Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68870f73-41d7-4114-b21d-e74d286b934d/98c2e0d3aa19858d49995e4f2db698736872f7b4.roa
File:                     98c2e0d3aa19858d49995e4f2db698736872f7b4.roa (raw, json)
Hash identifier:          Mmapodf3fhOcyIw2zs3oX+B3Ms5Q457kkFzBZTaq6ms=
Subject key identifier:   E1:8A:60:EA:29:20:C3:AF:53:3E:50:B4:E5:EB:CF:AE:DA:9D:DD:F7
Certificate issuer:       /CN=19d34285ba628172d8175ee1905c3b599e21efd6
Certificate serial:       11BDB9
Authority key identifier: E0:3B:40:48:08:BC:04:2F:ED:50:56:A9:62:2F:E4:75:3E:28:8F:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19d34285ba628172d8175ee1905c3b599e21efd6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68870f73-41d7-4114-b21d-e74d286b934d/98c2e0d3aa19858d49995e4f2db698736872f7b4.roa
Signing time:             Thu 04 Apr 2024 08:30:07 +0000
ROA not before:           Thu 04 Apr 2024 08:30:07 +0000
ROA not after:            Sat 04 Apr 2026 08:30:07 +0000
asID:                     6507
IP address blocks:        138.0.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162681 (0x11bdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d34285ba628172d8175ee1905c3b599e21efd6
        Validity
            Not Before: Apr  4 08:30:07 2024 GMT
            Not After : Apr  4 08:30:07 2026 GMT
        Subject: CN=98c2e0d3aa19858d49995e4f2db698736872f7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dc:94:71:4f:18:d0:71:11:75:e9:eb:e3:90:
                    4d:f9:8c:19:a6:1e:69:7e:01:ee:d8:5f:6c:67:b1:
                    ef:34:b1:31:63:b8:d6:43:2d:71:bb:8d:4e:1c:60:
                    8e:69:dc:b8:ee:09:7c:70:b8:46:fa:cf:29:f2:95:
                    f6:70:90:b1:27:d4:31:f7:de:f0:5d:d6:c4:b0:cb:
                    d4:2a:9e:54:94:eb:d1:cc:26:64:ce:5e:5a:00:a0:
                    11:c5:a4:d1:38:6f:39:65:78:f4:dc:6f:79:06:8c:
                    dd:9f:6f:6e:a6:dd:4e:8a:ce:d2:61:fb:4b:9e:7c:
                    70:f6:f1:39:52:bc:ec:22:be:e4:ba:a8:7a:cf:90:
                    8d:ad:3c:6b:20:6b:37:b4:35:63:a2:61:03:61:e5:
                    d6:8c:19:da:45:1e:9c:99:0d:d9:43:a6:1c:a3:bc:
                    9e:e1:b6:1d:c0:6d:d4:d6:bc:dd:d1:4c:a1:41:0c:
                    84:30:5d:07:2f:32:96:dd:d2:83:76:51:03:66:ae:
                    90:6b:e3:ec:9c:84:1a:b4:29:36:f9:30:8c:ce:25:
                    e2:55:90:db:0a:0b:9c:9a:02:c1:33:36:6c:93:a2:
                    2b:8b:e0:87:58:0b:d6:79:2e:0d:0d:e2:d4:77:18:
                    ee:5f:ec:08:ba:99:65:df:66:cc:38:ee:5a:3a:7b:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8A:60:EA:29:20:C3:AF:53:3E:50:B4:E5:EB:CF:AE:DA:9D:DD:F7
            X509v3 Authority Key Identifier:
                keyid:E0:3B:40:48:08:BC:04:2F:ED:50:56:A9:62:2F:E4:75:3E:28:8F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19d34285ba628172d8175ee1905c3b599e21efd6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68870f73-41d7-4114-b21d-e74d286b934d/98c2e0d3aa19858d49995e4f2db698736872f7b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68870f73-41d7-4114-b21d-e74d286b934d/19d34285ba628172d8175ee1905c3b599e21efd6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:14:65:e3:c2:3b:63:a1:eb:d1:a1:1a:c0:d9:58:2e:77:
         f7:d2:0c:e3:76:ae:76:19:17:b0:52:34:82:5e:b1:9b:09:06:
         71:c6:f7:75:f8:72:8e:cb:54:e6:b7:e0:72:f1:bb:16:78:9b:
         27:57:e9:d7:c7:72:0a:41:bd:8d:78:2a:7b:5c:21:c3:47:1a:
         93:a6:0f:e2:e7:f7:7b:73:c0:2b:40:83:b0:76:74:45:4d:9d:
         dd:c4:10:5e:eb:a9:42:19:f2:8b:16:d0:d6:53:1a:3d:05:b5:
         ef:ff:83:57:ac:03:7b:8b:95:a5:45:05:97:f6:d2:b3:67:e3:
         b6:0e:1c:d0:5e:b4:c9:57:1a:1f:cc:23:3d:3b:25:b2:21:22:
         06:d4:79:dc:8f:22:79:58:82:79:4d:4b:89:c3:da:9e:33:4a:
         41:98:1a:1b:44:7d:e1:fd:9f:cd:ca:76:1f:11:27:28:cd:9b:
         04:5c:89:96:16:7c:34:ce:04:da:12:36:57:35:59:33:fa:1a:
         86:f2:74:37:8b:0d:1e:34:2d:3f:c7:5f:d4:9d:ec:ed:5b:65:
         a1:e1:92:3d:d8:d9:8d:5b:07:10:42:e2:b0:69:10:7c:00:a1:
         51:87:7d:99:c5:f6:61:e1:e4:53:ce:c7:f0:d0:8e:a7:68:bf:
         cf:83:8f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org