Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/9d6f6e5f3a9a8f2954fb62b345d938cc644ca5f6.roa
File:                     9d6f6e5f3a9a8f2954fb62b345d938cc644ca5f6.roa (raw, json)
Hash identifier:          dD7hDaG3bb3M0G0C/hKS+6hOPoRvAublFGi2n0/rHyY=
Subject key identifier:   04:CD:B7:61:60:4B:AD:B6:2A:E7:F7:CF:DB:96:EE:8B:53:99:CB:8E
Certificate issuer:       /CN=4245076a2cc4607485f913342504c58cdd14441f
Certificate serial:       212E82
Authority key identifier: AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/9d6f6e5f3a9a8f2954fb62b345d938cc644ca5f6.roa
Signing time:             Wed 28 Jun 2023 02:20:45 +0000
ROA not before:           Tue 27 Jun 2023 02:20:45 +0000
ROA not after:            Sat 28 Jun 2025 02:20:45 +0000
asID:                     269733
IP address blocks:        138.36.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174594 (0x212e82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4245076a2cc4607485f913342504c58cdd14441f
        Validity
            Not Before: Jun 27 02:20:45 2023 GMT
            Not After : Jun 28 02:20:45 2025 GMT
        Subject: CN=9d6f6e5f3a9a8f2954fb62b345d938cc644ca5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:83:2d:69:31:46:7e:dc:8d:06:c7:e3:7c:
                    d7:31:ae:a6:3a:b8:1d:86:a6:07:c8:06:d6:be:f9:
                    dd:e5:44:f7:b5:1d:d4:44:16:fe:e6:f0:f0:3a:95:
                    32:60:dd:13:5c:4e:ea:6c:d1:f2:58:36:ce:b8:2b:
                    ad:bc:e2:cb:b8:c8:0f:87:60:c2:f0:89:77:12:94:
                    a6:09:ae:f8:94:b9:fc:c3:5a:ef:5b:3b:0b:8b:9a:
                    e2:67:3b:ee:7d:c8:c4:74:70:6f:f2:e7:06:f9:e2:
                    06:64:1d:0b:80:a4:cc:ef:b4:8c:a2:16:ec:5f:12:
                    12:38:a6:a9:56:5c:45:cc:89:57:08:b0:43:de:17:
                    c9:4f:93:5d:21:2a:9e:f3:1b:ba:d2:cb:6a:dc:f2:
                    b2:f1:67:15:79:47:e7:a2:ce:a8:d1:8d:d3:10:02:
                    4d:71:52:0f:f0:09:ad:be:2c:96:49:a4:3d:20:fe:
                    b7:62:43:0e:a2:37:fa:84:33:be:87:5e:c4:87:30:
                    a2:f9:7e:6f:00:e2:cb:c6:ff:ea:94:94:68:de:09:
                    3e:77:85:2f:16:ad:7f:c8:4a:75:94:1e:ac:36:8d:
                    c8:e7:59:3a:82:bf:ba:e4:2c:bc:bf:b7:fe:0c:6c:
                    9b:c4:20:17:f8:e9:8d:96:b2:1d:0f:9c:fc:8d:35:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CD:B7:61:60:4B:AD:B6:2A:E7:F7:CF:DB:96:EE:8B:53:99:CB:8E
            X509v3 Authority Key Identifier:
                keyid:AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/9d6f6e5f3a9a8f2954fb62b345d938cc644ca5f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:0d:38:5f:7b:81:91:44:e0:e7:a5:ea:4a:7d:f4:71:a2:
         10:a3:95:08:c9:1c:2e:1a:69:f6:03:3c:7b:1e:33:c2:49:64:
         37:71:15:5d:28:3d:1c:0c:89:b7:06:03:a2:52:5d:2c:8d:31:
         a1:dd:20:a8:aa:ec:aa:fd:35:89:58:3d:1b:e5:99:d3:cf:97:
         1c:50:d0:93:81:c4:d8:89:3b:dc:43:bd:62:77:ef:ec:fd:75:
         70:b8:65:4a:c1:f7:d6:c6:06:25:20:dd:9e:8c:08:95:c5:8f:
         6e:52:dd:c9:76:62:df:c8:1c:32:31:f2:c7:bf:37:7f:4c:1a:
         30:32:97:87:e7:7b:15:bd:d5:59:fd:4b:a0:97:a5:05:bd:68:
         96:23:51:54:56:d7:b5:72:20:4b:34:53:72:ba:d2:b3:d9:79:
         23:69:b2:f7:cf:56:d0:b9:0e:ff:a6:53:ec:37:d2:e6:79:d5:
         ed:12:de:3d:71:21:d6:e2:48:42:3f:e7:45:01:84:9f:f3:a7:
         e7:c3:a6:5f:42:79:10:49:23:aa:d3:e2:bf:65:8b:7d:a7:58:
         40:39:81:14:13:a8:ff:70:82:2e:eb:53:b1:51:14:3c:51:c6:
         73:79:24:cf:91:08:aa:b2:22:3e:0c:e7:45:cf:f3:4d:fe:95:
         4c:51:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org