Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/12f7673086928e0d38156af7c6fce2c05cd4d8ba.roa
File:                     12f7673086928e0d38156af7c6fce2c05cd4d8ba.roa (raw, json)
Hash identifier:          evJY9lYUO6gxGngTbMbQd0stpibz3vfRUjXLrpynT9o=
Subject key identifier:   8F:C6:9C:A3:F9:11:EE:FD:35:D2:CB:06:18:88:6A:DE:68:82:B2:27
Certificate issuer:       /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial:       122C2B
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/12f7673086928e0d38156af7c6fce2c05cd4d8ba.roa
Signing time:             Fri 08 Oct 2021 16:16:35 +0000
ROA not before:           Fri 08 Oct 2021 03:00:00 +0000
ROA not after:            Sun 08 Oct 2023 03:00:00 +0000
asID:                     263781
IP address blocks:        138.118.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190955 (0x122c2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
        Validity
            Not Before: Oct  8 03:00:00 2021 GMT
            Not After : Oct  8 03:00:00 2023 GMT
        Subject: CN=12f7673086928e0d38156af7c6fce2c05cd4d8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:f3:5c:3e:42:31:bf:35:72:35:ee:8e:52:
                    8d:cd:fd:ae:77:20:84:9d:c7:18:d6:60:93:64:a6:
                    77:69:2b:4e:2b:85:fd:a9:3b:2e:9c:da:da:69:c5:
                    79:64:60:62:d9:c6:2e:4d:c6:47:59:58:16:73:64:
                    cd:a3:62:48:03:56:53:47:f4:fd:82:aa:ad:1c:fa:
                    35:ca:07:9c:88:27:7e:e3:26:3e:f0:a3:a9:04:e0:
                    55:18:58:5e:5e:db:4b:47:62:25:30:25:ed:6d:13:
                    a2:a0:f9:ca:b4:b1:1d:94:cf:a7:5d:80:03:5b:97:
                    c3:13:c0:82:f2:93:c0:8b:10:4f:f5:50:e9:d1:5a:
                    f8:64:b0:8a:44:4a:6f:28:96:c6:ff:d0:b4:a6:35:
                    be:89:0d:33:56:8d:3a:38:96:8d:1c:e2:22:db:05:
                    4e:a0:22:1c:89:b5:0f:ac:bf:fd:73:c0:d5:1d:4c:
                    81:4b:7d:e7:ed:f8:55:95:6e:60:2f:63:7a:20:d0:
                    8d:32:ac:75:d9:bd:67:70:e0:17:e2:53:31:63:8d:
                    6a:42:cd:fe:c8:dd:4d:a0:60:30:5c:d7:cc:5b:5b:
                    ba:32:6b:78:10:86:f7:ef:c8:e8:59:a4:8d:23:f0:
                    90:d2:0c:ce:62:d0:f2:79:a3:4b:b9:1e:b7:56:cd:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C6:9C:A3:F9:11:EE:FD:35:D2:CB:06:18:88:6A:DE:68:82:B2:27
            X509v3 Authority Key Identifier:
                keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/12f7673086928e0d38156af7c6fce2c05cd4d8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:3b:1c:a8:64:86:7b:0b:f2:cf:f0:76:02:c0:65:dd:e5:57:
