:46:f9:01:1b:
         d6:41:41:d7:63:6a:f7:0d:5f:43:5c:6c:a4:6f:26:a1:d9:29:
         dc:6c:e7:5d:bb:54:c6:0b:1c:c1:81:c2:98:4f:fc:31:8d:aa:
         d3:20:94:ce:12:c7:22:e6:1a:a6:71:de:e1:47:f3:01:5d:1d:
         32:d0:9c:5c:fb:19:61:56:80:42:18:60:95:18:28:39:92:92:
         47:2c:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org