Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f.roa
File:                     6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f.roa (raw, json)
Hash identifier:          wi7NW1BoUbUJqPNFxXsUNofyi5FPk77teiQ2WihJm1c=
Subject key identifier:   58:2F:F8:3E:31:F5:41:1F:59:9B:01:BA:16:8B:3C:CE:A2:EC:91:8E
Certificate issuer:       /CN=4245076a2cc4607485f913342504c58cdd14441f
Certificate serial:       0CC04E
Authority key identifier: AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f.roa
Signing time:             Wed 24 Mar 2021 14:34:22 +0000
ROA not before:           Wed 24 Mar 2021 14:34:22 +0000
ROA not after:            Tue 24 Mar 2026 14:34:22 +0000
asID:                     269733
IP address blocks:        138.36.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835662 (0xcc04e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4245076a2cc4607485f913342504c58cdd14441f
        Validity
            Not Before: Mar 24 14:34:22 2021 GMT
            Not After : Mar 24 14:34:22 2026 GMT
        Subject: CN=6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:fe:a1:69:a4:a1:e2:c2:9e:5e:1e:83:1d:
                    6b:3b:4c:c8:a2:ed:80:1c:7d:59:7f:8f:73:d6:77:
                    50:b6:49:20:dd:e4:09:84:f6:c9:52:52:3b:0d:e2:
                    ae:4e:5e:2b:1f:e0:ea:35:0b:fd:98:aa:97:1f:2e:
                    13:fc:10:ce:fd:89:ee:ea:85:0e:84:74:84:be:a3:
                    ee:79:d1:71:8f:f7:66:76:23:cc:fa:c5:c2:31:84:
                    e8:17:6d:0e:37:20:03:21:99:ab:de:37:bb:02:10:
                    5e:38:22:7c:67:c5:8d:3b:c5:09:30:a7:e9:98:44:
                    2d:2c:92:51:38:68:8a:cd:ba:e9:d3:48:01:60:bb:
                    92:14:f7:c6:d3:46:08:69:29:b9:4a:c8:be:5b:ae:
                    81:73:a3:d3:11:57:62:42:45:c2:d7:44:dc:9e:40:
                    e3:1a:5f:e8:d4:28:44:17:8d:42:33:24:06:29:bd:
                    f8:a7:cf:77:9e:17:fc:f0:08:84:f3:d8:cf:4c:84:
                    a3:01:0f:24:0c:18:83:81:c9:96:cc:fe:4c:a6:68:
                    60:3d:f4:c9:9a:a1:90:d0:f2:5f:48:24:9b:9d:c7:
                    04:61:c2:b1:24:86:d7:57:55:bb:c6:10:1f:d4:16:
                    f4:35:df:64:bc:d8:ea:20:89:2b:57:0f:8d:50:15:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:F8:3E:31:F5:41:1F:59:9B:01:BA:16:8B:3C:CE:A2:EC:91:8E
            X509v3 Authority Key Identifier:
                keyid:AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:2b:03:cd:30:e0:70:55:ee:69:31:87:42:55:6a:d8:7a:26:
         c7:8a:b4:7f:97:43:26:8c:e0:60:cc:10:1d:0b:56:28:98:b7:
         78:d3:79:32:b9:87:7f:d6:94:9c:bd:68:61:24:fd:c0:be:8a:
         4c:cc:6a:db:04:20:ca:91:da:53:22:45:71:fd:2a:50:44:b7:
         58:a1:f6:db:41:f9:8b:0f:bc:2f:4c:76:58:71:e9:15:48:8f:
         87:ae:13:7e:42:f6:76:d7:11:61:e7:d3:3b:23:49:62:b5:c2:
         1a:c6:52:a4:63:8a:5c:0e:8b:50:49:47:8e:9c:4d:4f:85:9f:
         00:12:57:26:3b:9e:ba:73:c2:77:08:21:40:02:5b:2b:e5:85:
         a9:fc:b2:52:e3:4f:f2:02:36:89:0a:b5:2d:82:3c:26:8a:1a:
         df:e6:d3:dd:0f:78:24:41:88:e7:c2:a8:41:f4:0e:a5:f0:2c:
         8a:e8:ef:ba:8b:08:cb:02:46:95:76:32:c1:49:72:2c:b6:c3:
         d2:5d:54:9c:0a:cf:bb:64:3c:80:c3:82:1a:0c:c1:0d:2e:71:
         d6:01:41:39:85:71:c1:8f:39:87:0c:a2:dc:a9:5a:64:56:0d:
         13:25:cf:2e:4c:43:aa:25:d8:c1:2c:b8:93:74:4e:11:13:8b:
         c5:c4:c9:fe
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDMBOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
NDUwNzZhMmNjNDYwNzQ4NWY5MTMzNDI1MDRjNThjZGQxNDQ0MWYwHhcNMjEwMzI0
MTQzNDIyWhcNMjYwMzI0MTQzNDIyWjAzMTEwLwYDVQQDEyg2ZjViZjAwNGU4NmY2
MTIxZWQyMTg0ZmI2NDlmN2JjYjZiZjhhNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmXb+oWmkoeLCnl4egx1rO0zIou2AHH1Zf49z1ndQtkkg3eQJ
hPbJUlI7DeKuTl4rH+DqNQv9mKqXHy4T/BDO/Ynu6oUOhHSEvqPuedFxj/dmdiPM
+sXCMYToF20ONyADIZmr3je7AhBeOCJ8Z8WNO8UJMKfpmEQtLJJROGiKzbrp00gB
YLuSFPfG00YIaSm5Ssi+W66Bc6PTEVdiQkXC10TcnkDjGl/o1ChEF41CMyQGKb34
p893nhf88AiE89jPTISjAQ8kDBiDgcmWzP5MpmhgPfTJmqGQ0PJfSCSbnccEYcKx
JIbXV1W7xhAf1Bb0Nd9kvNjqIIkrVw+NUBVc9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFgv+D4x9UEfWZsBuhaLPM6i7JGOMB8GA1UdIwQYMBaAFK2fFl5N2AC3QbgE
BPA41t4k5VW4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDI0NTA3
NmEyY2M0NjA3NDg1ZjkxMzM0MjUwNGM1OGNkZDE0NDQxZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjY0YjVhZWYtYjFhOC00MjQ1LWFhOTctMGEwMDI5
NjRlNjVjLzZmNWJmMDA0ZTg2ZjYxMjFlZDIxODRmYjY0OWY3YmNiNmJmOGE0NGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NjRiNWFlZi1iMWE4LTQyNDUtYWE5Ny0wYTAw
Mjk2NGU2NWMvNDI0NTA3NmEyY2M0NjA3NDg1ZjkxMzM0MjUwNGM1OGNkZDE0NDQx
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAook/DANBgkqhkiG9w0BAQsFAAOCAQEASysDzTDgcFXuaTGH
QlVq2Homx4q0f5dDJozgYMwQHQtWKJi3eNN5MrmHf9aUnL1oYST9wL6KTMxq2wQg
ypHaUyJFcf0qUES3WKH220H5iw+8L0x2WHHpFUiPh64TfkL2dtcRYefTOyNJYrXC
GsZSpGOKXA6LUElHjpxNT4WfABJXJjueunPCdwghQAJbK+WFqfyyUuNP8gI2iQq1
LYI8Jooa3+bT3Q94JEGI58KoQfQOpfAsiujvuosIywJGlXYywUlyLLbD0l1UnArP
u2Q8gMOCGgzBDS5x1gFBOYVxwY85hwyi3KlaZFYNEyXPLkxDqiXYwSy4k3ROEROL
xcTJ/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org