Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/500e6364-fa49-4f1c-a9df-0de990487523/6b73c86f1b7a6a80c24a3d19b46457abd3df8acf.roa
File:                     6b73c86f1b7a6a80c24a3d19b46457abd3df8acf.roa (raw, json)
Hash identifier:          FY5ZVM8BzILURLkYIH5I5Y7sQkN691FoJ0q4hsV/qgg=
Subject key identifier:   44:C7:FD:60:9C:5B:4C:F1:89:6D:4C:B6:30:3B:19:73:83:B1:B2:3A
Certificate issuer:       /CN=f141eb6e9ac20adf6f655eada96814f65d5beedd
Certificate serial:       04A8
Authority key identifier: C9:17:37:79:CF:2F:5F:0B:67:61:D5:D6:30:66:F7:B8:31:7D:A3:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f141eb6e9ac20adf6f655eada96814f65d5beedd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/500e6364-fa49-4f1c-a9df-0de990487523/6b73c86f1b7a6a80c24a3d19b46457abd3df8acf.roa
Signing time:             Wed 04 Aug 2021 12:54:37 +0000
ROA not before:           Wed 04 Aug 2021 03:00:00 +0000
ROA not after:            Fri 04 Aug 2023 03:00:00 +0000
asID:                     27750
IP address blocks:        138.59.12.0/22 maxlen: 22
                          200.0.204.0/22 maxlen: 22
                          2001:1348::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f141eb6e9ac20adf6f655eada96814f65d5beedd
        Validity
            Not Before: Aug  4 03:00:00 2021 GMT
            Not After : Aug  4 03:00:00 2023 GMT
        Subject: CN=6b73c86f1b7a6a80c24a3d19b46457abd3df8acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:6b:f1:2e:33:39:5e:55:55:b5:9a:02:8c:
                    16:b1:e6:99:7a:a4:a2:96:eb:72:81:ba:0f:5c:18:
                    67:3c:18:4d:de:d8:ae:76:4c:c2:d7:7b:5e:86:15:
                    6e:4b:57:4f:97:dc:37:4f:b1:ea:13:00:ad:c1:bd:
                    fc:6f:3f:35:7b:fe:39:b8:f1:4c:91:43:6d:9d:39:
                    60:76:cc:fd:95:0e:29:53:ce:14:eb:02:e5:d2:b3:
                    14:d8:f6:40:52:83:3d:54:c2:2c:ea:32:8e:67:2f:
                    45:56:df:49:af:ff:d1:af:f4:45:0c:f1:6d:8e:dc:
                    f0:c5:49:d7:1b:49:70:08:d9:f7:2b:0d:8c:64:a8:
                    9a:4a:ac:57:55:fc:18:38:a2:7b:e8:25:cb:98:4b:
                    44:95:ce:3d:4f:15:c8:ee:17:43:57:1e:c5:d6:5a:
                    1f:79:83:51:9d:e2:a3:80:54:9a:ec:27:01:1c:76:
                    3c:c6:bb:d5:70:22:0c:dd:74:e4:b3:97:3c:a9:74:
                    40:23:57:26:ee:90:58:6f:f4:50:5e:34:03:d0:99:
                    8b:75:fd:b7:eb:03:e9:06:d6:3e:f6:0b:4c:a9:78:
                    80:75:2b:c2:66:fe:1d:ff:7c:e7:dd:5f:54:81:4a:
                    2d:a5:ad:72:70:78:08:5e:92:ef:1d:3a:ef:f8:c6:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:FD:60:9C:5B:4C:F1:89:6D:4C:B6:30:3B:19:73:83:B1:B2:3A
            X509v3 Authority Key Identifier:
                keyid:C9:17:37:79:CF:2F:5F:0B:67:61:D5:D6:30:66:F7:B8:31:7D:A3:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f141eb6e9ac20adf6f655eada96814f65d5beedd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/500e6364-fa49-4f1c-a9df-0de990487523/6b73c86f1b7a6a80c24a3d19b46457abd3df8acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/500e6364-fa49-4f1c-a9df-0de990487523/f141eb6e9ac20adf6f655eada96814f65d5beedd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.12.0/22
                  200.0.204.0/22
                IPv6:
                  2001:1348::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:1d:f0:3b:a9:2f:fa:f3:71:3b:41:80:0d:50:3a:ac:d3:7f:
         d5:51:65:12:aa:d3:c1:9c:f2:75:a3:45:c6:d9:98:60:55:68:
         ea:d0:a8:a9:ab:39:90:2d:ba:bb:d2:ae:c0:b7:78:ef:e7:18:
         60:9b:49:97:93:28:b1:56:16:ce:74:42:c2:d8:96:b7:62:68:
         40:53:3e:a7:39:15:ec:9c:be:0b:ea:85:b7:a5:d0:73:00:19:
         39:ae:51:5a:b2:cf:c5:73:07:5d:02:fc:a0:5a:c5:1c:64:3b:
         f6:75:d6:9d:9f:da:5a:d4:bf:f5:09:87:ff:ca:7f:38:cd:55:
         83:5e:6d:cf:38:81:80:97:5b:28:6e:e7:56:23:18:2d:e8:22:
         1c:d9:21:fb:3e:31:61:cb:19:9d:87:01:8b:c3:94:d1:8b:32:
         76:6b:3a:36:9d:9e:11:50:de:c3:16:1d:4a:1b:d7:55:b6:fe:
         13:d0:93:1b:77:cb:af:7e:14:5d:46:11:ad:4f:e8:07:80:c2:
         0a:7c:9b:98:79:92:b9:42:b2:65:3b:e9:ed:23:65:31:79:59:
         fb:e3:71:4c:59:8c:02:07:84:44:f4:fd:ae:ee:3a:59:5d:98:
         0f:d2:2f:6f:45:47:d1:b1:b4:8a:d9:b6:be:e6:95:ef:f5:d5:
         5c:1f:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org