Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/95f285c330f3b8f21263c928fc7cc3ac29fdeb10.roa
File:                     95f285c330f3b8f21263c928fc7cc3ac29fdeb10.roa (raw, json)
Hash identifier:          O4qqmmSUhG516pJ07NTzDtIucjJ9VdgyXLRBx7wR1Nw=
Subject key identifier:   A9:79:C7:14:4E:C9:1E:EC:92:63:B8:AA:12:3B:11:C2:3B:F0:09:9E
Certificate issuer:       /CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Certificate serial:       2F46
Authority key identifier: CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/95f285c330f3b8f21263c928fc7cc3ac29fdeb10.roa
Signing time:             Wed 13 Mar 2024 00:23:16 +0000
ROA not before:           Wed 13 Mar 2024 00:23:15 +0000
ROA not after:            Fri 13 Mar 2026 00:23:15 +0000
asID:                     28405
IP address blocks:        138.186.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12102 (0x2f46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
        Validity
            Not Before: Mar 13 00:23:15 2024 GMT
            Not After : Mar 13 00:23:15 2026 GMT
        Subject: CN=95f285c330f3b8f21263c928fc7cc3ac29fdeb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:5e:1b:81:da:1e:6c:8f:c4:99:19:dd:32:
                    f0:cd:10:c4:3c:56:bb:29:2b:0e:f7:90:11:62:47:
                    92:00:ce:23:ca:49:50:ff:6c:9f:ac:ad:d9:8c:f9:
                    27:3e:cf:ef:78:4e:06:93:ae:11:0a:6a:a6:16:4e:
                    4c:79:8e:4f:98:57:b1:32:e3:a9:42:b0:1d:e9:90:
                    ec:dd:4d:f6:75:72:c5:a9:29:36:03:28:ff:e5:4d:
                    4d:6b:92:67:dd:a7:08:b3:0a:ff:f1:94:64:4e:3c:
                    00:d2:db:65:b4:5c:f8:58:1c:0d:0f:93:cd:b1:b3:
                    52:ac:bb:51:fc:f4:5c:14:f7:de:b2:c2:dd:34:0c:
                    e1:01:25:38:9d:c8:ec:bc:f9:59:09:59:7e:c1:e2:
                    68:85:ed:6c:12:c9:ae:f1:ee:99:40:c5:3b:6e:bf:
                    fa:c2:8b:2c:18:c4:c3:05:25:60:d2:42:7f:a7:f4:
                    ae:69:a9:b4:6c:57:e0:d1:32:30:8e:d5:d5:3d:5b:
                    98:8f:9c:83:b2:f4:05:27:07:8b:a1:6e:27:e7:af:
                    0a:56:6b:74:24:3d:71:60:79:90:8e:50:d6:00:0a:
                    02:31:dc:f7:f1:e2:ce:cd:1a:06:54:fd:8d:02:25:
                    ab:58:f1:88:50:90:65:68:d1:7a:95:4c:7a:2a:9d:
                    31:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:79:C7:14:4E:C9:1E:EC:92:63:B8:AA:12:3B:11:C2:3B:F0:09:9E
            X509v3 Authority Key Identifier:
                keyid:CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/95f285c330f3b8f21263c928fc7cc3ac29fdeb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:b8:a8:fe:80:88:dc:d0:a1:72:a2:92:ac:cb:14:5c:2b:
         00:f8:54:61:ee:1e:e5:1f:a1:4e:42:37:78:aa:34:22:53:d6:
         84:3d:f5:5f:74:49:37:44:6d:ca:04:07:fd:de:5c:7d:ba:f7:
         30:b9:88:8f:5c:fb:35:96:2d:17:8d:de:df:22:29:63:62:1f:
         f5:12:35:4c:cf:bf:8c:54:0d:9c:84:8a:24:ee:21:e3:01:fa:
         2d:ad:4b:cc:c6:26:3b:e6:16:e1:7d:72:4a:6f:69:7b:85:b7:
         38:af:e8:5a:b3:f0:aa:81:e8:11:8f:2f:25:0d:b1:6d:66:95:
         57:fa:b9:14:89:25:5a:85:75:f7:5b:10:c9:44:3f:c0:af:dd:
         f4:bc:15:bd:ee:26:e4:c6:c4:49:91:c8:29:6a:9a:81:c5:8b:
         7a:fb:6e:71:05:b1:aa:5b:56:51:11:22:f8:e8:db:69:39:10:
         1a:ec:e0:a6:66:b8:af:28:09:60:72:a7:ba:89:6f:ec:5b:b5:
         ef:50:03:21:db:69:77:43:93:09:91:48:46:c7:4a:44:d5:52:
         81:a2:16:09:d1:73:4c:c4:82:f3:5f:d8:ef:05:ba:1d:fe:dd:
         11:f5:6b:3e:43:62:c1:71:21:ab:3d:87:03:ac:2c:47:d2:3d:
         78:74:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org