Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6174337c021431d7bc07f2bcf9bcb83c283e5e05.roa
File:                     6174337c021431d7bc07f2bcf9bcb83c283e5e05.roa (raw, json)
Hash identifier:          2Qv3CwLMbjubQhP7AkUM4UnsC3Uq/sfKAGTH+iT4bBs=
Subject key identifier:   BC:F4:89:09:65:39:2C:79:A6:30:26:8A:5B:44:83:F8:3F:6C:32:FC
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0CFC15
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6174337c021431d7bc07f2bcf9bcb83c283e5e05.roa
Signing time:             Wed 24 Mar 2021 14:29:19 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     52509
IP address blocks:        201.182.139.0/24 maxlen: 24
                          138.204.248.0/24 maxlen: 24
                          2001:13c7:601a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850965 (0xcfc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=6174337c021431d7bc07f2bcf9bcb83c283e5e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:7c:0d:3b:83:17:f4:e2:7f:23:aa:2b:3f:
                    96:3d:4b:4f:fd:7e:c0:ef:17:ea:50:e7:13:ec:c3:
                    04:e8:6e:e7:d7:78:21:b4:60:84:e3:53:c9:69:9c:
                    33:1f:19:bf:c5:41:9b:a7:92:36:88:d2:73:7c:0d:
                    c0:0a:f0:22:3f:9b:69:4c:c1:d7:01:fc:16:12:d3:
                    05:d0:61:79:4f:c0:d4:7e:a4:c7:66:91:b3:a2:d7:
                    bb:be:87:e1:34:60:e6:68:92:50:98:d3:af:20:a3:
                    50:21:15:af:f1:8a:3e:3f:c8:ed:3f:ba:ba:65:a5:
                    a4:00:a3:2c:b3:8a:ce:03:0f:88:23:fe:9f:09:a8:
                    45:9c:77:b5:96:15:92:6a:d6:8a:57:28:b9:60:ce:
                    9e:66:ba:48:a2:56:22:d3:78:0e:bf:35:d7:e1:c0:
                    f6:59:22:f1:d6:42:c0:93:f2:db:e6:89:54:e1:e9:
                    00:e6:10:7d:ac:48:28:bd:fa:c7:d9:17:8e:a7:bb:
                    10:7f:41:55:e2:28:94:ec:f2:73:91:93:9e:b2:20:
                    ef:3e:51:e3:2b:70:5e:5c:96:d6:ea:bf:7c:3a:0f:
                    9b:10:74:1f:38:48:28:81:b4:a2:65:bb:e2:8c:7b:
                    68:42:e5:5e:4a:b1:62:c1:bd:75:c4:0c:71:57:2e:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F4:89:09:65:39:2C:79:A6:30:26:8A:5B:44:83:F8:3F:6C:32:FC
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6174337c021431d7bc07f2bcf9bcb83c283e5e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.248.0/24
                  201.182.139.0/24
                IPv6:
                  2001:13c7:601a::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:e6:53:82:81:c0:10:cb:35:f0:c4:3d:c9:28:6e:12:fa:
         13:f4:77:5e:cd:b0:bb:1b:71:14:49:5e:76:61:17:f7:98:ae:
         34:ca:41:5b:a3:1d:11:18:98:3a:ff:79:da:97:2e:80:b0:5e:
         30:17:6f:62:8b:19:fb:71:75:4e:2f:b1:3d:0b:a1:2a:9f:4f:
         0d:e6:10:58:2b:67:1e:ae:4d:c0:30:3a:3f:23:84:72:74:41:
         eb:f7:3e:d1:9b:82:82:f8:9b:76:b7:4e:b4:6b:06:63:19:96:
         be:4f:96:1c:11:2b:04:aa:e2:28:77:a7:d8:81:b7:44:f2:0d:
         75:91:02:eb:be:2f:08:a8:94:ea:37:66:23:8f:c4:52:97:9d:
         ee:55:63:c9:97:1b:c6:64:2f:14:59:1c:45:f2:ca:67:1c:19:
         2a:b2:5b:69:ae:39:0e:9f:c3:f6:77:77:be:28:ee:4e:94:79:
         36:be:61:e8:87:e7:05:07:c5:23:c8:31:31:02:a5:07:69:4a:
         36:14:ea:56:6c:19:a5:f8:ae:61:85:c3:dd:59:b7:87:35:80:
         21:41:c2:28:9d:c6:9c:64:fc:98:86:fd:60:0b:50:69:41:cf:
         a3:3b:08:16:8f:d4:65:a7:dd:48:2c:d8:d9:5f:6a:0f:5d:f2:
         29:15:61:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org