Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/ed5d32c47ebf2a9a77a17efe25c2483f07b1f02f.roa
File:                     ed5d32c47ebf2a9a77a17efe25c2483f07b1f02f.roa (raw, json)
Hash identifier:          OoemUSxWTHSYIs0gao7tMO/W8cJB/xbxojF0ZD5VeDk=
Subject key identifier:   75:2F:E6:7B:9E:49:7D:74:51:3B:08:68:5E:E3:3C:A9:34:6B:1F:6F
Certificate issuer:       /CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Certificate serial:       23946A
Authority key identifier: 20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/ed5d32c47ebf2a9a77a17efe25c2483f07b1f02f.roa
Signing time:             Sat 02 Sep 2023 16:40:43 +0000
ROA not before:           Fri 01 Sep 2023 16:40:43 +0000
ROA not after:            Tue 02 Sep 2025 16:40:43 +0000
asID:                     263244
IP address blocks:        138.99.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2331754 (0x23946a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
        Validity
            Not Before: Sep  1 16:40:43 2023 GMT
            Not After : Sep  2 16:40:43 2025 GMT
        Subject: CN=ed5d32c47ebf2a9a77a17efe25c2483f07b1f02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5e:b1:a4:38:e3:c1:6a:dc:1f:c8:6c:25:a7:
                    ed:23:60:7a:0d:db:16:09:c2:01:37:a7:09:e6:41:
                    4b:72:e0:7c:9b:ac:3a:df:4d:ef:05:5a:ba:7d:e1:
                    e8:35:d9:93:1f:20:c9:c8:50:f4:b0:e6:6b:49:f4:
                    3c:4c:81:17:1f:b6:cb:da:3d:4c:56:02:1f:54:af:
                    17:af:35:fb:ea:7a:91:a9:53:10:83:9e:f2:c6:02:
                    75:c2:61:57:ca:3a:1f:8f:fb:7f:8d:cd:ec:09:f8:
                    92:21:67:1f:56:79:4b:b9:a6:91:d2:5a:1f:50:ff:
                    d6:6d:21:b1:03:82:1a:f6:49:52:ad:3e:2a:76:a0:
                    be:c1:bc:93:25:c2:13:f7:29:92:f4:d3:a8:2f:73:
                    fd:44:17:25:36:28:a1:51:68:8c:0f:fa:e9:4e:98:
                    ad:b0:95:7c:5c:77:5c:fc:d6:5a:38:4a:10:0a:19:
                    f1:57:ba:54:4c:2f:b9:c2:0f:3c:c1:5b:9f:85:d1:
                    a3:2b:71:c7:8c:8e:a6:47:c0:d7:b2:c7:37:11:50:
                    a9:6b:2b:d1:67:86:25:00:a3:25:81:3c:a5:68:2c:
                    05:65:af:0e:fb:9f:db:ca:6f:b6:77:6a:39:f8:15:
                    ad:13:4a:ba:ab:8f:87:53:96:52:5a:36:c0:c7:98:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2F:E6:7B:9E:49:7D:74:51:3B:08:68:5E:E3:3C:A9:34:6B:1F:6F
            X509v3 Authority Key Identifier:
                keyid:20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/ed5d32c47ebf2a9a77a17efe25c2483f07b1f02f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:29:0b:92:60:ac:35:af:e2:46:3e:a4:b0:6b:7c:d3:e2:65:
         52:a5:79:8f:72:05:b0:59:67:ea:23:a5:99:33:31:cf:da:41:
         fe:16:71:6b:d6:09:0f:2f:bf:7e:67:9c:73:13:16:ee:09:ec:
         db:58:1b:58:d2:29:de:d0:a1:a2:f1:02:44:29:aa:88:97:4e:
         7f:85:05:09:fc:16:8d:22:33:79:ad:6b:31:3a:b6:72:c1:2a:
         3c:40:d9:7f:0c:3c:b6:28:0c:1f:b4:31:20:c6:59:23:1a:cf:
         b9:14:77:ca:39:65:11:2d:33:78:c2:0b:df:70:02:1d:e3:db:
         29:b3:ea:07:f2:1b:78:f4:4a:c0:b9:0b:e5:d1:9d:81:9a:b0:
         57:f5:6f:dc:2a:97:c4:0e:90:0a:42:c4:57:3e:53:89:77:58:
         7b:db:ef:a6:8b:27:a0:9f:09:3f:3e:63:20:a2:be:cb:99:a3:
         eb:88:2d:c9:f8:55:8c:ef:dc:08:ea:9d:8f:58:94:02:23:98:
         b3:a4:5d:74:4b:a1:d0:97:a2:a3:e0:d9:27:40:04:59:26:fb:
         3b:00:e7:df:f0:1d:3b:03:40:02:90:a0:2b:a2:e3:f8:67:ed:
         61:79:ca:ca:54:39:4c:8b:52:bc:41:39:3b:ed:1a:3a:51:94:
         6f:ec:e3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org