Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3.roa
File:                     a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3.roa (raw, json)
Hash identifier:          7qGqHtmz9nXskFKvkcvvAEPjs8LOLhrhRSDPeQNkjXk=
Subject key identifier:   59:1D:B6:70:B2:84:4B:22:4A:16:DD:EC:92:F9:72:ED:26:24:3C:F1
Certificate issuer:       /CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Certificate serial:       0D1812
Authority key identifier: 53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3.roa
Signing time:             Wed 24 Mar 2021 14:33:02 +0000
ROA not before:           Wed 24 Mar 2021 14:33:02 +0000
ROA not after:            Tue 24 Mar 2026 14:33:02 +0000
asID:                     263824
IP address blocks:        138.185.76.0/22 maxlen: 24
                          170.254.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858130 (0xd1812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61678bdd44acebd11355abc32f79a39e0ab6e968
        Validity
            Not Before: Mar 24 14:33:02 2021 GMT
            Not After : Mar 24 14:33:02 2026 GMT
        Subject: CN=a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:27:7c:84:ee:97:96:95:35:3e:41:a2:57:6f:
                    df:05:c3:80:c0:95:4f:9f:60:66:25:6c:4d:67:96:
                    b0:0e:b2:f1:b2:b2:03:92:47:ba:4f:73:33:8f:b6:
                    a8:36:e3:c4:98:f0:d2:75:18:6a:80:22:e4:3d:9e:
                    01:7e:8f:0e:ca:d8:41:20:38:f7:65:70:c0:56:84:
                    32:9d:5b:48:12:56:8b:85:26:a4:b9:39:0d:45:9a:
                    a4:7f:7b:1d:d0:3c:81:9f:7d:19:6f:44:47:f0:99:
                    a5:56:9c:60:8a:52:8d:f4:86:7d:59:9a:d1:6b:04:
                    55:e1:35:75:27:27:54:9d:1f:61:08:18:3b:e2:7c:
                    e9:c7:76:53:72:fa:99:53:65:37:fe:b4:0b:8d:f7:
                    80:44:67:4a:5d:9b:72:4f:af:e3:b9:90:d2:5b:be:
                    3f:78:be:1e:6d:02:15:81:f3:17:af:43:f6:48:ec:
                    a2:26:19:f8:68:c5:2e:f8:ae:d3:a5:53:79:7c:4a:
                    fb:96:db:70:e2:c4:4d:c6:0d:6e:5c:9f:00:47:ae:
                    b8:76:04:38:38:30:40:7b:4a:b9:2e:a4:8d:04:5d:
                    84:22:30:51:5e:27:2f:76:50:dc:80:08:ab:e1:22:
                    49:cc:7a:e4:d0:27:ec:19:7b:c1:a0:c1:1e:34:67:
                    2c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1D:B6:70:B2:84:4B:22:4A:16:DD:EC:92:F9:72:ED:26:24:3C:F1
            X509v3 Authority Key Identifier:
                keyid:53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/61678bdd44acebd11355abc32f79a39e0ab6e968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.76.0/22
                  170.254.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:f7:e0:95:01:18:96:15:90:fe:a3:d6:26:aa:e9:3f:54:
         31:ed:00:23:45:cb:20:97:0a:14:08:8c:17:21:8d:64:d0:97:
         c4:34:33:30:90:89:c4:fa:32:83:de:e4:b0:23:2e:ff:8b:b8:
         8b:80:39:81:96:67:46:f5:13:95:8f:91:fa:d9:f2:85:c7:cc:
         2c:36:7a:a7:ac:ad:63:e7:43:f1:83:ec:b9:4b:c4:62:74:b6:
         4b:4c:f4:ff:49:17:57:7d:d5:2d:80:f7:45:ee:3d:5e:bc:52:
         d3:83:68:0c:c5:2c:3b:f6:22:6a:22:23:fb:1b:ab:58:30:0d:
         54:f1:3b:cd:44:00:22:09:82:be:83:56:4b:a5:e6:fa:10:f8:
         a7:ee:06:36:e8:60:7f:a3:8e:35:f4:74:17:f3:a2:2d:88:e1:
         7b:35:c9:e0:7e:94:1b:bf:6a:0a:c2:19:8f:80:59:3b:5f:9e:
         c6:f4:d0:80:20:89:d5:ab:e1:ee:05:81:d8:00:e0:b2:7b:bb:
         8e:c2:5d:93:fe:10:6d:75:ce:bf:f3:1e:b8:c9:6a:37:ca:72:
         b3:f0:d8:f5:a9:9a:41:48:f2:5f:83:37:6f:98:37:ed:ee:85:
         c6:f2:fa:d5:91:62:3e:32:52:c1:8b:be:e2:f2:bc:cf:02:1c:
         9a:1d:90:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org