Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/5c65a026dbec64adbea5c27ab7c3870723eaeb97.roa
File:                     5c65a026dbec64adbea5c27ab7c3870723eaeb97.roa (raw, json)
Hash identifier:          Luy/qYQdeyhRe30aif3rJ3CJIczanB3xJbiC+RnGS3Q=
Subject key identifier:   F6:7F:BD:72:6E:E8:35:90:FF:18:79:7A:B6:A9:BF:E1:BB:77:00:F8
Certificate issuer:       /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial:       119053
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/5c65a026dbec64adbea5c27ab7c3870723eaeb97.roa
Signing time:             Mon 02 Aug 2021 22:27:15 +0000
ROA not before:           Mon 02 Aug 2021 03:00:00 +0000
ROA not after:            Sun 02 Aug 2026 03:00:00 +0000
asID:                     61449
IP address blocks:        138.186.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151059 (0x119053)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
        Validity
            Not Before: Aug  2 03:00:00 2021 GMT
            Not After : Aug  2 03:00:00 2026 GMT
        Subject: CN=5c65a026dbec64adbea5c27ab7c3870723eaeb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:27:04:13:8d:7a:25:dc:bb:72:92:e9:54:
                    57:c1:f5:1a:0a:76:22:a2:25:d1:e5:8a:3e:46:e0:
                    a1:ad:de:35:28:40:d6:0f:3c:05:04:18:ed:4e:58:
                    c7:17:bc:be:02:83:c5:7a:95:fa:2a:4a:22:52:59:
                    bc:4d:56:15:43:72:dc:97:52:2b:9b:93:7d:2c:98:
                    eb:58:39:51:00:0b:33:46:d0:c3:b7:c8:8a:92:3a:
                    6f:50:e8:ce:b5:df:5c:ad:ba:49:2a:7c:97:b1:e2:
                    6c:63:6d:2e:ec:cf:5f:ee:bb:a2:c3:7a:76:15:c4:
                    9d:c6:6b:5e:fd:be:28:88:b8:aa:89:10:78:2f:d3:
                    6a:50:d5:87:c4:30:f8:a6:51:2d:ff:84:86:5c:11:
                    b8:8c:88:c8:a2:32:33:61:9c:8f:66:ea:3c:fd:06:
                    45:c4:31:1a:73:b5:25:06:7d:70:23:da:79:69:34:
                    0a:eb:be:f2:21:48:49:aa:1d:93:05:e3:7a:9b:6e:
                    45:60:2c:5c:c3:6c:3b:42:08:99:6b:12:81:d5:b2:
                    1b:7c:b2:e1:bc:48:ef:85:7f:a1:0f:45:1c:18:cd:
                    e7:93:82:9b:5a:f8:17:0f:10:92:1c:a8:65:5e:9e:
                    75:fe:33:9c:19:38:c1:c5:34:7e:3d:94:5b:4e:0e:
                    a3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7F:BD:72:6E:E8:35:90:FF:18:79:7A:B6:A9:BF:E1:BB:77:00:F8
            X509v3 Authority Key Identifier:
                keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/5c65a026dbec64adbea5c27ab7c3870723eaeb97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:8b:17:46:d0:c6:45:e4:3f:2e:74:9e:4e:95:72:55:ff:
         e6:60:66:de:2b:27:e0:89:91:e9:62:b0:81:18:c6:80:3b:bd:
         5d:ae:db:2c:e3:a4:4f:79:89:70:16:ff:44:1a:d5:30:fa:71:
         1a:d7:2c:0a:20:9a:ca:8d:2c:8f:5e:63:9d:e1:39:b0:b5:47:
         63:98:75:fb:99:34:22:58:ce:54:cd:71:e3:fa:23:66:41:19:
         23:25:5f:04:c5:93:fe:8b:5a:9f:b6:81:60:58:ac:3d:34:de:
         e8:8e:34:d3:dd:42:a7:9b:81:da:05:66:17:d2:9c:38:d7:e7:
         22:58:f1:58:ec:f0:c0:7f:0e:6c:ca:02:8f:4b:34:d5:94:f5:
         a6:db:ca:0b:90:3b:b6:9d:8a:a4:23:dc:d2:b3:72:1a:38:ca:
         19:11:48:65:97:37:3c:22:f9:9d:87:18:6c:81:d9:7d:83:01:
         c8:bb:43:33:e5:bd:c2:ef:13:3e:e8:84:34:ab:fe:5c:5d:e1:
         13:11:a4:ff:2b:2b:1b:59:a2:6b:0a:ad:c9:ba:c8:c2:4e:de:
         cf:51:be:6d:c6:61:5a:a4:7f:ca:09:03:6a:20:e5:1d:de:49:
         a2:a8:e4:8d:cb:f4:b1:0f:63:e8:69:96:87:5a:12:82:ec:7f:
         32:25:44:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org