Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/75203698d9a437aabb96f17b8fc60570b8285386.roa
File:                     75203698d9a437aabb96f17b8fc60570b8285386.roa (raw, json)
Hash identifier:          24f7zkY5lGZKaqsHx3fh5HomBpIBpeiATSIZiWUj6tE=
Subject key identifier:   A9:44:62:CB:9E:F6:97:67:EB:A0:35:9A:79:27:FC:2D:14:39:99:E5
Certificate issuer:       /CN=1493cbe50e45cae3fefc4b38bac904681585a59d
Certificate serial:       0D80B8
Authority key identifier: 21:A9:AE:D9:78:B9:68:A2:B2:86:33:C7:61:06:B8:0B:68:0D:34:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1493cbe50e45cae3fefc4b38bac904681585a59d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/75203698d9a437aabb96f17b8fc60570b8285386.roa
Signing time:             Wed 24 Mar 2021 14:28:37 +0000
ROA not before:           Wed 24 Mar 2021 14:28:37 +0000
ROA not after:            Tue 24 Mar 2026 14:28:37 +0000
asID:                     49835
IP address blocks:        138.255.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884920 (0xd80b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1493cbe50e45cae3fefc4b38bac904681585a59d
        Validity
            Not Before: Mar 24 14:28:37 2021 GMT
            Not After : Mar 24 14:28:37 2026 GMT
        Subject: CN=75203698d9a437aabb96f17b8fc60570b8285386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:ce:32:5d:66:01:6b:83:83:2c:93:c1:ef:
                    17:27:e1:d2:df:6c:59:cd:e9:4b:96:a4:e3:0c:c8:
                    68:42:61:05:f2:d0:9d:1d:15:b4:70:ef:c4:61:b3:
                    6c:9d:be:dc:85:7b:52:e6:f2:f7:e0:a5:2e:68:96:
                    d1:1d:4d:db:8c:0d:8d:dc:c6:36:05:9a:62:4e:7e:
                    d8:82:54:35:8a:ea:42:81:64:b5:e9:f5:6a:39:d3:
                    37:31:6c:f0:1a:92:bb:ec:35:c2:9e:d9:b6:eb:4f:
                    ae:64:52:48:ac:cb:1c:6b:b3:a3:68:fd:bf:28:52:
                    3c:3b:db:53:7a:38:8d:58:d2:f2:e2:ce:bc:4f:21:
                    1d:24:bc:c3:1a:a9:c7:69:fe:6a:ee:34:26:63:8c:
                    77:88:dd:be:33:7e:b9:ed:8f:74:1f:81:87:4d:48:
                    bd:1c:41:f3:2b:50:d4:2c:ab:97:0c:92:0d:fd:f8:
                    99:41:8e:86:d4:97:dd:dd:cc:6e:af:62:e9:93:f2:
                    f6:bf:02:e0:f7:4c:f5:5b:52:fc:f4:db:0f:d6:7b:
                    59:6d:8c:d7:cf:88:77:8a:e0:e7:3b:4d:1f:9f:bf:
                    e1:63:1b:74:6a:66:30:0c:2d:8c:8a:4c:c3:0b:4c:
                    62:a3:3f:5f:49:93:2a:13:22:08:fe:e9:37:3e:ba:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:62:CB:9E:F6:97:67:EB:A0:35:9A:79:27:FC:2D:14:39:99:E5
            X509v3 Authority Key Identifier:
                keyid:21:A9:AE:D9:78:B9:68:A2:B2:86:33:C7:61:06:B8:0B:68:0D:34:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1493cbe50e45cae3fefc4b38bac904681585a59d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/75203698d9a437aabb96f17b8fc60570b8285386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/1493cbe50e45cae3fefc4b38bac904681585a59d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:90:62:74:ac:da:7f:98:fa:c2:b0:f3:01:19:02:39:24:4a:
         c2:b7:b5:d6:3c:e8:b6:e1:65:52:d5:a4:a8:65:01:5c:8f:ef:
         91:8e:17:48:fc:af:20:a2:a6:f3:e0:c0:dc:c5:86:ce:29:4e:
         e1:40:d2:a1:60:c4:27:8d:9e:39:83:ae:f1:4f:03:0a:ef:83:
         40:c5:ca:78:0e:d1:74:ba:6c:37:84:5c:e6:f3:70:b9:d0:d6:
         8e:3d:da:6d:99:e7:2f:e4:0c:73:72:d8:99:36:6a:f8:71:cf:
         dd:a8:e2:3d:8b:b7:5c:60:18:a4:a5:8e:99:30:12:49:d2:40:
         90:53:ff:e2:2a:2c:f7:d9:f3:cf:25:0b:b7:98:a3:d6:ec:97:
         1c:a6:8c:44:37:ee:97:4b:21:ff:da:58:45:11:a1:ff:67:17:
         41:48:44:44:e1:53:fe:70:45:3f:a3:b4:86:6a:bd:31:72:ed:
         c6:6a:47:a2:ee:73:41:ac:87:4d:63:b3:bd:93:9e:eb:a7:9e:
         bd:b8:31:c7:89:e0:c1:12:ee:3f:af:ab:00:89:d6:22:89:4e:
         7f:19:e3:36:2d:f2:ff:5f:61:d2:2e:fe:eb:3a:63:83:8a:46:
         9e:88:75:da:11:5b:e2:91:e3:ae:70:ac:fa:92:6d:9b:79:c6:
         2c:7a:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org