Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/310ab2e11bf6ae050c8f7022c5a7936bbce3a230.roa
File:                     310ab2e11bf6ae050c8f7022c5a7936bbce3a230.roa (raw, json)
Hash identifier:          +Hk/tYotRX36gpnojVZAhbDqgmT0/q66PDpRQi6KrUA=
Subject key identifier:   99:DE:0A:35:BD:A7:FA:A1:62:77:B7:15:2F:79:09:EE:88:4B:E0:2B
Certificate issuer:       /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial:       2197DF
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/310ab2e11bf6ae050c8f7022c5a7936bbce3a230.roa
Signing time:             Mon 24 Jul 2023 14:46:59 +0000
ROA not before:           Sun 23 Jul 2023 14:46:58 +0000
ROA not after:            Thu 24 Jul 2025 14:46:58 +0000
asID:                     64139
IP address blocks:        138.0.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201567 (0x2197df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
        Validity
            Not Before: Jul 23 14:46:58 2023 GMT
            Not After : Jul 24 14:46:58 2025 GMT
        Subject: CN=310ab2e11bf6ae050c8f7022c5a7936bbce3a230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:4e:bc:a6:39:a6:3c:ca:96:4f:fc:70:0b:
                    c5:fa:60:53:f5:ca:ed:9f:c1:f6:ed:e2:dc:ea:57:
                    20:ae:7b:c9:74:9b:bf:61:46:3d:52:f9:53:e3:a5:
                    4d:2e:a2:a3:af:06:a1:27:39:91:d5:45:82:bf:38:
                    98:7c:3f:3a:ed:db:98:a3:22:d7:2a:ef:90:e9:0a:
                    f5:6c:40:79:58:c9:8f:11:f1:03:23:15:87:24:06:
                    f0:f3:2f:01:7d:92:b0:28:a3:d8:80:df:c2:6f:c2:
                    76:e2:b2:53:4d:25:4b:8d:2e:12:26:39:15:d3:b6:
                    e2:08:14:7a:98:0e:8b:b6:c3:93:c4:c3:7d:9a:dd:
                    b2:d0:90:2c:de:76:43:df:0d:4e:b4:57:9b:3e:e1:
                    3d:4b:5b:47:71:f9:44:4e:0b:bf:30:3f:b0:9f:7e:
                    a6:26:27:14:94:d2:17:35:c1:6b:a9:3c:8e:84:89:
                    00:ca:fc:fb:33:1a:8b:c7:96:a3:0f:49:51:55:cb:
                    4c:da:ba:0f:26:b7:80:96:3b:00:9d:e7:52:09:8b:
                    7c:2b:77:6b:56:73:aa:61:fa:04:0f:08:0e:3d:a6:
                    91:0d:f8:8d:40:7b:50:af:6e:9c:c2:22:72:3e:50:
                    e7:2f:cb:e9:48:a7:d0:16:7c:52:65:00:c1:f3:c8:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DE:0A:35:BD:A7:FA:A1:62:77:B7:15:2F:79:09:EE:88:4B:E0:2B
            X509v3 Authority Key Identifier:
                keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/310ab2e11bf6ae050c8f7022c5a7936bbce3a230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:21:0d:9b:a1:6a:7b:15:cb:fc:fa:c8:31:4b:99:ab:84:
