Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/b4035237e0f90319b76de4d3a5e216d9f1bacef1.roa
File:                     b4035237e0f90319b76de4d3a5e216d9f1bacef1.roa (raw, json)
Hash identifier:          ZiZ9FUZhnPCcoBaSdEf4jgOLscjnsK32gy1UCPz6KVM=
Subject key identifier:   F1:96:74:F8:F2:11:B5:73:5F:0E:6E:53:A9:07:3A:11:38:E7:5C:65
Certificate issuer:       /CN=d31e9a71271a98fb6f60776ee08cb771f256bb33
Certificate serial:       0DB8C3
Authority key identifier: A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e9a71271a98fb6f60776ee08cb771f256bb33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/b4035237e0f90319b76de4d3a5e216d9f1bacef1.roa
Signing time:             Wed 24 Mar 2021 14:30:18 +0000
ROA not before:           Wed 24 Mar 2021 14:30:18 +0000
ROA not after:            Tue 24 Mar 2026 14:30:18 +0000
asID:                     17069
IP address blocks:        138.117.112.0/22 maxlen: 24
                          181.192.0.0/19 maxlen: 24
                          2803:2300::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899267 (0xdb8c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31e9a71271a98fb6f60776ee08cb771f256bb33
        Validity
            Not Before: Mar 24 14:30:18 2021 GMT
            Not After : Mar 24 14:30:18 2026 GMT
        Subject: CN=b4035237e0f90319b76de4d3a5e216d9f1bacef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8f:51:16:56:24:2f:3f:53:e5:be:39:fa:ae:
                    ab:a6:b1:e4:03:a2:99:30:d2:be:06:6b:e5:5a:ac:
                    3e:c1:0b:1e:00:9c:5f:aa:15:59:3d:11:79:8d:1f:
                    ab:d0:15:d5:a7:d2:bd:d6:3e:a2:f3:fe:ae:ab:0a:
                    ac:56:0b:e4:02:ca:f0:4e:82:f7:9b:02:ee:10:9b:
                    44:8e:b6:18:95:d9:cf:9c:34:e1:e0:a9:9f:ef:fa:
                    bf:ab:69:98:e7:5d:9b:06:83:3f:c3:1a:20:8e:26:
                    f9:be:63:1b:99:22:51:23:84:81:dc:e6:c3:99:ec:
                    4a:0d:73:da:25:d8:28:28:00:d5:d0:c8:30:29:9e:
                    f2:c6:7a:27:98:b9:29:a9:97:b5:43:6d:63:ad:ca:
                    96:75:6e:a8:5d:c3:b4:28:6b:5b:ee:23:dd:3f:51:
                    47:c4:5b:d0:4d:e3:a6:8e:16:7c:36:e5:a7:3c:23:
                    24:06:0b:23:01:61:d4:f7:35:d8:fc:d6:de:5d:e1:
                    40:31:e4:73:80:f4:52:2e:97:6b:72:ea:7d:aa:90:
                    ec:d1:30:e1:88:d0:f8:57:76:f0:05:03:fc:26:53:
                    d1:46:25:b1:4f:79:32:99:a2:aa:7a:83:37:c9:2c:
                    32:5c:46:67:e5:43:e6:ae:85:90:29:ba:50:9e:05:
                    eb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:96:74:F8:F2:11:B5:73:5F:0E:6E:53:A9:07:3A:11:38:E7:5C:65
            X509v3 Authority Key Identifier:
                keyid:A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e9a71271a98fb6f60776ee08cb771f256bb33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/b4035237e0f90319b76de4d3a5e216d9f1bacef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.112.0/22
                  181.192.0.0/19
                IPv6:
                  2803:2300::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:07:ea:1f:1f:8e:41:37:ff:f6:be:85:a0:6f:4d:69:7b:
         af:35:e2:94:5d:d1:45:10:4b:31:72:f9:f6:2e:3b:6d:46:94:
         fc:4d:1a:73:26:23:9c:a3:67:3c:bc:6a:66:e4:ff:f4:78:38:
         70:7e:31:25:0f:e9:06:52:0d:ab:c5:e9:ec:a8:48:5d:01:22:
         7d:c3:9b:af:ce:14:79:b8:a3:dc:bf:30:8b:04:14:a5:5a:4d:
         29:2c:e2:90:86:91:98:2a:b8:5c:c6:52:af:f6:4e:85:46:67:
         78:f4:e2:16:56:f4:22:4e:a4:d1:9d:27:e2:fe:d1:2e:6e:ef:
         5c:d8:cb:99:55:74:21:9d:fa:56:0d:08:d1:ab:b3:12:41:3a:
         87:a7:3e:3f:a2:5d:67:79:fe:89:04:18:41:0f:a3:0e:d4:9b:
         85:99:a7:28:a8:c8:c8:a4:05:e4:16:3d:94:19:0e:c4:31:8d:
         65:75:35:82:3d:3f:66:7c:e1:cb:6b:34:37:a9:fb:c2:13:bd:
         14:31:f2:b6:dd:ba:27:94:8b:a2:18:b3:7d:cf:b0:79:4d:48:
         e4:7b:3a:53:2b:8c:fa:8d:e6:05:23:84:a4:8d:49:46:39:ca:
         b9:16:92:b8:28:95:c7:9f:7c:94:b3:26:69:04:a9:49:4f:69:
         c1:13:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org