Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/9743aeafc719c300d870e5969109d193ce22b050.roa
File:                     9743aeafc719c300d870e5969109d193ce22b050.roa (raw, json)
Hash identifier:          j6VrzQuzuoSfbpEMo/q587xrtBVSX/OgpWUscOXO/qw=
Subject key identifier:   74:AC:EC:98:00:77:B4:4D:20:17:CA:57:6B:B3:26:26:54:A5:C5:CA
Certificate issuer:       /CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
Certificate serial:       02FABA
Authority key identifier: 3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/9743aeafc719c300d870e5969109d193ce22b050.roa
Signing time:             Wed 24 Mar 2021 14:45:20 +0000
ROA not before:           Wed 24 Mar 2021 14:45:20 +0000
ROA not after:            Tue 24 Mar 2026 14:45:20 +0000
asID:                     61317
IP address blocks:        138.99.144.0/24 maxlen: 24
                          138.99.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195258 (0x2faba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
        Validity
            Not Before: Mar 24 14:45:20 2021 GMT
            Not After : Mar 24 14:45:20 2026 GMT
        Subject: CN=9743aeafc719c300d870e5969109d193ce22b050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:e9:50:f4:6b:34:25:74:c6:92:42:87:52:
                    3c:3d:6c:9b:1f:67:f5:ef:95:3f:62:ec:09:a6:a8:
                    ca:37:1b:51:9e:17:a9:b1:f2:9a:4b:83:bb:da:a7:
                    da:50:f1:46:5c:36:25:78:80:fa:9e:e8:b7:27:b4:
                    f7:bf:ae:46:0c:d6:09:58:2c:49:68:36:1f:4b:c4:
                    43:e0:37:96:42:2d:17:16:25:7a:ea:40:57:e4:52:
                    0c:82:93:e8:0e:cc:9a:83:3c:37:be:f6:7d:ac:d0:
                    a4:74:0d:d8:ba:e8:e4:f9:33:6f:a0:f4:c6:52:b8:
                    27:70:0e:59:66:8a:d4:c9:56:11:6d:ce:0c:44:76:
                    a9:fb:7d:da:04:9a:08:37:54:e0:0e:ce:64:97:65:
                    fe:ac:8a:bd:c3:c6:5f:fa:a3:33:9c:d6:53:49:67:
                    66:ed:70:f2:27:67:06:b4:88:16:ee:80:a8:4a:d3:
                    78:44:13:08:bb:a3:06:fb:ca:4c:bc:68:50:0c:9d:
                    96:52:6b:6d:00:2e:86:de:77:95:21:33:f4:40:0c:
                    38:7c:ce:fa:e3:0a:67:71:83:d4:fa:cf:47:1e:40:
                    90:e4:7c:4f:86:71:2d:94:a6:7e:83:4c:0f:5d:cf:
                    91:0d:14:91:e0:bb:8a:52:67:32:9f:5d:56:bd:78:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AC:EC:98:00:77:B4:4D:20:17:CA:57:6B:B3:26:26:54:A5:C5:CA
            X509v3 Authority Key Identifier:
                keyid:3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/9743aeafc719c300d870e5969109d193ce22b050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/e66fbaafbfa93934b71ee8599cbe9373aa212c99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/24
                  138.99.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:43:ba:d5:88:97:6d:86:d7:6a:45:63:05:40:d8:f2:92:79:
         3b:1b:4d:b0:78:e8:68:b5:d6:44:aa:b8:88:46:26:94:20:9a:
         81:46:19:f8:5e:dc:82:81:24:6d:45:84:12:e2:7c:f3:64:66:
         0f:3a:4e:c2:69:0e:3e:db:18:9f:9f:40:41:e5:a5:e6:54:f5:
         7c:0c:65:7d:f6:df:fc:d4:25:73:3e:02:ca:fd:d5:79:d0:c7:
         16:21:e5:83:20:d5:5a:75:2c:c2:56:03:b5:13:e7:99:0c:f4:
         2f:23:14:ac:20:f3:68:e6:cf:6a:89:da:4a:e1:e0:06:4b:72:
         d8:0d:66:96:05:6e:33:b8:51:ce:eb:64:10:59:1c:be:5c:91:
         57:6a:e4:3e:60:73:3f:0c:54:b0:20:5e:58:e1:d9:2b:cc:24:
         33:87:c0:4e:89:77:c7:42:7e:3c:32:54:4c:d1:94:1c:1d:bb:
         c5:3f:10:37:74:d0:9e:cf:78:40:9c:9a:b2:82:d5:d6:81:5a:
         af:2b:82:22:c8:4a:52:13:a5:e4:b4:f3:56:e1:22:01:a1:58:
         ee:07:cd:7a:90:7b:2a:57:ca:c0:44:e8:10:58:23:44:f0:cf:
         ca:0a:59:1b:8e:67:18:85:93:ee:22:76:7e:a9:72:b5:78:91:
         4e:53:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org