Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/90c359d6fa60ea263c6efab375272516135998a7.roa
File:                     90c359d6fa60ea263c6efab375272516135998a7.roa (raw, json)
Hash identifier:          AtAHOFRVxMlHKJc87nurXZnDXE3eY8mPhM4VcsyJN1A=
Subject key identifier:   A5:7E:72:66:5F:A9:5E:32:4C:EC:92:44:1D:44:0A:84:96:8A:AD:B8
Certificate issuer:       /CN=77c6af10535d7591497a3cfee30c532d59f06798
Certificate serial:       1B6DA3
Authority key identifier: 46:E3:4C:9C:B4:84:9E:83:91:24:4E:96:88:31:12:D5:F8:2C:D0:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77c6af10535d7591497a3cfee30c532d59f06798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/90c359d6fa60ea263c6efab375272516135998a7.roa
Signing time:             Wed 18 Oct 2023 16:57:45 +0000
ROA not before:           Tue 17 Oct 2023 16:57:45 +0000
ROA not after:            Sat 18 Oct 2025 16:57:45 +0000
asID:                     270052
IP address blocks:        138.59.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1797539 (0x1b6da3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c6af10535d7591497a3cfee30c532d59f06798
        Validity
            Not Before: Oct 17 16:57:45 2023 GMT
            Not After : Oct 18 16:57:45 2025 GMT
        Subject: CN=90c359d6fa60ea263c6efab375272516135998a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:57:64:ed:95:c6:f9:cb:ed:fc:98:f1:b2:
                    0e:a3:3c:3b:aa:ee:35:5e:97:9c:1b:05:c2:cc:7a:
                    45:4a:ae:1c:b5:5e:97:f1:11:4b:a9:80:7c:db:cf:
                    73:ac:30:31:df:80:f4:16:fa:6c:b0:62:6a:65:22:
                    6a:49:02:73:8f:9b:75:d3:84:56:ce:70:31:fb:9e:
                    5a:ea:c9:20:2f:8a:43:61:f9:43:14:3a:24:ee:9e:
                    11:d7:fd:d8:a7:17:7c:7b:b6:77:6f:a6:fd:a7:27:
                    9d:68:d1:1a:07:56:21:c5:a1:2d:73:d6:b8:2f:f3:
                    40:43:b4:d7:a2:66:1d:72:37:10:a1:83:12:7d:ab:
                    b6:ff:12:25:71:c6:97:5f:01:af:bf:77:82:dc:79:
                    b7:50:a2:c1:97:5d:ab:6c:44:bb:e7:7e:a1:8f:40:
                    f8:ea:b3:00:f4:0f:c0:ae:52:44:21:06:04:c7:bb:
                    db:9d:84:4e:7c:9e:51:f3:94:f4:b1:db:41:e1:63:
                    c8:d3:98:72:e6:62:3a:78:19:09:40:bc:4b:46:c2:
                    9e:f8:c4:da:a9:6b:f4:41:18:20:9f:28:30:2b:dd:
                    4a:bb:28:33:2b:41:60:2b:83:16:b2:95:1a:c4:ef:
                    27:f3:12:1f:18:cc:f9:82:e9:f1:a0:a9:d6:b6:37:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7E:72:66:5F:A9:5E:32:4C:EC:92:44:1D:44:0A:84:96:8A:AD:B8
            X509v3 Authority Key Identifier:
                keyid:46:E3:4C:9C:B4:84:9E:83:91:24:4E:96:88:31:12:D5:F8:2C:D0:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77c6af10535d7591497a3cfee30c532d59f06798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/90c359d6fa60ea263c6efab375272516135998a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/77c6af10535d7591497a3cfee30c532d59f06798.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:41:fb:21:92:97:a6:bf:5b:b0:bf:24:8a:9b:7f:73:76:
         df:3e:dc:6c:63:2a:d0:f2:3a:ff:f8:9b:1f:27:70:7f:7a:6b:
         03:d2:b4:43:5a:dc:01:af:56:79:90:11:98:2e:39:68:a9:9b:
         6e:c2:aa:cc:7a:9d:6e:0e:ae:cf:2f:e5:ff:11:1c:c1:8b:d9:
         55:c7:91:2c:d9:e4:09:fa:42:ba:2c:11:51:d7:66:d3:6e:53:
         a9:c4:92:2b:05:16:da:19:cd:24:ee:fe:83:d2:23:cd:aa:44:
         25:ea:28:b9:74:bd:51:bf:c9:d2:d2:d9:30:31:2c:02:5c:d2:
         59:43:f8:4c:5b:00:da:dd:cb:a3:04:6c:b7:21:73:8a:9b:a4:
         52:8d:3a:1c:c7:4d:61:54:f4:60:5d:2a:3b:9c:8d:ae:90:2c:
         bf:e4:ad:4c:28:ff:4a:37:18:63:d5:5a:56:a8:6d:41:7c:80:
         a4:26:a4:60:ff:92:e0:f8:8d:72:b2:a1:5e:3e:eb:5c:38:c5:
         c3:e3:6f:da:4a:51:02:9c:70:5c:97:6c:39:de:d8:88:f7:25:
         48:3d:ba:9c:0d:f9:14:ff:f5:84:6b:11:ad:6b:b3:cd:44:2c:
         d3:60:08:4a:1a:18:09:8e:fb:c9:2c:f5:63:37:7a:6e:10:68:
         ba:cc:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org