Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/3ddcb2cdbcaf1ac15ca6d9769897fd8f20d34a48.roa
File:                     3ddcb2cdbcaf1ac15ca6d9769897fd8f20d34a48.roa (raw, json)
Hash identifier:          Cq7PPRISgFCRHqJRDtwZV8PRQ1jLifeuLJsl2M+0K+c=
Subject key identifier:   33:18:4B:89:14:D5:62:9F:EF:86:80:C3:2B:E4:A2:29:9E:CF:EA:1D
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       F48F
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/3ddcb2cdbcaf1ac15ca6d9769897fd8f20d34a48.roa
Signing time:             Wed 14 Sep 2022 14:06:16 +0000
ROA not before:           Fri 19 Aug 2022 16:16:34 +0000
ROA not after:            Mon 19 Aug 2024 16:16:34 +0000
asID:                     27823
IP address blocks:        138.36.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62607 (0xf48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:16:34 2022 GMT
            Not After : Aug 19 16:16:34 2024 GMT
        Subject: CN=3ddcb2cdbcaf1ac15ca6d9769897fd8f20d34a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:31:ec:f2:39:c4:97:71:d2:a3:59:ce:4d:50:
                    b4:8b:e3:fc:ed:40:40:9a:10:18:1e:3e:55:95:29:
                    77:cc:f5:a4:29:3f:77:f0:0c:e4:b0:2c:90:99:ae:
                    2f:17:a8:2a:1d:9f:82:6b:68:14:30:66:90:97:6d:
                    99:f2:46:e3:cb:9e:a1:57:3f:a6:c9:8e:3d:09:dd:
                    6f:79:31:44:94:c2:f4:96:3b:ff:46:6d:6b:3d:fe:
                    42:ad:51:2d:22:43:e0:11:7c:62:7a:17:05:b2:ec:
                    b9:32:b2:e5:ec:27:cc:8a:6a:3c:0a:c3:fb:03:39:
                    46:00:bb:23:d6:3a:a8:b6:f1:d0:90:66:64:de:19:
                    3d:4f:6d:f0:3b:86:99:98:72:51:b1:de:df:1b:6d:
                    84:b0:80:a1:a3:8f:25:82:39:e2:f6:d2:9e:0a:d8:
                    00:5c:c5:28:e9:33:8b:33:15:96:88:0c:5e:f1:a6:
                    bb:5f:2d:2b:14:de:1b:c9:76:36:51:7e:82:7c:1e:
                    7a:66:db:69:db:3c:4f:31:42:81:30:db:d7:61:48:
                    8b:db:55:53:32:bf:a0:68:93:af:83:91:d9:ba:8c:
                    0d:e8:e4:1b:a0:88:a6:c1:52:a1:5d:15:2b:e9:a6:
                    3d:7d:26:15:da:24:b1:38:18:ab:14:fa:3c:7d:60:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:18:4B:89:14:D5:62:9F:EF:86:80:C3:2B:E4:A2:29:9E:CF:EA:1D
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/3ddcb2cdbcaf1ac15ca6d9769897fd8f20d34a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:77:29:4d:aa:07:c9:84:b6:6f:1e:1c:65:32:18:c5:00:
         59:ba:9d:7b:e9:f8:e2:a6:c2:2e:42:15:6e:b4:26:46:b7:5a:
