Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/e2207da42c4dc3a83e5f6835973f3fc251595e36.roa
File:                     e2207da42c4dc3a83e5f6835973f3fc251595e36.roa (raw, json)
Hash identifier:          32ht+x2c+nDGEAKuxyzDTe/QkMusBpxEDUcTwD56AiI=
Subject key identifier:   30:75:CC:09:5D:3D:61:0D:4A:EA:92:8C:0B:F5:8A:CE:2D:06:C5:2C
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       EA0B
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/e2207da42c4dc3a83e5f6835973f3fc251595e36.roa
Signing time:             Wed 14 Sep 2022 14:04:28 +0000
ROA not before:           Tue 13 Sep 2022 19:16:01 +0000
ROA not after:            Fri 13 Sep 2024 19:16:01 +0000
asID:                     27823
IP address blocks:        138.219.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59915 (0xea0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Sep 13 19:16:01 2022 GMT
            Not After : Sep 13 19:16:01 2024 GMT
        Subject: CN=e2207da42c4dc3a83e5f6835973f3fc251595e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:cc:f9:61:ad:a6:b9:ec:f7:d0:ec:d7:a6:
                    04:3a:65:06:f4:58:8f:fc:6e:c1:71:34:bd:a1:09:
                    0e:70:3d:9f:76:1d:97:4f:18:e5:ce:5d:6a:3f:a8:
                    d4:64:68:14:38:35:43:66:57:7e:80:e9:51:3b:67:
                    82:fe:a5:01:ab:87:a5:be:39:9d:95:c9:e8:2e:92:
                    ac:1c:90:97:52:5f:46:a7:22:e9:d3:58:56:ab:ff:
                    8b:d3:6b:52:e2:5e:b2:d1:74:90:32:c6:39:75:33:
                    ad:73:e0:a5:5a:8a:f0:c4:f1:99:33:3a:0e:25:c4:
                    cb:dd:b0:b9:29:5f:1e:df:d2:8c:9d:77:ab:35:15:
                    a3:c1:1e:9f:0b:63:b3:a2:38:d2:40:72:cc:fa:e3:
                    b6:05:8f:5d:36:c0:43:c8:2c:e5:34:7b:46:5f:ee:
                    61:1d:0d:dd:e0:7e:12:2b:85:12:1e:25:13:e7:f5:
                    99:38:a3:c8:7c:75:92:d6:1e:0d:22:a8:68:db:5d:
                    e6:1b:12:cd:df:17:43:52:17:d1:fa:87:bd:c9:3c:
                    74:02:a2:4c:22:7c:8d:32:60:82:73:78:8d:00:e9:
                    25:76:23:15:30:2f:58:d7:5a:2e:76:45:25:a5:ad:
                    30:78:5b:91:9d:1d:3a:36:29:fb:5d:3a:c0:b6:0c:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:75:CC:09:5D:3D:61:0D:4A:EA:92:8C:0B:F5:8A:CE:2D:06:C5:2C
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/e2207da42c4dc3a83e5f6835973f3fc251595e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:5d:8c:18:e4:81:98:b8:28:ec:c3:1a:df:0c:3f:91:91:9f:
         27:c4:48:ae:09:23:7a:55:e5:81:62:2c:22:6e:a4:49:95:76:
         0e:2b:93:e4:91:cb:9d:7a:cb:e3:5e:22:6a:1c:22:37:d8:e0:
         c9:e0:4b:b6:78:38:e9:0c:40:84:a7:d5:e7:7b:61:29:b0:e7:
         22:1d:28:28:4e:d5:41:97:a5:0d:a1:bf:3c:37:9f:1c:2e:fb:
         04:a6:0f:41:1f:12:cc:d9:cd:10:7d:af:5b:d2:fa:f5:fe:72:
         bf:9d:64:0c:f9:7b:20:f3:d2:b6:33:9e:fc:8a:80:49:55:a9:
         99:f0:2b:74:2b:a9:87:fc:75:53:d5:81:43:f9:6c:b0:5f:5d:
         f6:8a:04:94:16:bb:95:5d:d3:8d:11:28:bf:f2:b1:60:33:9f:
         72:28:f4:af:d9:cf:32:8b:56:41:1a:32:25:96:6d:c8:e5:db:
         b5:18:84:37:df:a7:72:41:c9:84:26:0d:30:34:f2:f9:86:08:
         eb:d1:f0:70:4a:6c:60:71:87:5e:38:55:07:81:26:d4:72:c5:
         f2:d4:33:48:b8:07:d3:54:6e:87:c5:ff:6a:f7:dd:21:be:c5:
         65:08:0b:cf:d4:53:37:b5:7f:e7:09:ba:10:fa:2a:5f:aa:09:
         20:36:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org