Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/a540eee42c74f21e087d542435088a5d24156124.roa
File:                     a540eee42c74f21e087d542435088a5d24156124.roa (raw, json)
Hash identifier:          Lz8mT7K5TfNRXcDBPsXe1gc/7RgBzd/9G3X7c+ajpx4=
Subject key identifier:   E7:FA:7D:D7:8F:EC:2F:04:CA:21:C1:6A:77:E4:49:5B:0B:CC:C4:63
Certificate issuer:       /CN=0c3058added8283c2f4dbfec35d4bb0755a56288
Certificate serial:       0CF322
Authority key identifier: AD:C1:0B:E5:13:56:DC:8A:73:3C:49:30:73:13:F6:34:FE:78:85:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c3058added8283c2f4dbfec35d4bb0755a56288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/a540eee42c74f21e087d542435088a5d24156124.roa
Signing time:             Wed 24 Mar 2021 14:33:23 +0000
ROA not before:           Wed 24 Mar 2021 14:33:22 +0000
ROA not after:            Tue 24 Mar 2026 14:33:22 +0000
asID:                     14259
IP address blocks:        138.0.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848674 (0xcf322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3058added8283c2f4dbfec35d4bb0755a56288
        Validity
            Not Before: Mar 24 14:33:22 2021 GMT
            Not After : Mar 24 14:33:22 2026 GMT
        Subject: CN=a540eee42c74f21e087d542435088a5d24156124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:87:66:3e:ba:cd:c3:51:b0:74:ee:a7:2a:
                    8e:b4:ad:e7:4f:f6:14:ca:2c:b6:db:f0:f1:2c:6f:
                    9f:8b:b9:91:38:c7:b4:4f:38:4f:72:74:f7:90:94:
                    e5:1a:21:0f:b0:ef:8e:b0:3e:2e:02:63:e9:e2:22:
                    33:7e:89:53:3b:9c:76:0d:9f:c5:3e:5c:dd:fb:0e:
                    c1:10:8e:26:46:56:c0:22:50:e7:03:3b:a6:6d:56:
                    b3:54:2e:f3:29:3c:17:41:cd:37:da:75:12:06:4b:
                    e4:8c:c5:85:56:73:52:2f:04:fa:06:de:9d:2c:da:
                    48:7f:9c:c8:46:74:a1:6d:3b:41:1a:ad:d5:6e:9a:
                    90:13:a4:68:d7:df:84:20:1a:94:41:c7:e2:11:15:
                    e1:58:8d:de:f0:ca:4e:51:93:6d:3f:06:60:ff:9c:
                    8a:bd:e3:59:12:9f:09:1f:01:01:90:e9:e6:bb:b7:
                    64:f8:6b:32:24:e3:9f:4a:c3:95:88:85:63:3e:a0:
                    3f:8b:cc:ba:56:2f:5a:d9:7b:f1:f1:2d:d2:3e:51:
                    34:68:fe:fc:b4:4f:ff:ba:ce:cc:a3:e5:ed:f1:ef:
                    1f:c0:ea:74:45:44:3f:a9:a7:42:99:78:82:2b:fd:
                    c3:70:5c:56:29:ee:8d:f9:21:a1:aa:b0:0b:04:b4:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FA:7D:D7:8F:EC:2F:04:CA:21:C1:6A:77:E4:49:5B:0B:CC:C4:63
            X509v3 Authority Key Identifier:
                keyid:AD:C1:0B:E5:13:56:DC:8A:73:3C:49:30:73:13:F6:34:FE:78:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c3058added8283c2f4dbfec35d4bb0755a56288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/a540eee42c74f21e087d542435088a5d24156124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/0c3058added8283c2f4dbfec35d4bb0755a56288.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:55:4b:b2:82:49:4a:fe:9b:46:bb:b3:c8:5e:09:77:28:9f:
         0c:1d:97:ed:b6:18:fe:87:75:2a:25:6b:3a:53:5f:c0:b2:11:
         3d:06:7f:72:f1:f9:70:dd:46:ae:76:23:01:32:86:d0:7a:16:
         c0:e0:da:c4:d0:7c:cf:33:93:59:71:d0:cf:34:13:3d:1e:76:
         ec:cd:f7:ee:91:ec:d3:57:96:e9:33:3b:8c:55:90:b2:6c:2f:
         f3:ea:a9:15:5f:67:3a:b4:cf:67:19:0d:68:d7:86:ad:0e:d2:
         37:f1:8f:bd:c6:f2:7b:6a:1f:53:88:25:ec:81:8f:3f:09:16:
         a6:4f:c4:e6:15:66:1d:5d:0f:67:bd:e5:1a:fc:3c:ac:52:1b:
         3d:72:2c:c9:df:86:4e:5a:d3:0b:1a:54:06:b0:5b:cd:83:50:
         88:23:a3:b3:e2:cc:de:3e:79:4b:c3:73:a1:dc:9c:48:b9:41:
         f2:99:cc:72:7c:1a:67:e0:02:e7:08:ee:35:fd:45:2d:74:7a:
         48:79:ac:6b:91:9e:90:ad:f5:54:94:c4:4b:b4:58:f7:b9:a6:
         ec:7f:33:9d:ff:86:63:0a:a7:3d:da:a2:dc:82:e6:25:a4:01:
         d2:b2:97:93:19:d8:37:1c:d9:f9:9a:2d:7e:db:c8:bf:4b:cf:
         68:91:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org