Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1d13eaf3-5c7f-4532-b910-50f6d9ac10da/f8e57801ae07e0ca16e1e9fc1efb9c768afe6652.roa
File:                     f8e57801ae07e0ca16e1e9fc1efb9c768afe6652.roa (raw, json)
Hash identifier:          tUCXdeb8ZPYJsJVjC2ttQZBKe51myU5XIuQtsUMJVbo=
Subject key identifier:   70:72:15:6B:46:8A:12:3C:1F:95:FD:38:2B:21:CF:40:FE:F9:23:8D
Certificate issuer:       /CN=3cb600ffe26a656b54e50fffe6c5f16afd851756
Certificate serial:       0C75F6
Authority key identifier: 0D:80:3E:6E:EA:5D:F3:5E:4A:66:77:BD:9B:6E:1F:17:2F:8E:F1:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cb600ffe26a656b54e50fffe6c5f16afd851756.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1d13eaf3-5c7f-4532-b910-50f6d9ac10da/f8e57801ae07e0ca16e1e9fc1efb9c768afe6652.roa
Signing time:             Wed 24 Mar 2021 14:36:07 +0000
ROA not before:           Wed 24 Mar 2021 14:36:07 +0000
ROA not after:            Tue 24 Mar 2026 14:36:07 +0000
asID:                     61498
IP address blocks:        138.117.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816630 (0xc75f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb600ffe26a656b54e50fffe6c5f16afd851756
        Validity
            Not Before: Mar 24 14:36:07 2021 GMT
            Not After : Mar 24 14:36:07 2026 GMT
        Subject: CN=f8e57801ae07e0ca16e1e9fc1efb9c768afe6652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:02:7b:68:1b:19:ec:f9:94:52:f8:84:44:
                    87:98:e2:2c:4e:01:d1:40:7e:7f:02:71:c8:d4:be:
                    f1:91:d3:28:14:0c:c6:15:0f:9a:a2:16:9f:2b:26:
                    93:89:86:1e:59:58:2a:ea:b4:7a:58:6c:7a:11:34:
                    2a:43:25:ea:a6:eb:a7:7a:ea:69:fe:79:5a:f6:0f:
                    5a:ca:84:20:62:1f:71:14:b3:36:78:d4:a2:22:7f:
                    03:5f:c3:a9:4f:26:ae:dc:47:41:d9:8b:3b:cf:46:
                    2d:00:3b:56:c6:b6:88:07:7d:bf:0c:ca:53:ed:8e:
                    88:f4:b3:ae:9c:29:5a:07:0f:77:99:23:6d:07:f9:
                    7a:8f:83:ff:a6:7c:ae:76:df:3a:f5:74:cd:e3:90:
                    d6:79:8e:c5:5b:2a:d7:f7:9f:13:e7:ee:8d:9b:46:
                    07:83:69:06:9e:43:de:4a:3e:9b:c2:cf:f7:2d:a4:
                    33:4e:04:5b:31:fb:c0:48:ea:93:1b:7d:ca:db:e0:
                    e0:f5:af:23:f5:51:93:8d:e0:43:cb:1c:2b:a6:d1:
                    6f:85:c2:ff:59:a3:60:9d:64:49:5c:89:35:65:89:
                    75:c3:9b:f6:bc:3d:0a:e6:63:9e:ea:10:66:f6:ab:
                    d3:77:55:b7:0f:05:a0:8c:ff:c7:3b:f4:f9:99:1c:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:72:15:6B:46:8A:12:3C:1F:95:FD:38:2B:21:CF:40:FE:F9:23:8D
            X509v3 Authority Key Identifier:
