Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/ae7b918544b6754b6a4cf760faed746e9b3a839f.roa
File:                     ae7b918544b6754b6a4cf760faed746e9b3a839f.roa (raw, json)
Hash identifier:          tafqDjTioPomo794UTmJaUMZ8QyTaHSzkieTpUAfwKo=
Subject key identifier:   02:36:CC:70:9E:9F:82:EE:D5:19:70:8A:21:F3:BA:7D:1E:B7:57:66
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       0368
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/ae7b918544b6754b6a4cf760faed746e9b3a839f.roa
Signing time:             Thu 18 Aug 2022 16:21:10 +0000
ROA not before:           Thu 18 Aug 2022 16:16:25 +0000
ROA not after:            Sun 18 Aug 2024 16:16:25 +0000
asID:                     27823
IP address blocks:        138.219.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 18 16:16:25 2022 GMT
            Not After : Aug 18 16:16:25 2024 GMT
        Subject: CN=ae7b918544b6754b6a4cf760faed746e9b3a839f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:d3:8f:b4:f3:6b:be:14:fa:3c:91:90:4e:
                    76:e1:83:f0:aa:2b:e8:3f:48:18:4b:da:f2:20:af:
                    1e:99:4b:9c:35:20:05:35:9b:f1:74:bc:d9:ab:f8:
                    cc:03:0f:8f:ac:1d:be:3a:cd:b0:e5:8a:b8:4c:b8:
                    a2:dc:05:32:7a:74:1a:3b:53:b7:23:fa:a1:ce:c7:
                    6c:ae:24:76:28:65:c3:7d:9a:0c:ba:95:cb:66:8d:
                    46:bb:bd:f1:0e:55:2a:fa:c7:e9:42:f9:04:13:7d:
                    6e:1b:06:cc:b4:b0:f3:32:e5:39:41:19:91:ca:3d:
                    50:6b:4d:de:17:b9:55:ea:20:a4:f0:15:9a:47:03:
                    62:3d:e5:fc:88:92:19:76:45:37:8b:36:d6:de:91:
                    ef:95:ae:09:41:e9:b8:87:14:17:33:0d:39:36:6a:
                    72:f1:ed:29:42:ce:44:de:68:79:7c:88:94:09:cc:
                    48:3a:24:54:41:38:e8:2d:f7:ab:24:bc:c1:b4:3f:
                    4e:66:66:b0:d8:a7:7e:7d:39:f0:ad:94:b6:1d:c0:
                    96:5e:71:4b:0b:71:7b:d9:66:a4:f9:62:1c:ae:54:
                    50:14:59:27:62:ad:52:bf:e8:b5:b2:8d:9d:99:18:
                    10:f9:a8:72:0d:6b:db:66:86:f8:94:34:bd:9a:d1:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:36:CC:70:9E:9F:82:EE:D5:19:70:8A:21:F3:BA:7D:1E:B7:57:66
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/ae7b918544b6754b6a4cf760faed746e9b3a839f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:3a:94:a7:9f:f8:7b:c2:da:e6:e9:dd:d3:35:93:f6:ec:f9:
         2a:0a:90:ee:ba:ea:c5:14:f2:4e:12:6d:26:1f:b6:14:a8:ca:
         19:ed:56:54:00:a1:8b:1c:a5:c4:7e:94:e9:e4:d6:d8:8f:f7:
         8f:ee:8a:34:16:8c:a6:f0:81:48:7e:b7:f5:8c:8b:a0:7f:1e:
         13:9c:ba:64:69:66:83:fe:5d:a2:34:97:25:f3:d8:5f:cc:df:
         8c:56:ce:0b:35:e0:f8:ec:55:6f:2d:3d:42:5d:9b:e9:26:1c:
         4a:3b:2e:43:71:c3:32:a8:98:b9:d6:8b:13:a6:71:a7:1a:48:
         d3:cc:03:46:77:7b:74:be:cf:87:4c:86:ff:c7:34:71:50:5e:
         66:67:98:21:de:16:90:51:3a:31:1a:db:7c:47:70:34:3e:df:
         31:fc:57:60:83:b9:26:8d:d8:2d:19:6b:9f:f8:48:69:17:77:
         4d:c0:54:f6:19:32:82:6a:6e:5f:2b:1c:c1:bf:c0:a1:95:1b:
         16:cd:e6:fa:3f:a8:f4:5e:16:ad:9d:8e:75:52:be:5a:b4:fc:
         b1:82:06:c6:b6:9d:6b:4a:8b:05:de:6e:62:21:61:65:42:b1:
         00:08:46:e3:20:b1:4f:63:21:31:40:54:31:c2:13:11:a6:7d:
         f7:7d:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org