Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/88620fa7d65a5768a4288af37fd5a53f866bb179.roa
File:                     88620fa7d65a5768a4288af37fd5a53f866bb179.roa (raw, json)
Hash identifier:          W9RLUwzMJESNnnu/HJePKAPjJ1PAYAYK0crRWC7dtB8=
Subject key identifier:   F5:3F:6B:B8:4A:4D:CB:56:3C:8D:DF:83:D2:3A:24:EE:11:C9:14:4F
Certificate issuer:       /CN=1bcfea8d0412e4c6eee276cfa4586b58320bdf8c
Certificate serial:       05AD0F
Authority key identifier: 25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/88620fa7d65a5768a4288af37fd5a53f866bb179.roa
Signing time:             Wed 24 Mar 2021 14:47:37 +0000
ROA not before:           Wed 24 Mar 2021 14:47:37 +0000
ROA not after:            Tue 24 Mar 2026 14:47:37 +0000
asID:                     270073
IP address blocks:        138.118.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371983 (0x5ad0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcfea8d0412e4c6eee276cfa4586b58320bdf8c
        Validity
            Not Before: Mar 24 14:47:37 2021 GMT
            Not After : Mar 24 14:47:37 2026 GMT
        Subject: CN=88620fa7d65a5768a4288af37fd5a53f866bb179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:ef:ec:ba:c3:3c:f7:d3:09:74:60:59:68:
                    78:3a:24:d1:88:89:84:c6:4e:89:7c:6a:ff:8b:5e:
                    bc:d8:c2:56:e1:d6:16:20:32:0e:43:53:5a:29:c5:
                    75:41:85:74:79:21:85:1e:09:ec:6b:36:c0:50:33:
                    ed:9f:c9:d7:ff:85:25:9a:df:f3:cd:fe:32:e7:61:
                    94:d9:36:73:49:36:f6:f9:fa:fc:e9:e8:a0:c8:29:
                    d1:ab:a0:5e:56:35:11:e0:46:d6:0b:ba:d3:f2:82:
                    3f:e0:d6:c6:82:79:95:2b:85:dd:76:c0:9b:5a:96:
                    bb:da:69:65:14:a1:1b:fc:cd:d4:d2:85:6c:e6:98:
                    e6:b8:0d:c0:78:55:09:42:a0:bb:a0:bf:3d:6b:cb:
                    8e:50:8a:70:92:a5:d4:99:2a:03:04:07:2a:e5:4b:
                    7a:ed:b4:e4:65:8c:15:36:ea:66:38:12:ea:d9:f5:
                    6f:12:dc:6f:b3:2b:f1:15:a4:69:1b:d0:8d:13:a8:
                    77:01:11:8d:96:62:af:e0:07:cb:b3:25:94:3e:ce:
                    3a:64:ad:80:9b:0b:88:7b:51:4e:2a:59:3b:8c:d0:
                    13:75:bd:9d:98:b1:55:f5:f4:0f:d2:5a:d6:2c:1a:
                    aa:04:88:4a:1d:f6:af:a2:46:dd:00:47:19:68:2c:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3F:6B:B8:4A:4D:CB:56:3C:8D:DF:83:D2:3A:24:EE:11:C9:14:4F
            X509v3 Authority Key Identifier:
                keyid:25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/88620fa7d65a5768a4288af37fd5a53f866bb179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:85:cb:5b:ef:fb:25:18:51:3c:76:5c:8a:0a:51:c1:50:
         49:cd:78:01:b5:92:08:cb:7d:33:41:e7:d0:33:4a:e8:e4:13:
         f2:b5:65:c2:f7:68:b4:36:25:37:33:07:2f:2a:5c:2d:d1:55:
         2d:7a:d3:55:af:b0:8d:a2:72:38:6b:bc:dc:24:70:53:f7:1a:
         df:7a:92:a9:d8:57:53:21:8a:97:9f:5e:d2:3e:ee:ba:d9:7d:
         89:01:ec:00:72:00:7a:97:40:e5:3c:b4:65:6e:42:75:4c:97:
         f4:8a:b4:a0:35:2e:86:a8:c7:0f:1a:7c:89:2b:78:93:20:33:
         c2:0b:e8:88:6e:53:09:e8:c6:fd:de:cf:21:82:88:07:5a:93:
         78:6d:57:ef:96:95:94:e0:87:a0:4c:67:6d:0f:3a:2f:70:97:
         17:90:f3:fa:0b:85:c9:6f:be:32:42:ff:63:0c:65:31:00:6d:
         3f:9c:21:51:44:ed:4d:fa:8c:b8:8f:e6:60:23:36:fe:80:8b:
         da:53:b5:5a:bf:cf:5c:42:33:9c:14:14:b1:7e:6e:2b:fc:73:
         90:1a:cf:7f:e1:df:02:51:af:14:a3:56:95:f7:66:53:d6:5d:
         25:91:1d:3b:67:04:77:60:9e:d5:b7:95:bc:55:35:08:e3:f4:
         21:33:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org