Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/d06284e0bc88c1d881e46bab8776eef95653ac8e.roa
File:                     d06284e0bc88c1d881e46bab8776eef95653ac8e.roa (raw, json)
Hash identifier:          +cZggmqvO1dnNAiAO3KnPBLOYE1YE0SAQfE7aTibmpw=
Subject key identifier:   60:06:58:AC:09:6D:1F:9F:54:A4:DC:CC:3D:A6:A0:18:8C:EB:1D:4E
Certificate issuer:       /CN=ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba
Certificate serial:       201817
Authority key identifier: 49:A3:4F:5C:E1:4F:A1:E4:9D:E6:5E:E9:10:16:62:25:A9:3A:E0:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/d06284e0bc88c1d881e46bab8776eef95653ac8e.roa
Signing time:             Wed 17 May 2023 13:55:57 +0000
ROA not before:           Tue 16 May 2023 13:55:56 +0000
ROA not after:            Wed 17 May 2028 13:55:56 +0000
asID:                     272014
IP address blocks:        138.0.120.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103319 (0x201817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba
        Validity
            Not Before: May 16 13:55:56 2023 GMT
            Not After : May 17 13:55:56 2028 GMT
        Subject: CN=d06284e0bc88c1d881e46bab8776eef95653ac8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:24:4c:23:4c:47:4c:2f:c0:97:89:4a:28:cf:
                    24:9b:4e:9b:02:03:c7:2e:23:84:b9:d2:be:8d:3e:
                    5d:5f:49:e7:20:34:2f:09:31:34:ad:4b:b8:db:36:
                    57:bf:76:db:1f:88:28:43:af:77:9a:4b:aa:0f:ce:
                    c9:67:30:0b:57:57:1d:93:ac:41:f4:b4:d1:54:05:
                    1f:3d:7a:66:80:c2:b9:96:3e:8f:bd:94:db:15:04:
                    35:14:a9:79:35:26:ad:b8:58:43:e4:54:d6:de:77:
                    0e:50:2f:cb:c3:3e:4e:1f:52:ee:6a:11:2f:73:b9:
                    05:15:33:d1:10:39:eb:42:06:9e:61:5f:79:a1:37:
                    81:fd:97:c6:e7:97:d1:72:5a:82:16:39:03:94:f4:
                    16:ce:2a:52:8c:5b:06:8d:58:7a:01:1f:17:12:aa:
                    95:c4:6c:28:06:a1:01:a8:b3:4b:4f:38:a3:40:c6:
                    0a:ef:0e:6e:72:d1:dc:4b:b4:e3:24:7e:07:2f:92:
                    e1:a1:1a:e5:48:54:5c:e7:0a:1f:92:45:8a:50:28:
                    be:11:2b:d2:a7:e1:28:12:04:d6:f8:61:c4:a8:5c:
                    48:e5:56:24:bb:bb:4c:3b:39:3b:aa:95:04:61:87:
                    41:fc:20:78:82:ef:c6:1f:b6:12:dc:c6:43:b1:a0:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:06:58:AC:09:6D:1F:9F:54:A4:DC:CC:3D:A6:A0:18:8C:EB:1D:4E
            X509v3 Authority Key Identifier:
                keyid:49:A3:4F:5C:E1:4F:A1:E4:9D:E6:5E:E9:10:16:62:25:A9:3A:E0:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/d06284e0bc88c1d881e46bab8776eef95653ac8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:56:63:4c:53:30:96:28:86:9b:18:fc:a9:f4:ba:1a:51:
         d6:4b:cd:f7:99:6d:66:e4:85:f9:bc:9a:e9:d8:8f:8f:c5:f0:
         b7:12:65:f8:7c:59:12:64:ee:ab:45:c2:30:11:19:76:05:ad:
         cb:81:6c:b9:bf:ba:54:a3:65:82:90:11:61:c7:20:af:78:36:
         d5:a5:09:d8:90:15:2f:d5:a0:ef:0a:d6:43:c0:b6:4c:1e:37:
         f4:75:6a:18:3a:f2:2c:26:ac:da:08:df:60:79:ba:1a:47:25:
         46:f2:4c:4b:21:3c:d0:69:b5:88:ae:38:3a:75:e9:ca:71:96:
         7a:9f:cd:26:53:80:6b:fe:dc:85:31:b2:35:24:80:0e:7c:2b:
         30:c8:fd:a3:54:0d:93:72:12:45:9f:1b:08:d2:96:23:25:e7:
         ed:66:19:41:e0:c7:3f:66:0e:0f:dd:c3:92:1f:bb:a4:ac:a8:
         eb:87:02:ef:54:02:92:57:60:18:4d:a5:2f:44:f3:d2:a1:2d:
         77:6b:d4:0c:8d:09:f5:6f:14:0a:1b:08:65:fa:22:b6:ca:4c:
         98:6d:45:22:60:54:18:a8:ef:5b:53:58:96:74:1e:c6:37:9c:
         48:4f:0f:ae:5b:33:89:18:ca:a1:b7:8c:af:18:cd:f4:c0:97:
         4d:5f:a4:37
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIBgXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
MzliYmU4NmFkYTJjZjdjNWE3Yzg2ZmEwMTZlMzBjMDZkMmMyYmEwHhcNMjMwNTE2
MTM1NTU2WhcNMjgwNTE3MTM1NTU2WjAzMTEwLwYDVQQDEyhkMDYyODRlMGJjODhj
MWQ4ODFlNDZiYWI4Nzc2ZWVmOTU2NTNhYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA+SRMI0xHTC/Al4lKKM8km06bAgPHLiOEudK+jT5dX0nnIDQv
CTE0rUu42zZXv3bbH4goQ693mkuqD87JZzALV1cdk6xB9LTRVAUfPXpmgMK5lj6P
vZTbFQQ1FKl5NSatuFhD5FTW3ncOUC/Lwz5OH1LuahEvc7kFFTPREDnrQgaeYV95
oTeB/ZfG55fRclqCFjkDlPQWzipSjFsGjVh6AR8XEqqVxGwoBqEBqLNLTzijQMYK
7w5uctHcS7TjJH4HL5LhoRrlSFRc5wofkkWKUCi+ESvSp+EoEgTW+GHEqFxI5VYk
u7tMOzk7qpUEYYdB/CB4gu/GH7YS3MZDsaDnZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGAGWKwJbR+fVKTczD2moBiM6x1OMB8GA1UdIwQYMBaAFEmjT1zhT6HkneZe
6RAWYiWpOuCkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWYzOWJi
ZTg2YWRhMmNmN2M1YTdjODZmYTAxNmUzMGMwNmQyYzJiYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGE0Njc5NWYtNTFmZC00YmU1LThkNDktOWY0YWFh
MGNjOGQ5L2QwNjI4NGUwYmM4OGMxZDg4MWU0NmJhYjg3NzZlZWY5NTY1M2FjOGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YTQ2Nzk1Zi01MWZkLTRiZTUtOGQ0OS05ZjRh
YWEwY2M4ZDkvZWYzOWJiZTg2YWRhMmNmN2M1YTdjODZmYTAxNmUzMGMwNmQyYzJi
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYoAeDANBgkqhkiG9w0BAQsFAAOCAQEAP8NWY0xTMJYohpsY
/Kn0uhpR1kvN95ltZuSF+bya6diPj8XwtxJl+HxZEmTuq0XCMBEZdgWty4Fsub+6
VKNlgpARYccgr3g21aUJ2JAVL9Wg7wrWQ8C2TB439HVqGDryLCas2gjfYHm6Gkcl
RvJMSyE80Gm1iK44OnXpynGWep/NJlOAa/7chTGyNSSADnwrMMj9o1QNk3ISRZ8b
CNKWIyXn7WYZQeDHP2YOD93Dkh+7pKyo64cC71QCkldgGE2lL0Tz0qEtd2vUDI0J
9W8UChsIZfoitspMmG1FImBUGKjvW1NYlnQexjecSE8PrlsziRjKobeMrxjN9MCX
TV+kNw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org