         0a:55:5e:d1:37:7c:0a:11:bd:f6:a3:88:fd:19:d9:ad:b2:e5:
         a5:1a:99:fb:ce:91:27:86:27:15:73:2b:6e:5c:67:cc:b8:a8:
         ac:8b:3e:a1:1f:db:d2:1a:4a:07:f2:2e:7d:46:42:67:bc:5c:
         93:aa:37:df:ec:09:9c:72:65:8f:2c:6c:0c:e9:fa:fc:ad:94:
         5d:28:7e:eb:11:f3:70:f6:c1:34:34:68:fc:ba:7f:76:b7:0b:
         6b:68:c9:fa:98:df:7d:f1:ea:25:74:bd:18:bc:fb:49:79:3f:
         bf:a3:e5:f7:d5:bd:a5:d2:80:2f:2a:22:0d:6c:c0:cc:14:9e:
         2a:1b:22:3d:82:3a:fc:7c:bc:1d:51:67:b9:6f:85:22:d0:a0:
         79:45:b3:6e:8a:92:e4:cc:a1:3b:3a:57:70:ee:d4:19:44:60:
         79:93:88:70:7e:1e:19:f5:7a:ff:c7:04:5b:85:81:15:92:aa:
         82:f0:49:cb:7c:99:34:2d:40:aa:7e:b4:d6:c9:cc:d9:63:36:
         ae:d7:ae:4a:a6:d8:0c:34:af:68:ba:8e:a9:15:a4:08:72:d3:
         d7:c3:36:1f:01:fc:ce:2d:08:08:3b:e0:6c:b2:b5:c0:8f:cc:
         bb:08:ae:db
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEiwrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
NDg4ODJlYjFjOGU2NmFiNWMyM2Y2NjczNjI1NjdlNmQ3ZGI2NzEwHhcNMjExMDA4
MDMwMDAwWhcNMjMxMDA4MDMwMDAwWjAzMTEwLwYDVQQDEygxMmY3NjczMDg2OTI4
ZTBkMzgxNTZhZjdjNmZjZTJjMDVjZDRkOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxgXzXD5CMb81cjXujlKNzf2udyCEnccY1mCTZKZ3aStOK4X9
qTsunNraacV5ZGBi2cYuTcZHWVgWc2TNo2JIA1ZTR/T9gqqtHPo1ygeciCd+4yY+
8KOpBOBVGFheXttLR2IlMCXtbROioPnKtLEdlM+nXYADW5fDE8CC8pPAixBP9VDp
0Vr4ZLCKREpvKJbG/9C0pjW+iQ0zVo06OJaNHOIi2wVOoCIcibUPrL/9c8DVHUyB
S33n7fhVlW5gL2N6INCNMqx12b1ncOAX4lMxY41qQs3+yN1NoGAwXNfMW1u6Mmt4
EIb378joWaSNI/CQ0gzOYtDyeaNLuR63Vs059QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI/GnKP5Ee79NdLLBhiIat5ogrInMB8GA1UdIwQYMBaAFF697Iy1u+wGFl6M
Od28euJhkYp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTI0ODg4
MmViMWM4ZTY2YWI1YzIzZjY2NzM2MjU2N2U2ZDdkYjY3MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNlZTI5OWQtZjgyMi00ZjlkLThmMTktNTY4N2My
MDAyN2JkLzEyZjc2NzMwODY5MjhlMGQzODE1NmFmN2M2ZmNlMmMwNWNkNGQ4YmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2VlMjk5ZC1mODIyLTRmOWQtOGYxOS01Njg3
YzIwMDI3YmQvMTI0ODg4MmViMWM4ZTY2YWI1YzIzZjY2NzM2MjU2N2U2ZDdkYjY3
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAop2aDANBgkqhkiG9w0BAQsFAAOCAQEAoDscqGSGewvyz/B2
AsBl3eVXClVe0Td8ChG99qOI/RnZrbLlpRqZ+86RJ4YnFXMrblxnzLiorIs+oR/b
0hpKB/IufUZCZ7xck6o33+wJnHJljyxsDOn6/K2UXSh+6xHzcPbBNDRo/Lp/drcL
a2jJ+pjfffHqJXS9GLz7SXk/v6Pl99W9pdKALyoiDWzAzBSeKhsiPYI6/Hy8HVFn
uW+FItCgeUWzboqS5MyhOzpXcO7UGURgeZOIcH4eGfV6/8cEW4WBFZKqgvBJy3yZ
NC1Aqn601snM2WM2rteuSqbYDDSvaLqOqRWkCHLT18M2HwH8zi0ICDvgbLK1wI/M
uwiu2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org