Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/93c6761473d642e81d1249c8cc4df9ec24cc4f85.roa
File:                     93c6761473d642e81d1249c8cc4df9ec24cc4f85.roa (raw, json)
Hash identifier:          jCkmCrCODvB0HvP8EUCw5IGgagwuuRVTum2aM4i0lyQ=
Subject key identifier:   05:28:0B:87:72:F7:F7:D4:7B:DA:63:5D:62:D4:71:D1:3A:8B:DF:9A
Certificate issuer:       /CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Certificate serial:       15E2
Authority key identifier: CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/93c6761473d642e81d1249c8cc4df9ec24cc4f85.roa
Signing time:             Tue 12 Mar 2024 23:09:34 +0000
ROA not before:           Tue 12 Mar 2024 23:09:33 +0000
ROA not after:            Thu 12 Mar 2026 23:09:33 +0000
asID:                     28405
IP address blocks:        138.186.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5602 (0x15e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
        Validity
            Not Before: Mar 12 23:09:33 2024 GMT
            Not After : Mar 12 23:09:33 2026 GMT
        Subject: CN=93c6761473d642e81d1249c8cc4df9ec24cc4f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:74:74:44:55:c8:60:3f:03:8b:ce:b0:5b:
                    9d:96:60:91:e5:65:0e:d5:90:8a:17:7f:d7:aa:6b:
                    83:21:6a:46:25:20:7a:ca:03:d5:c0:a7:ad:7d:df:
                    8a:75:dd:af:89:1e:b5:07:50:63:7b:a2:91:f8:91:
                    40:25:bf:43:56:54:9b:7f:81:a3:4a:1e:fe:08:a6:
                    a1:fb:b7:5a:f9:b8:92:cf:2a:b8:66:40:f1:b9:6c:
                    97:6f:35:3e:7f:bf:11:b2:00:d6:ba:f0:ff:1a:1f:
                    2e:ab:3f:53:98:1f:19:5c:ef:54:35:9f:76:56:b7:
                    f5:da:54:7c:57:3a:5e:e6:43:45:af:d9:bf:f0:87:
                    5b:c5:8d:55:9b:09:49:a8:13:0d:fc:e4:1f:74:0e:
                    b8:dd:02:d5:14:76:c3:91:2f:59:22:eb:41:55:24:
                    81:44:97:01:ca:e4:e2:6a:92:31:e5:4c:a8:be:c0:
                    88:c6:cd:8d:4a:95:17:11:ee:52:a6:1c:fd:94:d0:
                    95:c4:ca:f8:e5:26:16:0f:91:29:39:70:c3:f5:0f:
                    f3:18:78:9a:47:4d:ba:2a:d5:3a:ba:e1:0d:0c:27:
                    5f:4d:6b:ba:fe:08:31:9e:98:65:aa:4e:39:f8:68:
                    fd:66:64:5d:29:d0:76:f4:83:24:a6:d9:b0:c6:d6:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:0B:87:72:F7:F7:D4:7B:DA:63:5D:62:D4:71:D1:3A:8B:DF:9A
            X509v3 Authority Key Identifier:
                keyid:CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/93c6761473d642e81d1249c8cc4df9ec24cc4f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:d9:1c:9d:f5:5d:70:9f:cb:64:4a:bd:d6:f0:b3:af:6b:1e:
         6d:08:fc:2b:32:4c:f5:21:b5:39:52:97:fe:ed:c5:35:a9:e4:
         53:37:32:d3:ba:a1:a2:59:32:7d:fe:d9:66:5d:98:34:cd:f2:
         38:18:28:bc:fa:57:e9:00:0e:f5:de:81:5d:8e:6a:8c:96:62:
         2a:c4:f9:6a:77:62:e0:54:59:4d:77:48:d0:d2:fb:c1:bf:94:
         65:be:3c:e2:84:d6:de:ee:d4:d6:7f:15:7c:52:1e:3f:7a:68:
         fd:9e:7f:1d:f0:43:ec:e1:03:a5:b3:25:44:ae:a9:30:63:14:
         bd:f1:a2:83:74:07:04:4a:b1:5f:d5:1e:bd:a9:8f:6e:15:f6:
         e9:00:38:2c:9b:f0:9f:87:df:2f:8b:d8:1c:24:db:f1:66:8d:
         4d:a3:a3:c0:e4:0c:c5:6f:04:66:3a:3b:7d:52:9a:64:e6:37:
         e1:8f:7f:23:57:ee:15:71:fe:04:fd:3e:7c:1a:fa:50:f2:16:
         dd:af:71:62:a5:51:52:b4:2d:e0:41:84:1e:8a:76:f4:dd:31:
         9b:6a:69:1c:6f:6e:30:15:ab:9d:75:a3:3f:df:06:da:01:44:
         4e:8c:6e:98:7d:27:3e:72:e4:62:de:0f:67:ab:81:d2:0a:e6:
         97:ec:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org