                keyid:0D:80:3E:6E:EA:5D:F3:5E:4A:66:77:BD:9B:6E:1F:17:2F:8E:F1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cb600ffe26a656b54e50fffe6c5f16afd851756.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1d13eaf3-5c7f-4532-b910-50f6d9ac10da/f8e57801ae07e0ca16e1e9fc1efb9c768afe6652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1d13eaf3-5c7f-4532-b910-50f6d9ac10da/3cb600ffe26a656b54e50fffe6c5f16afd851756.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:e7:d7:9d:2f:0e:8b:e1:7d:5f:4c:af:9c:23:57:44:85:
         9b:db:54:fe:6a:2f:34:b4:b3:47:dc:e9:8c:58:c4:2b:f7:49:
         8c:9c:bd:9d:b9:04:93:9a:c6:9d:b3:4e:bb:57:27:cd:53:ce:
         5e:5e:be:50:ad:2f:ce:0d:52:62:1e:82:72:08:12:b6:e0:8a:
         58:4b:53:1a:b6:b3:14:fd:c9:a1:d1:be:dc:d0:8d:31:52:6b:
         fc:f1:50:30:84:7a:fc:59:f5:0e:84:fd:2e:cd:ef:5b:52:5f:
         50:d3:cd:d8:da:76:06:af:d2:5d:cb:ed:da:92:cc:01:d2:c3:
         32:17:4b:c1:6e:e9:22:31:fd:a9:d4:e1:cb:f7:a6:01:5f:10:
         77:67:98:18:50:ff:8d:09:a7:87:52:1d:c2:00:73:dd:c5:f3:
         71:88:b6:28:02:36:10:34:c5:7e:2b:a8:a4:80:ec:16:ff:61:
         75:fb:92:56:b2:39:96:8e:f8:7b:77:06:c8:52:74:1d:0f:c6:
         bb:d0:29:3d:77:90:45:92:af:01:30:42:a1:c2:90:49:e0:73:
         b4:df:8f:a9:08:94:b4:b8:79:18:c4:0f:e3:f6:eb:7e:f8:18:
         bf:47:6f:69:1a:40:3f:79:92:54:8e:ad:df:92:2d:c5:fe:bc:
         d1:45:49:ff
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDHX2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNj
YjYwMGZmZTI2YTY1NmI1NGU1MGZmZmU2YzVmMTZhZmQ4NTE3NTYwHhcNMjEwMzI0
MTQzNjA3WhcNMjYwMzI0MTQzNjA3WjAzMTEwLwYDVQQDEyhmOGU1NzgwMWFlMDdl
MGNhMTZlMWU5ZmMxZWZiOWM3NjhhZmU2NjUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqEUCe2gbGez5lFL4hESHmOIsTgHRQH5/AnHI1L7xkdMoFAzG
FQ+aohafKyaTiYYeWVgq6rR6WGx6ETQqQyXqpuuneupp/nla9g9ayoQgYh9xFLM2
eNSiIn8DX8OpTyau3EdB2Ys7z0YtADtWxraIB32/DMpT7Y6I9LOunClaBw93mSNt
B/l6j4P/pnyudt869XTN45DWeY7FWyrX958T5+6Nm0YHg2kGnkPeSj6bws/3LaQz
TgRbMfvASOqTG33K2+Dg9a8j9VGTjeBDyxwrptFvhcL/WaNgnWRJXIk1ZYl1w5v2
vD0K5mOe6hBm9qvTd1W3DwWgjP/HO/T5mRwYBQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHByFWtGihI8H5X9OCshz0D++SONMB8GA1UdIwQYMBaAFA2APm7qXfNeSmZ3
vZtuHxcvjvHJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2NiNjAw
ZmZlMjZhNjU2YjU0ZTUwZmZmZTZjNWYxNmFmZDg1MTc1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWQxM2VhZjMtNWM3Zi00NTMyLWI5MTAtNTBmNmQ5
YWMxMGRhL2Y4ZTU3ODAxYWUwN2UwY2ExNmUxZTlmYzFlZmI5Yzc2OGFmZTY2NTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZDEzZWFmMy01YzdmLTQ1MzItYjkxMC01MGY2
ZDlhYzEwZGEvM2NiNjAwZmZlMjZhNjU2YjU0ZTUwZmZmZTZjNWYxNmFmZDg1MTc1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAop1iDANBgkqhkiG9w0BAQsFAAOCAQEAMU/n150vDovhfV9M
r5wjV0SFm9tU/movNLSzR9zpjFjEK/dJjJy9nbkEk5rGnbNOu1cnzVPOXl6+UK0v
zg1SYh6CcggStuCKWEtTGrazFP3JodG+3NCNMVJr/PFQMIR6/Fn1DoT9Ls3vW1Jf
UNPN2Np2Bq/SXcvt2pLMAdLDMhdLwW7pIjH9qdThy/emAV8Qd2eYGFD/jQmnh1Id
wgBz3cXzcYi2KAI2EDTFfiuopIDsFv9hdfuSVrI5lo74e3cGyFJ0HQ/Gu9ApPXeQ
RZKvATBCocKQSeBztN+PqQiUtLh5GMQP4/brfvgYv0dvaRpAP3mSVI6t35Itxf68
0UVJ/w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org