Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/830c7d3b2bdf6553199eb5a44a0d3322d62e6194.roa
File:                     830c7d3b2bdf6553199eb5a44a0d3322d62e6194.roa (raw, json)
Hash identifier:          Q/AJyOW+Mewt5XZifsmEbOb6yWUeYOR5UOResBHzxAI=
Subject key identifier:   9C:41:B0:AC:5D:7C:B1:13:DE:1E:4C:70:3D:BC:81:20:3E:E2:78:64
Certificate issuer:       /CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
Certificate serial:       1C173A
Authority key identifier: 3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/830c7d3b2bdf6553199eb5a44a0d3322d62e6194.roa
Signing time:             Fri 05 Jan 2024 07:30:02 +0000
ROA not before:           Fri 05 Jan 2024 07:30:02 +0000
ROA not after:            Sun 04 Jan 2026 07:30:02 +0000
asID:                     400040
IP address blocks:        138.99.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840954 (0x1c173a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
        Validity
            Not Before: Jan  5 07:30:02 2024 GMT
            Not After : Jan  4 07:30:02 2026 GMT
        Subject: CN=830c7d3b2bdf6553199eb5a44a0d3322d62e6194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:55:0e:68:7f:42:ed:d6:a6:28:c6:62:47:
                    23:38:83:97:59:9b:9e:cd:85:c5:ee:66:e1:2a:03:
                    92:16:45:96:02:65:b0:c6:51:41:1f:f5:fa:60:11:
                    78:72:f7:aa:6c:b7:ac:7b:c4:5d:47:11:af:ac:a8:
                    44:42:4a:e0:52:e3:ef:81:29:a5:49:cc:1e:a0:21:
                    cd:3f:56:e4:d3:a3:ee:e5:fa:a2:fd:99:0d:49:de:
                    1c:52:3d:8d:a7:23:45:9f:b6:82:f3:08:27:41:e6:
                    da:44:cc:d5:4c:62:98:2b:a0:cf:20:96:1d:12:80:
                    1b:72:50:10:32:29:b0:ca:8e:44:2e:2b:83:06:03:
                    a2:17:10:7c:63:a1:31:7c:46:e6:47:3c:69:e7:2c:
                    7d:92:83:bf:49:4d:06:38:a9:17:08:fe:65:c8:9f:
                    f7:e2:35:c6:06:3d:28:4f:72:fa:0a:1c:cd:70:58:
                    13:5b:a3:be:ab:98:2c:db:e0:1f:fe:7c:6a:b6:0a:
                    17:32:83:b9:74:e1:41:20:dd:45:c6:f2:24:d9:2c:
                    99:59:79:c0:3d:de:ab:bd:43:b2:7d:3d:96:b0:0b:
                    e1:6b:a1:9b:96:5f:08:80:24:cd:c0:ae:07:18:b6:
                    da:c3:78:a6:90:00:ca:32:c8:77:ed:a1:2a:5a:ea:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:41:B0:AC:5D:7C:B1:13:DE:1E:4C:70:3D:BC:81:20:3E:E2:78:64
            X509v3 Authority Key Identifier:
                keyid:3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/830c7d3b2bdf6553199eb5a44a0d3322d62e6194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/e66fbaafbfa93934b71ee8599cbe9373aa212c99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:77:15:ed:83:12:90:9d:9d:71:10:dc:89:8d:c8:ca:21:fe:
         f1:32:6e:93:02:8f:65:b5:41:c5:7b:5f:72:2e:55:71:25:cc:
         9a:f8:bd:e7:8e:f1:dc:8b:3b:d7:90:3e:74:fc:21:5f:15:f7:
         c7:6f:4e:94:c4:dd:05:35:dd:5c:71:64:2b:0e:dd:9e:b9:8e:
         7c:bf:07:85:6b:29:16:26:77:1c:22:7b:2b:e5:85:f7:2a:66:
         94:60:1b:e0:78:17:ca:64:e2:3f:9b:1f:48:a1:3d:00:20:6c:
         d9:e1:c7:a1:ac:16:89:cd:65:57:62:d4:8d:54:0d:d3:88:c6:
         89:8c:63:43:5c:20:87:48:c4:07:e0:84:7d:21:1a:26:01:fc:
         d4:4f:fd:77:2b:7b:85:e3:5b:1a:45:80:3e:b3:bd:c9:ec:8e:
         0d:1e:32:a0:5f:e8:86:4a:36:56:e0:0e:ff:47:52:c1:56:ac:
         53:1d:b4:9c:6f:4b:61:8e:29:31:1a:45:68:f5:f4:22:ca:6e:
         4b:66:f5:1d:00:09:73:a5:66:de:5d:66:d1:4f:f6:14:59:a5:
         50:b4:15:da:82:fe:05:0c:b3:12:21:b8:98:a9:99:d8:d9:bc:
         a9:96:fd:49:07:98:12:41:3f:3b:98:f7:27:7a:df:ec:10:b3:
         86:e0:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org