Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d384bf5ac4a601c881c44865285bc46cabae8b35.roa
File:                     d384bf5ac4a601c881c44865285bc46cabae8b35.roa (raw, json)
Hash identifier:          a099OEybfdSbS3Dk6KSa+i3qBd4jWZAfDPczCr/S7O8=
Subject key identifier:   97:2A:73:25:4B:BF:6E:F8:57:A4:D1:40:BE:AF:B5:6C:B6:12:F1:0F
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       CE91
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d384bf5ac4a601c881c44865285bc46cabae8b35.roa
Signing time:             Tue 13 Sep 2022 19:21:28 +0000
ROA not before:           Tue 13 Sep 2022 19:16:01 +0000
ROA not after:            Fri 13 Sep 2024 19:16:01 +0000
asID:                     27823
IP address blocks:        138.219.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52881 (0xce91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Sep 13 19:16:01 2022 GMT
            Not After : Sep 13 19:16:01 2024 GMT
        Subject: CN=d384bf5ac4a601c881c44865285bc46cabae8b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:14:b4:70:8b:ce:5b:09:82:57:36:32:e9:
                    53:3a:02:e4:0f:88:a2:29:d8:03:01:fa:4e:15:2f:
                    06:34:47:01:98:8b:c1:79:37:91:d1:c0:69:fe:2c:
                    2a:c7:91:dc:5c:33:fe:7e:ce:68:6d:8a:d1:97:2e:
                    7c:86:2d:d6:62:32:dc:ba:4d:09:36:cf:36:69:17:
                    36:d3:df:97:62:a1:f3:9d:ad:83:3d:0b:62:a3:a4:
                    49:c9:6d:99:66:92:3a:e4:d3:4b:26:a8:29:99:fa:
                    94:f1:67:0a:66:b0:dd:c7:c6:10:4e:77:b6:74:2b:
                    a3:21:e9:6d:19:1b:f7:ad:02:a6:04:15:81:1c:40:
                    f6:51:c6:7e:6b:98:a9:43:a2:b2:5a:15:e3:f1:52:
                    fb:50:e0:9e:fd:f2:96:54:c6:8d:9b:82:28:14:6f:
                    2d:71:59:fc:af:b1:89:04:67:d6:37:90:ce:38:24:
                    0e:b3:26:4d:91:2f:6e:86:57:ec:00:38:11:c2:7a:
                    dd:24:cb:73:10:c8:d2:b6:03:7f:fd:8c:df:d8:e0:
                    e0:42:ea:59:8d:99:c5:79:17:c1:cf:e6:b8:75:4c:
                    d7:6d:e7:2c:f7:08:34:f9:1a:fd:83:c0:23:46:6f:
                    04:06:6b:47:5b:68:81:b7:2a:8d:15:38:a0:fc:cc:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2A:73:25:4B:BF:6E:F8:57:A4:D1:40:BE:AF:B5:6C:B6:12:F1:0F
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d384bf5ac4a601c881c44865285bc46cabae8b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f2:c0:1e:28:2f:aa:fa:28:aa:77:59:11:6c:8d:f0:0c:55:
         6f:e0:62:c4:6e:6b:2e:2c:b8:73:31:2b:7c:ff:2f:f9:dd:7f:
         b8:4f:00:ff:b7:43:65:d9:0d:7d:ef:3b:d0:a5:d3:66:fb:4c:
         65:d8:a3:c8:86:a2:8e:40:c9:c3:04:b5:30:bc:46:e5:20:dc:
         ba:3c:53:34:8f:8e:29:b7:42:84:47:10:00:4f:d3:04:a2:9b:
         59:65:bd:97:0c:ac:33:c8:f4:47:1f:61:49:40:55:ae:1a:12:
         0f:ba:75:5e:d8:0d:ea:80:9c:7b:ee:66:47:04:d8:b2:f6:26:
         03:38:4a:99:91:5c:9a:b7:00:f5:50:d7:dc:26:91:41:c5:01:
         3a:d0:f5:71:a7:e2:ba:7f:5a:ec:71:b4:2f:b8:86:1e:29:d9:
         c8:f1:69:73:e7:a2:94:16:e6:05:0d:54:9d:49:1c:b0:a5:e1:
         71:be:0d:7a:d8:2b:92:95:b6:19:fa:bb:96:75:d8:44:db:8c:
         79:35:bd:19:b3:eb:91:62:ce:df:f6:1d:0b:78:1f:75:25:2f:
         f2:d5:92:3a:a5:ad:67:fe:dd:75:f2:73:da:a9:b4:bf:e6:e9:
         e3:f7:50:4e:71:cd:d3:6c:16:a0:da:22:ad:90:10:19:96:80:
         d1:45:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org