Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/03a6ef1d87d59b219c49a866c42913e2a4ede95e.roa
File:                     03a6ef1d87d59b219c49a866c42913e2a4ede95e.roa (raw, json)
Hash identifier:          ZPvgDk8pRxb7O4BMqLqgW9/SuynXB5bo3nKpfL4ng4k=
Subject key identifier:   AE:9B:66:93:50:FE:DD:78:A4:68:E1:8D:84:E9:EA:BE:28:74:62:88
Certificate issuer:       /CN=4245076a2cc4607485f913342504c58cdd14441f
Certificate serial:       213812
Authority key identifier: AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/03a6ef1d87d59b219c49a866c42913e2a4ede95e.roa
Signing time:             Wed 28 Jun 2023 02:20:47 +0000
ROA not before:           Tue 27 Jun 2023 02:20:45 +0000
ROA not after:            Sat 28 Jun 2025 02:20:45 +0000
asID:                     61503
IP address blocks:        138.36.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2177042 (0x213812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4245076a2cc4607485f913342504c58cdd14441f
        Validity
            Not Before: Jun 27 02:20:45 2023 GMT
            Not After : Jun 28 02:20:45 2025 GMT
        Subject: CN=03a6ef1d87d59b219c49a866c42913e2a4ede95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:0d:a1:e6:89:5a:f6:ee:d6:51:51:76:ae:
                    7e:89:bf:80:89:97:1a:fe:42:a6:b9:34:d7:5c:de:
                    d2:37:fd:b2:cd:09:96:75:d5:df:35:e6:80:f6:ae:
                    b3:97:d1:52:d4:e3:ce:f5:9b:5a:64:3f:4c:72:fa:
                    91:f7:c3:b7:a5:43:db:da:e3:d8:1d:3d:c3:d6:03:
                    ad:c2:c0:ea:66:36:6b:7f:16:1b:7e:a5:32:46:c1:
                    04:1c:75:89:07:89:ee:92:b3:e1:3c:0e:a7:4e:31:
                    75:38:03:31:c6:d8:a5:87:09:47:eb:24:82:05:22:
                    94:0b:a0:13:b6:65:8b:35:dd:70:b2:1e:47:e2:85:
                    6a:d2:06:ee:41:86:06:00:c4:70:e9:b3:25:12:80:
                    78:97:a2:60:86:fa:c3:29:95:83:ab:ca:a1:0a:72:
                    56:f1:27:ac:6f:e6:18:81:3e:44:b7:46:da:73:8f:
                    24:5d:2b:8c:82:cf:fd:02:0a:7e:53:22:f9:8f:95:
                    7c:9b:8d:41:38:1b:17:f8:16:a5:87:71:d8:49:7f:
                    b8:11:c1:0a:6b:47:dd:6a:7c:c4:2e:f2:42:d7:3a:
                    c2:55:07:40:05:af:15:89:c8:5b:6f:8d:cb:16:d9:
                    ae:7a:76:8d:24:79:78:8a:7c:2b:16:93:7c:19:9e:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9B:66:93:50:FE:DD:78:A4:68:E1:8D:84:E9:EA:BE:28:74:62:88
            X509v3 Authority Key Identifier:
                keyid:AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/03a6ef1d87d59b219c49a866c42913e2a4ede95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:53:18:c7:15:74:36:62:df:10:96:4f:b1:4a:9c:4c:9b:62:
         5a:30:74:2b:1e:f0:73:ec:5a:d3:b8:d0:cc:eb:1e:b9:a1:27:
         99:5c:d9:1a:ed:40:26:e3:e7:0a:6f:b1:f3:e7:0b:3b:b2:9c:
         9d:3e:c9:7a:16:a0:e6:c9:93:ea:2d:fb:3a:af:ce:52:34:7d:
         e2:ef:bb:d4:9f:54:aa:34:e6:bc:fd:06:68:56:9d:2e:d0:78:
         59:33:3b:05:01:07:3b:54:88:13:f9:11:0c:0a:31:be:4c:8b:
         98:1f:f9:98:c3:89:e9:8c:53:9a:68:38:5e:3b:c2:93:67:f6:
         19:27:0d:d6:ca:80:1b:31:87:22:4a:58:9a:82:75:cd:7b:aa:
         72:d4:61:b9:47:76:d6:4d:ea:ea:a1:17:31:92:90:3a:ae:07:
         39:89:ab:44:47:90:67:37:a0:08:99:ae:ff:9d:d8:df:c3:f6:
         a5:c4:96:19:90:c1:a5:fa:98:01:44:fb:b4:96:0e:e9:b2:35:
         8f:f1:55:9b:96:66:ea:d4:4d:f6:f1:bf:30:0d:66:c7:bb:1b:
         d2:d3:b7:af:67:c5:3b:6a:8c:c0:6d:80:73:db:15:30:44:79:
         6c:c6:7c:af:f7:1a:84:05:13:9c:34:f1:3b:b0:df:66:ef:6a:
         d1:6d:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org