Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/9de5626515795e38286bad791fa46f1a9bb5d885.roa
File:                     9de5626515795e38286bad791fa46f1a9bb5d885.roa (raw, json)
Hash identifier:          AC+k3Z1EAqnY2RBTNEm0Z7cuHG87UV+2JwzW8NqfHOc=
Subject key identifier:   44:4D:5C:FB:CC:21:34:38:EB:D4:74:C0:F3:14:4F:2C:1B:6D:9B:47
Certificate issuer:       /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial:       263DF8
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/9de5626515795e38286bad791fa46f1a9bb5d885.roa
Signing time:             Thu 14 Dec 2023 17:46:45 +0000
ROA not before:           Thu 14 Dec 2023 17:46:43 +0000
ROA not after:            Sun 14 Dec 2025 17:46:43 +0000
asID:                     61468
IP address blocks:        192.188.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506232 (0x263df8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138405134343f63286b605fe9165839fd04a4252
        Validity
            Not Before: Dec 14 17:46:43 2023 GMT
            Not After : Dec 14 17:46:43 2025 GMT
        Subject: CN=9de5626515795e38286bad791fa46f1a9bb5d885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:75:de:fa:bb:b2:27:fd:27:79:f5:30:8f:
                    67:ff:1a:6f:05:00:d7:6a:32:34:a3:a9:bc:c3:9a:
                    01:7f:1b:4e:0e:42:13:14:59:e1:98:cb:2c:b9:7c:
                    fd:94:54:aa:68:61:90:da:da:e1:90:17:9c:45:4d:
                    ed:be:18:bf:13:9b:eb:42:3b:bf:23:7a:87:36:1b:
                    42:b3:68:23:9f:2f:f9:bf:b4:a4:4e:57:e1:02:4a:
                    c0:f1:55:34:9c:62:73:04:92:3b:94:2d:ed:ab:26:
                    ac:bf:53:c2:77:8f:9e:cf:77:cb:7f:cf:d4:40:73:
                    fd:4c:9f:90:de:5e:22:e0:0a:be:66:93:c9:ec:ea:
                    61:38:08:86:e1:45:4f:20:c9:0e:c8:74:49:94:7d:
                    87:5d:43:2d:36:d8:f0:f7:e2:72:42:d6:c7:a2:05:
                    08:50:05:e0:ca:95:db:01:d6:8e:36:0d:29:6a:b7:
                    53:9c:83:ef:55:7f:1c:2f:58:5a:5f:95:e4:3d:17:
                    bf:96:89:63:d4:e2:33:31:91:ce:bf:94:8f:ca:ca:
                    ca:ac:53:2a:22:c3:42:84:c8:dc:76:fd:81:af:04:
                    7a:f3:d5:7f:09:66:bc:f0:9f:32:74:cb:76:63:f6:
                    d3:c5:2c:73:a3:dd:cd:b0:54:02:e3:7c:1e:b8:55:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:5C:FB:CC:21:34:38:EB:D4:74:C0:F3:14:4F:2C:1B:6D:9B:47
            X509v3 Authority Key Identifier:
                keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/9de5626515795e38286bad791fa46f1a9bb5d885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:23:ff:7d:75:be:e1:14:25:c1:4d:f3:e7:8b:1e:25:fb:16:
         05:e1:f7:2b:da:35:2c:58:a8:c6:33:db:f0:be:ee:52:af:3c:
         9c:0a:47:89:cb:3f:b0:a6:0e:3e:fb:06:07:4c:50:b9:d4:ab:
         4e:ae:8b:a0:3b:44:c5:0f:80:28:8f:7f:b2:2f:de:76:e1:f8:
         15:13:d8:12:48:f7:5b:8e:9d:34:73:14:34:d8:25:74:79:11:
         0c:0a:c9:f3:dc:8a:63:db:d0:88:85:9d:24:a3:b1:c5:5f:ed:
         7c:4d:67:55:ae:c9:23:da:b7:04:9a:bf:ab:4c:0c:b4:61:45:
         d8:fd:0f:7e:c4:ac:05:d4:9e:32:a5:17:16:af:1f:b1:64:43:
         c2:30:79:d5:e4:5d:f5:3d:fe:ba:2e:6b:07:8c:9d:5a:df:43:
         24:84:c3:5a:38:0b:79:55:26:ac:4d:3b:84:7f:ef:07:cf:2c:
         9d:8c:b2:20:40:5b:33:6f:ce:04:f9:c5:45:e2:b7:22:77:3a:
         a9:24:38:9c:8f:2c:09:f5:df:74:af:cf:6e:a5:38:a0:4e:3e:
         28:e6:9f:8b:df:0d:86:7e:39:27:08:90:64:e6:38:17:7c:4e:
         66:8d:f3:83:df:0e:a8:88:93:a4:9c:6f:ae:b8:7d:37:e1:fa:
         18:54:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org