         10:24:01:3e:f5:42:5a:c5:f7:20:24:2f:2d:8b:fd:92:96:c5:
         e4:9b:c6:ae:bb:a7:c1:26:63:29:45:b5:d9:8d:91:7e:e2:2a:
         da:79:9f:53:eb:a3:97:a2:72:0b:5d:3f:44:85:54:bf:88:65:
         05:95:23:8c:71:c7:63:a6:c2:02:ba:1c:c8:cc:46:9b:2d:c1:
         81:34:e9:cc:bc:b8:e4:2f:f7:01:69:b4:97:ed:f7:0c:4f:e4:
         86:fe:8f:9c:92:9d:ac:f4:e3:2e:b6:94:ae:7c:d1:c5:44:8b:
         1d:ba:d0:67:4d:e6:2f:78:7b:89:cc:77:be:59:f2:9c:97:69:
         7f:ff:a3:d3:1a:95:87:2a:a4:fe:ce:88:05:54:2f:9b:97:6d:
         48:66:0b:3a:27:fb:49:26:24:df:73:f0:27:39:f0:68:f3:8d:
         0a:e4:83:f2:6d:05:e4:9b:be:26:29:60:cd:fa:df:12:3d:20:
         23:cb:be:d2:09:9e:26:2b:e0:33:f5:41:28:2c:0c:3c:3a:b7:
         91:79:45:0b:54:3d:6a:dc:8e:fe:df:d1:7e:77:0b:b3:74:55:
         04:c3:9f:fe
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAPSPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
N2UxMTllYmU1MWEwMGQ2NTYwYWI3M2ZkNzljNTFhZGE0MDNmMTkwHhcNMjIwODE5
MTYxNjM0WhcNMjQwODE5MTYxNjM0WjAzMTEwLwYDVQQDEygzZGRjYjJjZGJjYWYx
YWMxNWNhNmQ5NzY5ODk3ZmQ4ZjIwZDM0YTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhjHs8jnEl3HSo1nOTVC0i+P87UBAmhAYHj5VlSl3zPWkKT93
8AzksCyQma4vF6gqHZ+Ca2gUMGaQl22Z8kbjy56hVz+myY49Cd1veTFElML0ljv/
Rm1rPf5CrVEtIkPgEXxiehcFsuy5MrLl7CfMimo8CsP7AzlGALsj1jqotvHQkGZk
3hk9T23wO4aZmHJRsd7fG22EsICho48lgjni9tKeCtgAXMUo6TOLMxWWiAxe8aa7
Xy0rFN4byXY2UX6CfB56Zttp2zxPMUKBMNvXYUiL21VTMr+gaJOvg5HZuowN6OQb
oIimwVKhXRUr6aY9fSYV2iSxOBirFPo8fWDTKQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDMYS4kU1WKf74aAwyvkoimez+odMB8GA1UdIwQYMBaAFAcJN4jtSoDCDN7O
EKf/uzEhonKeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjk3ZTEx
OWViZTUxYTAwZDY1NjBhYjczZmQ3OWM1MWFkYTQwM2YxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGQ4ZGYwZjAtNDFjNC00MDFkLWFjMTUtZGUwZGI0
MGFjOWNiLzNkZGNiMmNkYmNhZjFhYzE1Y2E2ZDk3Njk4OTdmZDhmMjBkMzRhNDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZDhkZjBmMC00MWM0LTQwMWQtYWMxNS1kZTBk
YjQwYWM5Y2IvMjk3ZTExOWViZTUxYTAwZDY1NjBhYjczZmQ3OWM1MWFkYTQwM2Yx
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIok7jANBgkqhkiG9w0BAQsFAAOCAQEATp93KU2qB8mEtm8e
HGUyGMUAWbqde+n44qbCLkIVbrQmRrdaECQBPvVCWsX3ICQvLYv9kpbF5JvGrrun
wSZjKUW12Y2RfuIq2nmfU+ujl6JyC10/RIVUv4hlBZUjjHHHY6bCArocyMxGmy3B
gTTpzLy45C/3AWm0l+33DE/khv6PnJKdrPTjLraUrnzRxUSLHbrQZ03mL3h7icx3
vlnynJdpf/+j0xqVhyqk/s6IBVQvm5dtSGYLOif7SSYk33PwJznwaPONCuSD8m0F
5Ju+JilgzfrfEj0gI8u+0gmeJivgM/VBKCwMPDq3kXlFC1Q9atyO/t/RfncLs3RV
BMOf/g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org