Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/75a6d40d1a5ae23854284d6ea8ce12b440fa80e3.roa
File:                     75a6d40d1a5ae23854284d6ea8ce12b440fa80e3.roa (raw, json)
Hash identifier:          eIv69pe65ivx/ZBQp6+DkORJe/yo6a/s0Lmy4f/tnQw=
Subject key identifier:   CC:1C:EC:B3:40:0F:D6:E1:5C:D2:29:25:69:D2:5F:DF:CB:37:56:43
Certificate issuer:       /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial:       1DDC3C
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/75a6d40d1a5ae23854284d6ea8ce12b440fa80e3.roa
Signing time:             Wed 08 Mar 2023 14:04:41 +0000
ROA not before:           Tue 07 Mar 2023 14:04:17 +0000
ROA not after:            Sat 08 Mar 2025 14:04:17 +0000
asID:                     272957
IP address blocks:        138.0.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1956924 (0x1ddc3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
        Validity
            Not Before: Mar  7 14:04:17 2023 GMT
            Not After : Mar  8 14:04:17 2025 GMT
        Subject: CN=75a6d40d1a5ae23854284d6ea8ce12b440fa80e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:37:9c:ea:a6:b7:b5:d0:5e:77:9e:2f:f4:18:
                    6c:d4:3c:b2:36:ab:c8:15:36:87:de:68:e5:5c:d0:
                    60:8b:53:15:dc:87:22:3a:64:8e:ed:8a:87:7e:99:
                    d8:18:4d:ac:f8:e5:45:4b:21:fc:aa:4a:7c:ef:8c:
                    5c:72:fb:1d:96:6d:9c:d4:13:10:f7:d0:fb:af:4d:
                    a7:0a:83:5d:cf:e8:bb:f3:12:a6:5a:63:48:71:47:
                    8f:31:57:90:93:47:5d:eb:a5:09:a0:21:4a:4b:05:
                    86:89:f8:d3:fb:f4:04:de:77:fb:3e:83:8b:c5:a4:
                    8c:c3:f7:1d:da:33:2a:25:d9:d9:0d:50:a0:88:92:
                    d8:d1:25:fe:e6:56:11:e5:a1:1a:83:36:29:7c:5c:
                    f1:88:4d:d4:77:8b:93:84:cc:c9:55:e1:60:94:0d:
                    e7:fa:c9:66:c5:11:65:d2:bf:4b:34:4c:c6:dc:01:
                    b1:9b:7a:07:8a:39:97:68:04:06:94:3e:1b:55:af:
                    8c:c8:27:dd:f9:e7:20:22:a4:85:c9:81:32:8a:68:
                    9d:ab:6b:52:8a:3a:15:8a:f5:19:2a:d7:52:a4:5b:
                    ff:35:5b:3d:1c:43:31:85:79:95:13:84:30:bb:b4:
                    7b:81:22:6e:10:44:46:4b:cf:a2:af:41:d9:df:66:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1C:EC:B3:40:0F:D6:E1:5C:D2:29:25:69:D2:5F:DF:CB:37:56:43
            X509v3 Authority Key Identifier:
                keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/75a6d40d1a5ae23854284d6ea8ce12b440fa80e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:75:d4:06:83:ca:26:b4:1d:fb:38:c9:c8:13:0a:5b:1b:72:
         cd:87:c4:1f:52:d5:51:ab:6c:89:2e:68:67:ca:38:c9:71:3c:
         4a:fe:61:0a:13:a8:b1:1c:4f:8d:bf:98:8c:88:d0:f3:c6:2d:
         c7:e2:a6:86:26:b5:3b:ad:b0:02:7e:c1:a3:7d:55:24:ca:8d:
         53:4b:85:c0:1c:24:73:06:08:c0:a7:99:2b:31:8f:e3:0f:1d:
         06:4f:dc:15:3e:77:30:20:8c:a6:ae:ef:35:96:23:ce:94:59:
         ab:36:d1:d8:b8:be:c1:a7:6d:8e:a9:ce:36:8c:8d:e7:70:fc:
         e3:2d:17:f4:ff:81:76:e1:53:35:da:e9:73:cd:8d:b6:9c:b4:
         df:3f:64:ea:71:ed:d7:4a:c6:a2:aa:e5:c7:a9:86:34:6c:19:
         a2:84:49:56:17:ac:bb:70:7a:82:5a:d0:7b:1a:27:31:46:aa:
         7e:1a:ed:04:62:81:cd:a6:d3:1c:74:d8:55:d7:bf:67:67:63:
         26:47:da:0f:a8:0a:c2:63:97:cc:69:da:07:55:14:a1:7b:6f:
         4b:ea:e8:8c:c1:bc:8e:5a:97:cf:c1:e7:37:28:8c:ec:26:a9:
         da:f0:3e:09:c4:3f:9d:24:34:21:bc:67:6d:fb:b9:65:1d:f8:
         f4:54:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org