Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/582ae7f6cf98ead5011a42e442ef6b39b211f412.roa
File:                     582ae7f6cf98ead5011a42e442ef6b39b211f412.roa (raw, json)
Hash identifier:          KcGqc+GHd96BkowA27V8O3bxMWOLecTKUM5fIOH3OXk=
Subject key identifier:   5A:A7:F0:F0:DD:F5:87:67:DF:E2:81:2A:29:40:0C:B4:17:C6:7F:DA
Certificate issuer:       /CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Certificate serial:       45C5
Authority key identifier: CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/582ae7f6cf98ead5011a42e442ef6b39b211f412.roa
Signing time:             Thu 14 Mar 2024 05:16:06 +0000
ROA not before:           Thu 14 Mar 2024 05:16:06 +0000
ROA not after:            Sat 14 Mar 2026 05:16:06 +0000
asID:                     262944
IP address blocks:        138.185.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17861 (0x45c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
        Validity
            Not Before: Mar 14 05:16:06 2024 GMT
            Not After : Mar 14 05:16:06 2026 GMT
        Subject: CN=582ae7f6cf98ead5011a42e442ef6b39b211f412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:67:7b:83:a7:a6:fc:09:00:a1:6b:62:5c:cb:
                    eb:77:b7:95:37:98:11:67:ca:cf:13:95:39:a2:76:
                    60:8b:3b:58:03:fb:52:66:ca:a5:77:a5:61:63:91:
                    36:45:32:a3:f6:76:d6:a3:0b:68:f6:69:ef:f9:62:
                    a8:f4:72:af:f0:92:87:f7:6a:14:e3:03:f2:06:f4:
                    f7:7b:b3:79:42:c9:e1:da:71:98:bc:82:06:7d:61:
                    58:43:b0:ff:e1:a8:a2:e3:21:7a:a4:09:23:af:4e:
                    b9:ca:6c:dc:c6:a5:dc:6f:82:a4:3f:c6:00:00:fa:
                    90:f0:3c:11:d1:29:55:5c:82:a4:e9:3f:39:9f:47:
                    40:b9:6c:59:48:81:d9:f8:d3:ca:46:ba:21:26:56:
                    7b:f3:ae:50:e6:b9:e7:11:24:b3:63:fb:23:33:cc:
                    ff:25:79:af:c6:b9:6b:f5:bb:41:15:a3:0f:3f:0d:
                    3a:f3:91:bf:a8:19:2a:08:80:cc:55:78:5c:38:32:
                    11:d2:bd:d5:44:f8:69:e7:51:56:10:38:29:98:59:
                    7b:81:8b:4c:9d:31:74:ea:6a:c9:a5:1d:6b:50:ff:
                    26:e8:af:35:35:64:97:74:27:9e:71:b6:c0:2e:9d:
                    71:aa:30:81:1b:8e:61:14:db:c5:e2:85:4b:de:3d:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A7:F0:F0:DD:F5:87:67:DF:E2:81:2A:29:40:0C:B4:17:C6:7F:DA
            X509v3 Authority Key Identifier:
                keyid:CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/582ae7f6cf98ead5011a42e442ef6b39b211f412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:5e:1d:14:b1:24:e4:68:81:89:ea:9f:33:4e:52:fe:c6:4f:
         6a:5d:ce:58:10:7f:6e:b5:32:bb:9f:64:2f:3b:d8:05:30:ed:
         09:c9:ac:2e:2b:28:88:cc:7c:b3:c9:cc:53:1e:ab:13:2b:75:
         5e:e2:f7:f0:7a:14:cf:58:a7:90:c4:fa:df:03:cf:a1:5a:e4:
         96:f0:b9:4d:cb:7a:42:2e:33:86:83:bf:0f:23:51:27:fa:c3:
         de:42:65:52:93:ba:61:44:45:9d:80:fd:70:d6:57:bf:c8:e8:
         af:d3:b9:fb:84:3e:de:d4:cc:77:f6:96:52:2e:48:f4:80:da:
         f0:72:fe:cb:4a:74:9d:3f:ba:9d:ac:3a:3a:b1:ee:99:db:bf:
         2f:35:28:58:27:40:e3:22:c8:d5:d9:bc:77:5d:32:75:32:8b:
         48:5e:13:fb:9f:4e:98:53:1c:1c:fe:3b:29:50:00:c8:4e:4e:
         84:94:09:48:c4:79:52:96:36:6b:58:e6:a5:13:60:26:c4:4f:
         30:99:9c:0a:64:d9:96:45:a1:0e:32:79:94:62:11:f5:7e:02:
         9c:fd:a5:20:a7:e1:dc:90:f5:71:87:b1:15:b6:47:66:47:76:
         a8:17:0c:d7:f2:b1:72:2d:31:01:fc:a5:16:9f:ba:53:35:13:
         71:26:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org