Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/ee74d586d7565779f94996495cbbfacf390d21f4.roa
File:                     ee74d586d7565779f94996495cbbfacf390d21f4.roa (raw, json)
Hash identifier:          AOnKh+eHQtPGTH3Lp1gR2sXDBPrzqmO8IzpZvkAKEJA=
Subject key identifier:   24:53:13:20:61:AD:F4:F8:0A:A4:5A:9F:60:E4:79:BB:63:30:7A:D0
Certificate issuer:       /CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
Certificate serial:       1C1E1D
Authority key identifier: 3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/ee74d586d7565779f94996495cbbfacf390d21f4.roa
Signing time:             Fri 05 Jan 2024 07:30:03 +0000
ROA not before:           Fri 05 Jan 2024 07:30:03 +0000
ROA not after:            Sun 04 Jan 2026 07:30:03 +0000
asID:                     400039
IP address blocks:        138.99.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842717 (0x1c1e1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
        Validity
            Not Before: Jan  5 07:30:03 2024 GMT
            Not After : Jan  4 07:30:03 2026 GMT
        Subject: CN=ee74d586d7565779f94996495cbbfacf390d21f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:22:9e:13:40:39:92:24:ea:8c:f5:75:c9:0c:
                    5c:01:42:45:d0:5f:26:34:09:31:e2:6d:dd:5f:a6:
                    48:cb:c5:9a:96:21:fe:df:db:1b:2e:54:36:12:23:
                    63:6f:c8:e5:79:ec:2e:27:39:c2:27:0f:b6:bc:70:
                    cb:d6:12:64:13:a2:b0:ec:5e:02:4c:78:4b:47:f8:
                    95:e2:86:f5:e3:81:4e:1b:34:98:6c:eb:c7:ea:b0:
                    5e:b0:a2:9d:b1:97:6f:56:77:e2:c7:fc:7a:9c:2a:
                    5d:87:4a:49:8b:7e:76:99:7d:69:ec:b1:e9:fb:79:
                    f7:41:e9:69:61:b4:68:99:69:04:67:e0:b7:16:d9:
                    3a:10:15:70:0d:d2:1a:40:5c:a5:74:d1:9a:d2:28:
                    96:8f:50:e7:cc:ed:81:30:69:5b:dd:ab:72:6f:2b:
                    89:31:dc:69:45:9a:0e:f0:94:2b:54:23:b7:1f:87:
                    0f:4f:75:fc:28:8c:48:1a:19:ab:08:30:3d:a5:76:
                    21:8d:19:cc:9c:12:2d:2e:e4:77:26:0c:f4:4a:83:
                    fa:c0:8b:40:43:09:28:cc:7e:27:9c:5a:24:99:9c:
                    c7:55:a2:8e:96:a1:fb:4f:de:1d:d2:d8:ae:a5:78:
                    68:f7:bf:84:8f:31:4b:dd:78:f8:f3:96:e3:07:7e:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:53:13:20:61:AD:F4:F8:0A:A4:5A:9F:60:E4:79:BB:63:30:7A:D0
            X509v3 Authority Key Identifier:
                keyid:3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/ee74d586d7565779f94996495cbbfacf390d21f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/e66fbaafbfa93934b71ee8599cbe9373aa212c99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a8:56:f6:97:a2:89:8c:a0:9e:af:44:5b:93:d5:07:6f:3d:
         8a:d2:ef:f8:39:87:53:96:ba:64:03:e0:84:6e:a8:0f:7d:6e:
         67:d6:a1:cd:44:14:ad:ca:28:61:d0:4e:0c:dc:d2:b6:a8:bc:
         8b:87:94:f8:2a:01:60:27:9b:c3:36:d8:71:19:e3:80:30:2e:
         fe:a4:38:f7:8f:b4:5c:99:7c:ff:0a:e9:f3:ac:14:00:77:a7:
         74:67:9e:24:3c:1a:af:22:c1:a9:0c:ae:9d:42:27:9a:b7:0b:
         f5:03:17:c6:a5:ab:5b:5c:6f:5e:b4:b7:dc:fa:05:71:f2:0e:
         34:7d:c3:f7:72:e8:72:51:df:23:e7:c7:5c:8a:2a:14:6c:48:
         ce:3c:b2:4e:82:c2:f6:45:6a:04:aa:32:ab:84:54:ff:21:7c:
         3e:9b:34:44:0a:be:f1:c7:6e:70:ca:40:ee:6a:09:2b:f6:4f:
         09:58:b3:d7:74:e9:06:41:65:f7:9b:54:73:5c:37:a4:05:ef:
         00:7e:bf:da:a4:56:46:25:a6:a7:ab:23:df:b8:8c:ef:d9:6a:
         9f:28:55:00:4c:12:ed:0b:b9:b4:9f:e3:36:39:b9:28:9a:9d:
         3b:6b:e9:0f:98:14:84:59:bc:61:41:cc:55:ec:86:c7:74:07:
         29:88:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org