Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/f4b09d3574dd45e76f8c0e764b7860a044df1a07.roa
File:                     f4b09d3574dd45e76f8c0e764b7860a044df1a07.roa (raw, json)
Hash identifier:          rtFeuipHMs5ltHGO8ngwO+0KbfBInB2FT7UvdBf9FbQ=
Subject key identifier:   C7:89:92:EF:89:4F:63:0E:37:73:19:C6:AD:13:D9:84:E9:14:3A:F5
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       E4CF
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/f4b09d3574dd45e76f8c0e764b7860a044df1a07.roa
Signing time:             Wed 14 Sep 2022 14:03:36 +0000
ROA not before:           Tue 13 Sep 2022 19:16:01 +0000
ROA not after:            Fri 13 Sep 2024 19:16:01 +0000
asID:                     27823
IP address blocks:        138.219.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58575 (0xe4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Sep 13 19:16:01 2022 GMT
            Not After : Sep 13 19:16:01 2024 GMT
        Subject: CN=f4b09d3574dd45e76f8c0e764b7860a044df1a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b6:25:62:72:19:e2:bf:86:c2:c3:60:a2:c1:
                    18:f1:58:ad:a6:da:e2:73:8a:cc:93:23:12:9c:88:
                    77:a8:11:7d:04:30:9f:e9:6b:e0:6c:38:e5:18:cc:
                    32:aa:b5:a3:09:7f:4e:bf:fb:dd:6c:ff:ed:f1:87:
                    6f:5b:7b:2d:45:b4:22:6e:4b:31:8a:bb:d8:2d:ad:
                    5c:1e:15:8f:26:21:0a:58:f1:97:c0:0f:65:05:0d:
                    44:9d:6c:b0:e2:98:1f:b2:fe:d8:70:f8:a7:a3:51:
                    ad:0b:a7:7f:cf:1b:2f:d5:a4:7e:12:b6:94:3f:fd:
                    86:09:e8:51:68:1c:bb:8b:80:94:46:40:7e:0c:23:
                    3e:8f:6a:ee:0c:0d:82:26:d2:2b:b4:41:a1:7f:16:
                    50:b1:27:97:e9:f1:c0:e5:76:64:4a:41:71:ba:37:
                    9d:6d:ba:8d:b4:86:2e:5a:cf:91:ae:72:e1:3c:99:
                    b3:2c:55:a7:47:78:f0:57:a1:99:6f:7b:78:f0:4d:
                    73:da:0a:7c:6e:dd:64:de:83:d9:57:cd:f2:7a:b2:
                    4d:61:7c:5c:b5:84:7e:3d:2b:e6:3a:dd:21:ed:f0:
                    03:a9:04:13:df:63:da:ce:4b:1f:0b:28:12:5b:f7:
                    c2:d7:b6:5d:74:45:9b:12:8c:59:15:0e:e3:85:07:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:89:92:EF:89:4F:63:0E:37:73:19:C6:AD:13:D9:84:E9:14:3A:F5
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/f4b09d3574dd45e76f8c0e764b7860a044df1a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:91:a5:18:f7:ba:43:03:fd:f6:e4:cb:7d:fc:5a:0a:eb:6c:
         48:5f:f5:76:ce:59:30:6e:e4:96:57:b4:0e:9a:e0:c4:ba:ed:
         98:53:36:2b:d8:08:e7:72:c9:1e:1a:cf:71:02:97:69:18:dc:
         57:3e:91:6a:21:0a:01:31:f5:70:41:1b:1f:59:b7:9f:b5:31:
         15:12:28:a5:01:7d:64:87:08:5b:32:03:85:c8:29:9b:5d:85:
         5e:89:5d:a0:ca:e7:c9:30:d7:43:ba:9c:b2:96:66:51:d7:b6:
         c8:c6:11:dc:be:e4:04:a3:9a:a7:1c:cf:b2:8a:50:d5:33:a0:
         3f:ea:a7:68:c8:5d:13:25:db:44:0d:89:7d:80:7c:a1:67:d0:
         d3:40:de:6b:10:dc:13:fd:f2:df:d3:e0:d6:c0:d8:9b:26:5e:
         32:db:b5:cf:82:a5:c5:73:cf:40:bb:b3:4d:c6:57:90:15:35:
         23:ee:8b:8c:e6:de:c2:6a:30:71:1f:d2:94:c2:25:db:71:20:
         7b:02:44:5d:de:9f:8b:79:2a:46:b9:40:77:07:58:d4:30:fa:
         da:ec:88:35:38:a5:8d:35:5a:66:78:ae:ad:b1:45:7b:92:2c:
         7a:b9:70:8f:70:2b:42:b5:36:10:40:e5:d6:13:d7:72:4f:37:
         b7:bc:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org