Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/584e28bbae1a980ca9c94a63770e78e2dcadf4bf.roa
File:                     584e28bbae1a980ca9c94a63770e78e2dcadf4bf.roa (raw, json)
Hash identifier:          Is7KbnNOtkQB9iKTQFjrgzJcEHV3mRn6qmS0qtETzRw=
Subject key identifier:   09:C5:3B:F2:85:6C:77:06:41:CD:B4:D5:9A:A8:80:D6:F4:1A:90:08
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       F875
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/584e28bbae1a980ca9c94a63770e78e2dcadf4bf.roa
Signing time:             Wed 14 Sep 2022 14:06:35 +0000
ROA not before:           Fri 19 Aug 2022 16:16:34 +0000
ROA not after:            Mon 19 Aug 2024 16:16:34 +0000
asID:                     27823
IP address blocks:        138.36.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63605 (0xf875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:16:34 2022 GMT
            Not After : Aug 19 16:16:34 2024 GMT
        Subject: CN=584e28bbae1a980ca9c94a63770e78e2dcadf4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:71:27:d5:a0:2f:92:88:a5:86:0b:2e:64:
                    1b:d2:5f:44:22:38:0d:89:5e:a0:60:11:cd:9c:59:
                    4d:e2:5a:d8:f8:4f:eb:aa:1f:f9:cf:11:33:1f:ba:
                    e7:18:a9:ed:ad:1d:9f:f1:fd:4e:4b:24:5f:f1:55:
                    fd:f7:03:bd:f2:39:e6:65:fd:68:15:36:1e:87:3a:
                    42:21:b8:95:4f:7d:6f:1e:64:46:bf:2b:b8:42:d5:
                    5c:9c:d8:af:ab:7c:c4:bc:e5:08:6e:94:af:28:44:
                    31:9e:d0:7a:3e:e3:b6:a5:b7:7a:03:95:4f:d7:81:
                    f7:54:8f:cb:21:09:bb:d0:ef:24:61:eb:61:77:b7:
                    0b:c1:4a:00:3a:a6:54:44:16:c7:78:e1:43:87:23:
                    31:cd:8e:2a:0c:eb:7b:09:26:8a:00:10:18:7a:10:
                    a1:4f:32:dd:82:8b:8c:87:c9:65:9f:02:6d:3d:74:
                    d4:eb:da:ee:37:1e:c4:61:78:e5:19:55:7f:29:44:
                    ce:b7:70:cc:cf:bb:ce:02:de:7e:66:31:b5:6e:f0:
                    bb:ac:66:44:d5:06:fa:bd:7e:60:32:e3:39:5d:ae:
                    29:72:74:3d:b1:98:c7:ac:ca:f2:79:ed:87:28:8e:
                    84:b9:88:46:4f:8e:87:e1:a0:77:12:15:b9:e1:40:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C5:3B:F2:85:6C:77:06:41:CD:B4:D5:9A:A8:80:D6:F4:1A:90:08
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/584e28bbae1a980ca9c94a63770e78e2dcadf4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:d5:91:49:b0:70:2e:14:55:3e:ec:c3:bf:a7:7f:21:e4:02:
         a2:9b:9d:05:14:9a:f9:37:55:e6:8d:60:16:92:18:84:ea:ea:
         f8:9c:7b:e0:44:81:d9:0e:0e:12:fc:93:a7:dd:c5:20:8d:7c:
         17:15:11:e3:1c:01:1e:4f:36:a6:36:f5:70:5c:d4:f7:f6:b4:
         93:83:08:a1:90:98:e1:5e:3c:1b:6c:e4:50:ea:f8:ff:6a:cd:
         c8:63:3e:4c:3f:cd:10:0a:30:28:fc:59:e8:a7:78:53:74:eb:
         5f:e3:6f:af:21:65:4b:90:68:80:ee:15:68:cd:df:6e:22:c5:
         b8:b2:61:0d:17:f7:0b:c0:5d:9e:70:fc:1d:8a:d0:cd:1d:6a:
         48:c8:72:0d:6d:3b:b1:c0:d3:5c:78:99:ff:3d:b3:7b:79:3f:
         47:6c:cd:0e:de:79:a4:86:ce:99:c9:3b:67:ec:fc:e6:eb:b9:
         78:31:e5:d6:d3:7a:9c:9e:b3:59:63:f2:07:91:17:d0:5a:84:
         b1:d9:00:f3:55:de:74:e6:4c:83:ee:53:21:b9:8e:b1:05:dc:
         6b:e2:ae:84:92:72:b5:55:02:31:ab:52:79:68:f1:74:ea:8c:
         ea:3c:e5:66:da:f4:da:22:89:e6:3c:83:57:52:c8:56:d2:c5:
         c1:e0:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org