Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/46bd6df2da12e4231a0fa451f55aac438eefe1ee.roa
File:                     46bd6df2da12e4231a0fa451f55aac438eefe1ee.roa (raw, json)
Hash identifier:          s7ddodd2lD3sjapikxmL7fqDwrzjkDBWPbynyffoKyc=
Subject key identifier:   23:B7:F5:54:7A:DD:16:24:D6:5D:A7:06:9D:AE:47:FA:F2:3F:78:23
Certificate issuer:       /CN=44185224cf7ca78dbccca01419f06c7cc212b495
Certificate serial:       18ED67
Authority key identifier: DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/46bd6df2da12e4231a0fa451f55aac438eefe1ee.roa
Signing time:             Mon 20 Jun 2022 13:25:00 +0000
ROA not before:           Mon 20 Jun 2022 03:00:00 +0000
ROA not after:            Thu 20 Jun 2024 03:00:00 +0000
asID:                     47869
IP address blocks:        138.36.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633639 (0x18ed67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44185224cf7ca78dbccca01419f06c7cc212b495
        Validity
            Not Before: Jun 20 03:00:00 2022 GMT
            Not After : Jun 20 03:00:00 2024 GMT
        Subject: CN=46bd6df2da12e4231a0fa451f55aac438eefe1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:80:e0:cb:f8:8a:74:08:2b:1a:39:59:48:
                    71:0e:76:3e:9b:b8:ae:30:45:ba:fa:6b:89:2e:ee:
                    f2:6f:b2:27:6d:c6:78:06:14:79:c5:56:80:59:5f:
                    a1:8f:df:35:4a:dd:d3:b8:b4:af:c4:e4:8a:f7:fc:
                    e6:b1:ee:c7:9f:1f:5f:63:97:ca:9b:65:5e:b2:a3:
                    1e:19:5e:45:af:60:c2:e9:5e:c4:f4:c3:5e:ab:02:
                    64:42:13:6c:18:b6:49:1d:e0:b2:4e:89:13:dc:d2:
                    7d:3f:f1:4a:f6:54:94:09:a8:ab:c8:44:25:12:91:
                    ae:29:c6:d7:b3:a5:90:b4:b1:7d:96:64:f7:0d:6b:
                    6e:36:10:3a:20:59:df:24:03:32:cc:91:a8:3e:be:
                    25:ca:9d:24:4f:95:3b:22:4c:08:68:9d:16:29:b4:
                    72:1c:bc:d6:1c:4e:b3:d0:7d:9a:8a:1f:ad:7b:1c:
                    a7:93:f5:51:ea:c8:4f:5d:33:d2:4a:2e:81:d4:7d:
                    1e:e2:2d:c1:1e:59:8a:0f:67:d8:f8:40:a4:14:d0:
                    6f:3f:72:60:14:b3:75:45:15:f0:06:fc:3f:4c:b6:
                    d2:b3:f8:0a:f6:7d:67:ee:8c:53:58:da:5d:9d:01:
                    e6:61:bb:c4:ed:57:c9:02:5b:c9:82:cb:a8:88:c1:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B7:F5:54:7A:DD:16:24:D6:5D:A7:06:9D:AE:47:FA:F2:3F:78:23
            X509v3 Authority Key Identifier:
                keyid:DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/46bd6df2da12e4231a0fa451f55aac438eefe1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/44185224cf7ca78dbccca01419f06c7cc212b495.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:b0:ab:71:26:83:81:28:05:c6:81:6a:fe:e5:22:2a:be:55:
         20:61:49:45:33:35:35:59:d6:54:c4:fe:71:93:eb:05:f8:5f:
         c1:9c:13:09:94:52:10:b1:7c:e3:ef:97:23:09:91:6e:3e:17:
         51:31:98:16:b3:a2:f7:33:b0:6a:88:09:a3:18:25:f3:4c:11:
         0c:bc:ca:2c:1a:0e:e7:cb:13:ef:fd:6a:c8:8d:07:71:6f:03:
         6c:3f:c7:3d:d3:41:17:13:4d:a6:5d:f3:49:87:a5:57:f0:25:
         cd:75:bd:2e:ef:09:0c:92:8f:24:2c:08:8c:1c:73:fe:10:ae:
         00:b5:5e:1a:42:31:fc:18:e6:cb:49:26:72:0b:2d:6c:80:c2:
         46:df:f3:0c:4e:49:fd:53:64:9e:be:76:94:74:78:b1:ed:2a:
         5a:4f:0b:e4:15:f2:43:95:9f:9c:e9:7a:89:2c:19:d9:5d:30:
         00:52:f2:66:33:b0:f8:86:b8:f1:4a:7d:09:d9:a1:ef:1c:79:
         ed:d3:f5:66:9a:a4:74:96:92:db:7b:0b:c4:a7:85:87:f1:c4:
         eb:9b:08:d6:de:dc:bf:29:fb:66:90:a3:53:cb:cc:55:50:93:
         18:32:f0:b6:e2:b1:94:0f:fd:96:37:ad:14:12:b8:73:5c:ef:
         5f:0c:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org