Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/16357ff79bed3b1b04c2f6748038bcc0f80e4b84.roa
File:                     16357ff79bed3b1b04c2f6748038bcc0f80e4b84.roa (raw, json)
Hash identifier:          g4+wn4dmPclNWeNTALHTO8U/Y1f4uxxRu3+J+K8f5Pc=
Subject key identifier:   69:87:B1:7D:53:06:44:73:00:2F:57:8E:E7:52:3C:5D:EB:DA:DB:B8
Certificate issuer:       /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial:       23B8CC
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/16357ff79bed3b1b04c2f6748038bcc0f80e4b84.roa
Signing time:             Sat 07 Oct 2023 08:30:01 +0000
ROA not before:           Fri 06 Oct 2023 08:30:01 +0000
ROA not after:            Sun 05 Oct 2025 08:30:01 +0000
asID:                     263781
IP address blocks:        138.118.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341068 (0x23b8cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
        Validity
            Not Before: Oct  6 08:30:01 2023 GMT
            Not After : Oct  5 08:30:01 2025 GMT
        Subject: CN=16357ff79bed3b1b04c2f6748038bcc0f80e4b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:6d:be:68:ea:81:e9:f8:05:55:30:28:8b:
                    ff:2e:22:69:c4:4d:aa:f4:2b:5f:2b:38:7d:ca:65:
                    d5:0d:5c:ab:a5:ef:3c:cf:fd:38:7e:a5:f9:38:57:
                    11:a4:9f:99:9c:88:97:f8:62:73:ca:7d:22:dc:8a:
                    6b:cb:c0:dd:2e:e1:02:cd:d2:7a:0c:7a:e7:96:a6:
                    9e:a4:29:6c:c4:b3:d3:37:48:18:42:3a:57:ef:08:
                    00:3e:80:e9:f5:3c:ea:b9:5e:1f:25:cd:ac:61:80:
                    a8:5a:0c:35:88:1a:94:75:f6:c4:6a:27:0e:f2:cb:
                    3b:8f:29:99:0d:f2:0a:59:a9:a4:a2:62:71:d6:dc:
                    31:e0:cd:03:51:dc:4a:d9:42:aa:7c:4b:b1:80:06:
                    26:f9:b3:f8:68:55:24:78:4d:07:15:d8:1b:42:d2:
                    dd:08:3e:5e:01:68:d3:6c:37:49:70:07:15:35:29:
                    10:05:29:b0:fe:8a:fb:97:d6:21:e0:74:26:e7:3f:
                    5c:4d:88:a2:a2:0d:61:a2:2f:8f:97:7a:07:f9:22:
                    ad:fd:4d:79:0f:ee:91:f8:cb:3f:03:c0:11:42:92:
                    7f:c2:98:7d:dd:a3:3f:c4:df:96:47:d9:45:90:8a:
                    20:f1:e7:3d:4a:1f:42:93:c5:56:c8:ac:33:36:38:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:87:B1:7D:53:06:44:73:00:2F:57:8E:E7:52:3C:5D:EB:DA:DB:B8
            X509v3 Authority Key Identifier:
                keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/16357ff79bed3b1b04c2f6748038bcc0f80e4b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:92:0f:db:3f:6f:da:82:c8:43:59:fb:bd:69:61:dc:3e:5b:
         eb:cb:19:b3:df:82:0c:e7:b2:fd:14:8b:80:d0:17:b0:a8:31:
         b2:9d:2f:24:17:c7:df:4f:8f:db:c8:2f:70:c1:3c:76:74:c0:
         1c:3e:8d:c7:24:9a:24:34:5a:57:27:25:5b:2d:f6:84:bb:5f:
         3f:b1:01:14:b2:cb:3f:d3:6e:f3:60:2e:b1:4a:e8:3e:42:cd:
         2d:cb:43:2c:85:7a:0c:d1:95:85:d2:d5:f9:7a:48:53:48:4a:
         a5:76:d1:ba:4d:aa:68:ee:75:16:52:60:6a:92:f6:0c:82:ed:
         98:62:41:d2:34:24:08:e5:93:54:4b:6e:76:87:a9:7e:f6:43:
         cb:27:fd:a5:12:0d:bd:09:24:04:8c:1f:b2:ea:c6:8d:35:d8:
         be:18:9f:61:94:08:aa:58:61:32:78:c3:47:e3:be:b5:09:54:
         2d:ac:52:d7:b5:89:41:60:6b:30:60:3f:31:1c:e5:4f:2f:21:
         a3:e5:1b:3d:36:e6:87:f3:37:f8:e0:80:24:02:e5:7a:85:2a:
         ba:20:81:41:66:49:3c:c3:b1:04:a3:f2:77:ed:c1:30:e3:a8:
         3a:6c:4f:3e:2c:36:99:b2:a0:c1:75:f7:d9:77:dc:b2:cc:6a:
         1c:ca:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org