Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/e4f2e3759933282dcfb421bded3908901c27d336.roa
File:                     e4f2e3759933282dcfb421bded3908901c27d336.roa (raw, json)
Hash identifier:          jbf8FcTVLeQgtNOeCYM1b7x2W+4xEuPpBq+Jm2XC0RQ=
Subject key identifier:   69:88:29:F8:0E:B5:F6:2B:F0:C2:5D:32:07:D1:24:D5:FE:56:23:D4
Certificate issuer:       /CN=0c3058added8283c2f4dbfec35d4bb0755a56288
Certificate serial:       1B2912
Authority key identifier: AD:C1:0B:E5:13:56:DC:8A:73:3C:49:30:73:13:F6:34:FE:78:85:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c3058added8283c2f4dbfec35d4bb0755a56288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/e4f2e3759933282dcfb421bded3908901c27d336.roa
Signing time:             Sun 30 Oct 2022 01:55:26 +0000
ROA not before:           Sat 29 Oct 2022 01:53:39 +0000
ROA not after:            Wed 30 Oct 2024 01:53:39 +0000
asID:                     272014
IP address blocks:        138.0.120.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779986 (0x1b2912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3058added8283c2f4dbfec35d4bb0755a56288
        Validity
            Not Before: Oct 29 01:53:39 2022 GMT
            Not After : Oct 30 01:53:39 2024 GMT
        Subject: CN=e4f2e3759933282dcfb421bded3908901c27d336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:35:55:fe:83:f4:aa:82:67:16:df:f3:22:
                    1b:4e:0b:a9:ea:ca:80:d9:80:1b:d3:73:97:97:f0:
                    27:5a:d2:3d:4a:2d:aa:fa:09:ca:2b:d9:b0:24:7c:
                    d9:74:fa:e9:09:56:d3:10:1e:fb:08:ba:74:5a:86:
                    a1:8e:d2:69:be:b6:21:6b:49:d7:55:da:35:8e:cc:
                    bb:20:c4:83:e1:0a:0f:bb:79:7b:3e:16:f5:f7:c2:
                    44:73:6a:0b:2d:91:9d:b6:4d:2d:5c:ad:30:fa:53:
                    41:f7:cc:1d:5e:19:00:a7:3a:02:30:d1:c2:0e:6d:
                    56:0a:df:d3:ab:35:62:d9:ef:39:0f:f8:4b:4a:ea:
                    44:07:c1:d2:fb:19:8d:22:3d:6b:50:c7:7a:89:fa:
                    2d:68:57:9e:de:83:9d:9d:bc:87:ab:29:73:15:c0:
                    13:d7:b1:9c:8c:a7:8b:23:7f:1f:a3:78:41:bc:7e:
                    92:53:91:c6:15:8d:d1:9f:23:53:35:f8:a3:f7:a3:
                    b1:b2:0c:44:5e:05:df:41:9e:8a:b5:e9:11:24:41:
                    3b:b4:c8:b7:08:04:27:a9:f0:7e:31:7d:a0:42:8c:
                    cf:2b:3c:f9:9f:9f:49:b2:39:f7:52:e4:0f:ef:6b:
                    ce:4e:0d:6e:81:e8:a0:cd:2f:23:88:10:67:78:04:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:88:29:F8:0E:B5:F6:2B:F0:C2:5D:32:07:D1:24:D5:FE:56:23:D4
            X509v3 Authority Key Identifier:
                keyid:AD:C1:0B:E5:13:56:DC:8A:73:3C:49:30:73:13:F6:34:FE:78:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c3058added8283c2f4dbfec35d4bb0755a56288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/e4f2e3759933282dcfb421bded3908901c27d336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/0c3058added8283c2f4dbfec35d4bb0755a56288.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:fa:bb:3e:ec:a6:66:61:04:73:29:5d:d9:9e:7a:0e:d5:d7:
         8b:58:ad:50:86:d8:21:ff:01:8c:f6:09:4d:b7:25:1d:5f:d1:
         0b:cf:07:ba:2d:e7:2f:cf:a8:0d:ae:17:e1:d4:06:7d:2e:20:
         43:48:8b:6a:1f:2b:d5:17:38:26:8c:9a:90:a1:cb:27:0e:83:
         6f:79:05:e0:0e:19:8c:39:23:b3:1c:86:c5:33:dc:ed:ce:f4:
         c9:c7:4c:09:cf:f6:b4:a9:ef:93:fd:77:64:c9:d6:3d:99:ee:
         8a:04:0b:3d:cd:f9:71:e4:4c:a6:b1:64:b9:33:1e:df:50:d2:
         7f:34:c5:e1:70:11:b1:14:9c:9c:08:f9:17:4b:d9:7e:ca:e1:
         08:42:9e:87:7d:65:49:2d:ce:69:d4:7e:1a:85:2e:67:a3:c2:
         b5:ab:80:6b:08:0c:e6:07:38:f9:b4:0f:2e:89:01:51:31:a2:
         be:c0:c4:2a:3e:0a:5c:f6:9e:c4:e8:ae:8c:5d:33:67:f6:3c:
         e6:17:35:0d:fb:e3:41:80:81:fa:7e:2c:d2:59:ed:c8:54:94:
         ac:8a:95:5f:5f:a8:18:37:ed:58:05:81:60:e4:2f:d3:c1:07:
         98:e4:f1:8a:60:05:ae:6b:ef:1f:cd:31:79:ec:68:69:49:74:
         04:77:86:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org