Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/6a73f8e9bbd1871d52440934b75e30ac700c92ba.roa
File:                     6a73f8e9bbd1871d52440934b75e30ac700c92ba.roa (raw, json)
Hash identifier:          TyxfSOrEGRhbGs9+sw16VCttsQBlbnZdjQcyejDp4jM=
Subject key identifier:   CC:6D:87:AF:27:BA:6E:0A:C6:8C:B5:6E:5C:A2:87:65:A5:B0:D3:4D
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       25EC2F
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/6a73f8e9bbd1871d52440934b75e30ac700c92ba.roa
Signing time:             Fri 01 Mar 2024 08:30:00 +0000
ROA not before:           Fri 01 Mar 2024 08:30:00 +0000
ROA not after:            Sun 01 Mar 2026 08:30:00 +0000
asID:                     263793
IP address blocks:        138.117.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485295 (0x25ec2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Mar  1 08:30:00 2024 GMT
            Not After : Mar  1 08:30:00 2026 GMT
        Subject: CN=6a73f8e9bbd1871d52440934b75e30ac700c92ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:ff:dd:ac:a1:29:8b:0f:16:b1:1d:45:46:
                    50:79:8f:92:cb:f7:49:f0:dc:c8:c6:36:d7:55:43:
                    4f:aa:c7:c7:bf:a9:b7:3f:15:ac:e4:6f:8c:c0:3d:
                    b9:53:c5:4e:e9:00:5a:d0:d2:43:e9:ff:31:fc:7b:
                    4a:7a:89:f3:f3:c7:f4:e9:4c:f3:98:b3:40:4c:f8:
                    f5:79:f1:0a:94:65:b9:ee:bb:bf:f6:98:29:44:5d:
                    a0:79:3a:c5:18:45:71:c0:9d:c9:42:da:e0:52:9f:
                    59:73:d9:41:aa:f4:94:7e:51:e2:56:d2:9b:53:75:
                    f8:15:a3:cc:48:f2:e6:0e:b7:26:35:7f:d0:22:08:
                    f0:2b:2f:cb:3c:52:ce:9c:2b:ac:ec:bf:2d:13:0e:
                    8c:b0:19:d5:6b:ea:4a:d1:a3:80:37:08:ec:7b:ad:
                    bf:8b:4f:36:94:b3:a0:37:db:c5:9b:01:91:e0:f0:
                    e3:6c:1a:25:24:c6:6c:04:40:af:05:81:85:ba:cd:
                    a3:df:51:26:4a:bd:ec:4f:d0:a1:6b:af:66:c4:eb:
                    b0:11:1d:b5:44:1d:bd:9c:58:74:4b:06:86:c8:ec:
                    52:9f:64:51:b7:de:60:a4:3c:0d:43:73:e0:15:d4:
                    67:66:28:92:86:8c:18:f0:91:40:79:1e:6e:ca:43:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:87:AF:27:BA:6E:0A:C6:8C:B5:6E:5C:A2:87:65:A5:B0:D3:4D
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/6a73f8e9bbd1871d52440934b75e30ac700c92ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:29:c9:b4:1f:84:1d:9a:d4:4b:99:d4:50:b2:95:4b:59:a0:
         bd:7a:1c:24:f9:0b:4f:f2:a5:7b:32:c6:6d:13:2f:53:74:2b:
         5e:5c:32:5b:25:86:84:5d:6d:98:c5:88:39:36:af:ed:2c:6d:
         19:81:c3:3b:d3:35:bd:c1:71:65:77:44:89:46:f0:5e:c9:64:
         39:6d:b7:a2:30:10:b0:d9:71:4d:61:1b:62:5f:a6:7e:75:2d:
         a2:c9:5b:8a:28:61:42:ac:1e:ab:ad:be:11:51:23:36:63:5f:
         3a:27:08:48:9a:d0:0f:68:b9:86:ce:20:8f:7b:55:94:9b:a6:
         50:52:52:36:b4:9b:89:ed:e3:75:47:95:81:c7:8a:68:e0:28:
         3a:14:f8:fe:14:ab:25:b0:68:2f:75:b0:63:38:c3:71:d7:9d:
         9c:5c:c1:5a:96:3c:5c:81:1f:38:84:f3:e5:d5:75:fa:93:28:
         95:d7:e3:59:d5:e5:99:da:74:d7:3b:a9:a0:9a:1b:6c:6b:75:
         9a:af:7e:fd:97:1e:f6:bc:22:28:b9:5a:8f:c6:70:4d:a2:23:
         ed:b4:54:62:08:13:7f:ea:b5:95:70:60:e1:7f:a0:71:6f:3d:
         e7:af:fe:dd:40:71:23:3a:54:55:6a:1f:63:5d:37:25:2d:f8:
         8e:7a:2b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org