Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/8f45496d76f15e8bf440399e3fe1698945b5b6f6.roa
File:                     8f45496d76f15e8bf440399e3fe1698945b5b6f6.roa (raw, json)
Hash identifier:          9IPzv7xOu95LPqS3CE5dKqfv9ReHzcPqeJpNYEsmIXY=
Subject key identifier:   ED:B4:51:58:17:5A:41:4A:58:64:E7:A0:EC:38:0F:BC:FC:67:C2:65
Certificate issuer:       /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial:       123935
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/8f45496d76f15e8bf440399e3fe1698945b5b6f6.roa
Signing time:             Fri 08 Oct 2021 16:21:41 +0000
ROA not before:           Fri 08 Oct 2021 03:00:00 +0000
ROA not after:            Sun 08 Oct 2023 03:00:00 +0000
asID:                     263781
IP address blocks:        138.118.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194293 (0x123935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
        Validity
            Not Before: Oct  8 03:00:00 2021 GMT
            Not After : Oct  8 03:00:00 2023 GMT
        Subject: CN=8f45496d76f15e8bf440399e3fe1698945b5b6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:b7:41:5a:c8:bb:69:c4:eb:0a:9e:3b:92:
                    6c:c7:b9:fd:81:ac:8b:5a:1f:9c:92:44:b5:40:f9:
                    b0:bf:80:7f:50:c9:d5:90:4c:0e:06:9a:32:66:4a:
                    92:06:1e:12:b6:a7:1d:c3:3e:bc:be:8e:61:91:90:
                    d0:d4:91:42:b6:52:40:bf:ed:89:93:6e:77:5f:4c:
                    6e:5d:1b:13:cd:a7:4e:22:78:b8:da:6c:9f:97:79:
                    26:7a:82:b6:c0:c3:4c:33:76:f2:46:86:e4:6d:2d:
                    55:3a:2b:8d:89:a3:fb:17:e8:09:db:01:e5:5d:e5:
                    77:c9:18:7e:a3:96:d6:56:56:70:ae:ea:e7:e4:11:
                    a3:ac:44:d3:85:d0:ea:35:78:55:00:5d:6a:a1:81:
                    1c:4d:63:17:2b:e1:3c:c6:aa:9b:45:5a:fc:7b:53:
                    bb:4c:ce:56:77:45:38:9f:00:b5:61:d6:a1:7b:5d:
                    59:bc:11:66:30:d9:72:03:16:ab:d8:b8:c5:a4:aa:
                    30:be:c9:7c:bb:eb:98:d7:2e:59:80:17:ff:0d:e1:
                    9e:85:48:18:c9:3f:bc:5e:1c:81:89:85:e6:87:bb:
                    89:1e:f8:ac:7e:95:33:a9:24:a3:d2:ac:46:0b:8c:
                    38:1e:ca:27:aa:94:83:16:b2:2a:26:af:11:2e:9f:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B4:51:58:17:5A:41:4A:58:64:E7:A0:EC:38:0F:BC:FC:67:C2:65
            X509v3 Authority Key Identifier:
                keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/8f45496d76f15e8bf440399e3fe1698945b5b6f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:36:fe:db:98:28:0d:4b:da:21:72:3d:96:15:f2:4b:cc:bb:
         a9:be:89:0b:2a:34:20:c8:01:81:8f:59:3a:fc:05:c1:c6:93:
         f1:60:c4:29:25:20:1f:8b:78:2a:e1:7f:cd:8a:6f:3e:68:5e:
         a5:db:ef:9d:af:46:44:1b:39:af:74:b1:84:a7:dd:24:38:67:
         ff:6e:15:cd:fb:2f:be:f8:b2:49:d4:89:33:cd:db:6f:e7:24:
         59:65:37:b4:80:49:d4:0f:d3:92:66:8c:f9:c9:bc:5d:f8:58:
         fa:ca:a8:d8:9f:02:4d:9e:57:78:86:d7:01:c3:33:b2:66:e5:
         af:b6:ff:e4:c7:f0:59:7f:76:40:8c:11:c6:0f:08:4f:b1:49:
         0f:22:9c:d5:02:45:3c:f5:c3:d8:75:1c:86:d0:6b:43:2b:0f:
         0d:13:c3:69:a7:c4:ea:a4:77:0a:06:4e:40:84:6b:2f:e4:7d:
         ed:62:d3:1a:02:a5:68:fa:e9:b4:6d:80:bd:72:d9:6e:34:7c:
         52:d4:78:c1:4c:fe:46:95:f0:44:2c:fc:3a:68:e9:39:a1:31:
         70:51:24:25:01:91:f5:07:c6:77:92:32:cd:38:d2:b1:5a:92:
         bd:4d:d0:b5:25:1a:dd:f3:27:fd:bd:92:04:f4:72:1d:c2:79:
         dd:0a:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org