         19:40:42:53:76:a1:bd:fa:97:5c:4f:db:95:a7:89:64:dc:05:
         07:d5:47:13:20:af:3d:00:48:ba:8a:7c:0c:3c:12:5c:91:64:
         60:57:e2:85:19:f9:19:16:da:96:14:fa:6f:ba:0a:b6:5d:e9:
         ae:22:67:f4:36:23:bf:fc:85:20:08:86:f7:30:bb:97:b0:0b:
         1d:91:62:f5:9d:a0:a0:8c:3b:ac:d5:cb:6f:54:79:9b:93:90:
         ca:0c:38:c7:a0:36:91:69:92:86:6d:39:02:8d:b2:9e:80:22:
         e2:86:5e:40:75:05:ec:7c:87:73:3e:74:b9:ec:27:6f:36:37:
         d3:b0:4f:80:99:1e:25:7c:cd:0d:bc:83:77:fb:c4:d3:af:b9:
         79:aa:f6:02:21:d9:e0:4a:1b:a7:4a:de:85:d9:9d:34:fd:85:
         81:35:8c:9e:7b:4e:12:14:ec:08:3a:64:d2:cb:5b:4e:f4:de:
         7d:fb:b1:7f:be:5b:5d:6a:70:26:ca:f0:eb:37:d2:1a:6c:7e:
         88:32:68:67:02:47:40:b6:ab:a5:1a:bc:85:77:7b:c4:25:f1:
         d9:f4:2c:8c:af:cb:f5:83:df:9e:2c:18:a1:aa:fe:f5:b2:7d:
         ab:6b:b5:24
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIZffMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAx
MjdlZmY1ZmI4OWQ0ZjA0ZjM2MmI4OWJlYjcyZDYxMjE0N2FmN2YwHhcNMjMwNzIz
MTQ0NjU4WhcNMjUwNzI0MTQ0NjU4WjAzMTEwLwYDVQQDEygzMTBhYjJlMTFiZjZh
ZTA1MGM4ZjcwMjJjNWE3OTM2YmJjZTNhMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoF9OvKY5pjzKlk/8cAvF+mBT9crtn8H27eLc6lcgrnvJdJu/
YUY9UvlT46VNLqKjrwahJzmR1UWCvziYfD867duYoyLXKu+Q6Qr1bEB5WMmPEfED
IxWHJAbw8y8BfZKwKKPYgN/Cb8J24rJTTSVLjS4SJjkV07biCBR6mA6LtsOTxMN9
mt2y0JAs3nZD3w1OtFebPuE9S1tHcflETgu/MD+wn36mJicUlNIXNcFrqTyOhIkA
yvz7MxqLx5ajD0lRVctM2roPJreAljsAnedSCYt8K3drVnOqYfoEDwgOPaaRDfiN
QHtQr26cwiJyPlDnL8vpSKfQFnxSZQDB88gp+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJneCjW9p/qhYne3FS95Ce6IS+ArMB8GA1UdIwQYMBaAFPY9QYUeFNUrFKiK
0YhGJhc+hOMrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDEyN2Vm
ZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOTM2NjQtZjNlNy00NjkyLWFlNDMtNDE4M2Qz
ZDY0MjlhLzMxMGFiMmUxMWJmNmFlMDUwYzhmNzAyMmM1YTc5MzZiYmNlM2EyMzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5MzY2NC1mM2U3LTQ2OTItYWU0My00MTgz
ZDNkNjQyOWEvMDEyN2VmZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIoAezANBgkqhkiG9w0BAQsFAAOCAQEAfD0hDZuhansVy/z6
yDFLmauEGUBCU3ahvfqXXE/blaeJZNwFB9VHEyCvPQBIuop8DDwSXJFkYFfihRn5
GRbalhT6b7oKtl3priJn9DYjv/yFIAiG9zC7l7ALHZFi9Z2goIw7rNXLb1R5m5OQ
ygw4x6A2kWmShm05Ao2ynoAi4oZeQHUF7HyHcz50uewnbzY307BPgJkeJXzNDbyD
d/vE06+5ear2AiHZ4Eobp0rehdmdNP2FgTWMnntOEhTsCDpk0stbTvTeffuxf75b
XWpwJsrw6zfSGmx+iDJoZwJHQLarpRq8hXd7xCXx2fQsjK/L9YPfniwYoar+9bJ9
q2u1JA==
-----END CERTIFICATE-----
Generated at Sun Mar 31 02:29:00 2024 by rpki-client on console-fra.rpki-client.org