Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/55ae76ae3d6946a6887a6f70be97dc5a48cec9fc.roa
File:                     55ae76ae3d6946a6887a6f70be97dc5a48cec9fc.roa (raw, json)
Hash identifier:          +MyNpfYIxWRQahdN0qKgYppeTAlmhclNUrwiLl7OeyI=
Subject key identifier:   70:AF:37:9F:D0:24:C3:DF:B2:C9:D6:CE:AD:22:60:B1:9C:0C:78:20
Certificate issuer:       /CN=a73c2640b87c02edde7ff9424425bd136edffe32
Certificate serial:       0CFE7A
Authority key identifier: 65:6D:DE:B4:82:27:25:10:6D:0E:D3:ED:EE:78:9C:AE:19:D3:CF:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a73c2640b87c02edde7ff9424425bd136edffe32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/55ae76ae3d6946a6887a6f70be97dc5a48cec9fc.roa
Signing time:             Wed 24 Mar 2021 14:37:20 +0000
ROA not before:           Wed 24 Mar 2021 14:37:20 +0000
ROA not after:            Tue 24 Mar 2026 14:37:20 +0000
asID:                     262241
IP address blocks:        138.185.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851578 (0xcfe7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73c2640b87c02edde7ff9424425bd136edffe32
        Validity
            Not Before: Mar 24 14:37:20 2021 GMT
            Not After : Mar 24 14:37:20 2026 GMT
        Subject: CN=55ae76ae3d6946a6887a6f70be97dc5a48cec9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c0:5c:c6:00:80:14:de:36:ee:f2:a6:60:93:
                    88:b3:d0:c4:0d:03:0d:11:ee:c4:28:66:e7:91:9c:
                    77:66:ca:83:5e:5a:0c:66:61:c2:88:b9:d7:a0:2f:
                    fe:7e:63:da:25:17:0b:f4:7c:65:89:58:a1:c0:47:
                    1f:31:3e:18:db:2a:f9:e6:1c:9b:f7:f3:b7:27:49:
                    9c:37:f2:6d:1e:69:2d:1c:f3:c2:e8:4f:c1:d6:c6:
                    fc:ee:24:59:ed:70:14:8d:39:2b:e3:56:e7:08:74:
                    e4:d7:a5:bc:bf:5b:c6:61:37:e7:0c:3b:bf:87:70:
                    db:86:f3:f8:d8:16:5d:6a:a0:56:a2:a6:9c:3b:e1:
                    e0:f9:83:92:a6:db:62:6c:95:b6:1c:60:cb:56:05:
                    f9:df:85:8c:1f:4c:13:b3:08:82:d9:8e:fe:f2:13:
                    a4:67:bb:f9:c7:c2:9b:b9:c7:a9:b2:0f:20:f6:8c:
                    2e:c7:f7:69:bc:22:55:8e:dc:7a:48:92:df:0a:77:
                    97:5e:f5:dd:87:93:71:6d:c1:0c:74:ff:02:0f:00:
                    57:d5:f0:db:0a:b8:f4:dc:73:f2:f4:53:b3:fa:b7:
                    56:ff:ed:c3:46:f3:ac:57:56:a1:9c:c5:ec:97:3b:
                    1c:f8:89:b3:93:6b:69:29:87:16:9d:f3:4d:72:22:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AF:37:9F:D0:24:C3:DF:B2:C9:D6:CE:AD:22:60:B1:9C:0C:78:20
            X509v3 Authority Key Identifier:
                keyid:65:6D:DE:B4:82:27:25:10:6D:0E:D3:ED:EE:78:9C:AE:19:D3:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a73c2640b87c02edde7ff9424425bd136edffe32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/55ae76ae3d6946a6887a6f70be97dc5a48cec9fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/a73c2640b87c02edde7ff9424425bd136edffe32.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:eb:42:6e:9b:2d:e9:7e:36:85:74:e4:a7:d3:ca:a5:f8:50:
         bb:af:bb:1d:44:ca:65:4b:5f:5a:f5:56:bd:33:49:e1:d3:95:
         5a:29:2d:67:e8:7f:b3:34:86:12:8d:ba:59:0b:aa:18:0f:4f:
         9f:7e:78:0c:75:46:d6:db:a0:a3:90:65:63:a6:2d:c8:fb:8b:
         2c:2d:1c:78:11:bc:b3:da:3f:e2:76:15:1d:48:0d:92:63:b8:
         09:d2:a7:4c:8d:7e:b3:10:a6:7a:06:30:19:49:66:84:d5:43:
         0e:55:5e:f2:58:22:33:2c:82:ec:54:cb:ec:9b:3b:f6:01:9b:
         f8:ae:9c:05:19:11:7b:12:f2:a1:9c:cd:04:3f:40:c2:5f:f8:
         7a:f4:14:ba:8f:12:28:2a:29:65:f7:f2:c9:f6:ea:b2:b5:ca:
         c3:e7:c6:f6:4d:e2:00:86:c5:5d:5a:00:bf:e6:ec:b1:e4:d5:
         8b:97:67:f3:7c:45:b1:34:f0:80:db:ad:bc:af:49:a8:fb:6d:
         a4:f7:f7:69:2a:54:10:b8:43:9c:bb:64:48:37:bd:41:a2:5d:
         1e:9d:78:d4:a0:db:2a:92:8b:8e:f4:41:5f:64:65:21:22:55:
         53:2b:74:44:9f:f0:2c:b0:f7:5c:b8:85:0e:b0:b8:fa:3c:96:
         79:0b:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org