Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/a449f7d5ffb88123eae28c1ac6243ce15532a8ec.roa
File:                     a449f7d5ffb88123eae28c1ac6243ce15532a8ec.roa (raw, json)
Hash identifier:          d/arwbnPln6PD+0mjU+Xyxoj2REy+RqMxxyDKelgKas=
Subject key identifier:   81:33:75:52:47:65:8C:EE:1B:D5:2B:F7:47:A6:4A:40:24:03:F4:92
Certificate issuer:       /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial:       219188
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/a449f7d5ffb88123eae28c1ac6243ce15532a8ec.roa
Signing time:             Mon 24 Jul 2023 14:44:37 +0000
ROA not before:           Sun 23 Jul 2023 14:44:36 +0000
ROA not after:            Thu 24 Jul 2025 14:44:36 +0000
asID:                     272957
IP address blocks:        138.0.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2199944 (0x219188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
        Validity
            Not Before: Jul 23 14:44:36 2023 GMT
            Not After : Jul 24 14:44:36 2025 GMT
        Subject: CN=a449f7d5ffb88123eae28c1ac6243ce15532a8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:32:c8:41:2e:57:d9:22:87:7f:e2:db:32:
                    68:27:ae:d2:8c:78:a4:7f:9f:0f:a3:b8:0f:36:21:
                    46:d0:fd:87:28:58:c3:77:ee:e0:d9:03:41:1e:4f:
                    c8:d0:09:9a:43:59:21:c3:99:58:14:3a:c8:94:37:
                    b6:91:47:47:14:72:1d:dc:d5:b0:ab:5a:93:66:e4:
                    2b:94:87:ad:7e:9f:ae:41:20:55:bf:09:06:a4:d5:
                    da:36:3a:b3:45:30:d5:78:8a:67:bd:a4:a6:8c:28:
                    8b:b7:6f:31:7e:90:68:69:d3:79:37:44:fb:a4:14:
                    34:79:36:1b:50:d2:f4:0e:c6:f0:de:0b:a0:16:3a:
                    06:1c:60:76:9b:0d:4b:f3:6f:0c:66:0d:87:73:d1:
                    cb:f5:33:87:8e:74:e9:80:df:15:2a:8c:63:58:99:
                    27:43:bb:da:ca:72:98:eb:be:d6:e7:7f:35:f9:b4:
                    a9:9a:88:22:0b:da:d5:1d:ee:e8:ca:2b:48:db:76:
                    70:1f:8c:08:70:01:f6:7b:ba:78:5a:e6:ac:0a:71:
                    f5:2a:8c:85:a2:c9:b1:08:70:6b:48:a6:13:26:e6:
                    ae:c4:91:fd:35:a9:85:a5:ac:41:e6:4d:64:1c:1d:
                    8f:d0:d7:cb:3b:88:b4:79:15:83:4a:ce:0c:90:c9:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:33:75:52:47:65:8C:EE:1B:D5:2B:F7:47:A6:4A:40:24:03:F4:92
            X509v3 Authority Key Identifier:
                keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/a449f7d5ffb88123eae28c1ac6243ce15532a8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:61:9f:13:20:3f:a0:40:6a:71:9e:bb:fd:69:de:ef:6c:4d:
         7a:ed:d6:11:d9:99:6b:cb:82:9a:f7:8d:6b:7d:12:48:3f:ec:
         cd:50:e6:92:ae:30:a5:98:63:82:da:2c:13:19:fc:e3:db:00:
         a5:06:ad:50:77:8e:5f:cc:56:15:77:10:af:79:54:20:67:66:
         8e:5e:c8:c1:35:6d:d6:35:68:b2:69:4a:7e:4c:b9:8b:5f:38:
         47:e9:80:2a:e4:a9:a5:89:d6:24:eb:c8:09:d9:50:b2:c9:14:
         1e:bc:6b:80:70:61:d3:c1:62:f6:15:be:99:0b:f6:5d:34:b5:
         64:f4:cd:ae:29:15:66:5c:42:46:bd:66:65:00:30:88:25:26:
         3f:22:26:55:7e:84:18:c7:8a:a0:6d:8d:32:5a:8b:32:e9:fa:
         0e:d4:0f:41:09:e6:b1:36:c4:db:fe:41:7c:84:5c:f5:db:bd:
         76:0c:93:eb:66:af:08:eb:b8:08:39:a9:c1:27:9c:13:6f:a3:
         b5:9d:6f:a1:03:0f:4d:48:ea:4a:f9:07:a6:57:40:fb:fe:51:
         81:9d:ac:80:f7:6e:db:16:28:9a:e8:8a:8f:28:65:bf:08:b6:
         ec:b5:1e:6f:e3:6a:06:94:a3:31:e3:58:c2:b9:72:ab:21:36:
         87:68:9b:36
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIZGIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAx
MjdlZmY1ZmI4OWQ0ZjA0ZjM2MmI4OWJlYjcyZDYxMjE0N2FmN2YwHhcNMjMwNzIz
MTQ0NDM2WhcNMjUwNzI0MTQ0NDM2WjAzMTEwLwYDVQQDEyhhNDQ5ZjdkNWZmYjg4
MTIzZWFlMjhjMWFjNjI0M2NlMTU1MzJhOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqIAyyEEuV9kih3/i2zJoJ67SjHikf58Po7gPNiFG0P2HKFjD
d+7g2QNBHk/I0AmaQ1khw5lYFDrIlDe2kUdHFHId3NWwq1qTZuQrlIetfp+uQSBV
vwkGpNXaNjqzRTDVeIpnvaSmjCiLt28xfpBoadN5N0T7pBQ0eTYbUNL0Dsbw3gug
FjoGHGB2mw1L828MZg2Hc9HL9TOHjnTpgN8VKoxjWJknQ7vaynKY677W5381+bSp
mogiC9rVHe7oyitI23ZwH4wIcAH2e7p4WuasCnH1KoyFosmxCHBrSKYTJuauxJH9
NamFpaxB5k1kHB2P0NfLO4i0eRWDSs4MkMnf5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIEzdVJHZYzuG9Ur90emSkAkA/SSMB8GA1UdIwQYMBaAFPY9QYUeFNUrFKiK
0YhGJhc+hOMrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDEyN2Vm
ZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOTM2NjQtZjNlNy00NjkyLWFlNDMtNDE4M2Qz
ZDY0MjlhL2E0NDlmN2Q1ZmZiODgxMjNlYWUyOGMxYWM2MjQzY2UxNTUzMmE4ZWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5MzY2NC1mM2U3LTQ2OTItYWU0My00MTgz
ZDNkNjQyOWEvMDEyN2VmZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIoAejANBgkqhkiG9w0BAQsFAAOCAQEAhmGfEyA/oEBqcZ67
/Wne72xNeu3WEdmZa8uCmveNa30SSD/szVDmkq4wpZhjgtosExn849sApQatUHeO
X8xWFXcQr3lUIGdmjl7IwTVt1jVosmlKfky5i184R+mAKuSppYnWJOvICdlQsskU
HrxrgHBh08Fi9hW+mQv2XTS1ZPTNrikVZlxCRr1mZQAwiCUmPyImVX6EGMeKoG2N
MlqLMun6DtQPQQnmsTbE2/5BfIRc9du9dgyT62avCOu4CDmpwSecE2+jtZ1voQMP
TUjqSvkHpldA+/5RgZ2sgPdu2xYomuiKjyhlvwi27LUeb+NqBpSjMeNYwrlyqyE2
h2ibNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org