Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/8598f4e672f715b6f031af5608a248607c27d031.roa
File:                     8598f4e672f715b6f031af5608a248607c27d031.roa (raw, json)
Hash identifier:          8BWC+BjBA5nrpGOb8HGDo0+CHUsWkS0N2vAk85MlRY8=
Subject key identifier:   24:3F:3A:09:DB:B5:C0:DC:F1:30:F8:AE:03:F3:21:DA:CA:58:23:3C
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       0F6DC3
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/8598f4e672f715b6f031af5608a248607c27d031.roa
Signing time:             Mon 09 Aug 2021 16:05:25 +0000
ROA not before:           Mon 09 Aug 2021 03:00:00 +0000
ROA not after:            Wed 09 Aug 2023 03:00:00 +0000
asID:                     269862
IP address blocks:        138.185.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011139 (0xf6dc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Aug  9 03:00:00 2021 GMT
            Not After : Aug  9 03:00:00 2023 GMT
        Subject: CN=8598f4e672f715b6f031af5608a248607c27d031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:ac:ca:2d:e4:21:a8:0a:6a:51:a1:84:d5:
                    ec:2f:f1:0c:eb:83:52:c2:b5:fa:e3:07:0e:cc:03:
                    16:89:8c:c4:d5:2f:4d:6e:0a:58:41:93:9b:af:4b:
                    ee:3f:5a:72:2b:38:3d:b5:ee:54:d3:18:0c:71:1f:
                    8e:de:57:a8:f3:ce:65:58:41:7c:ce:41:2d:84:17:
                    de:f1:ff:78:2f:c4:71:31:df:9f:63:6e:f3:8f:b4:
                    62:a4:13:c0:57:ce:80:85:bc:b6:33:ad:75:80:01:
                    9a:0c:c9:ed:0b:5e:8e:3f:9e:a6:ba:a9:38:66:0d:
                    c0:69:49:fb:9f:dd:0d:04:72:f4:09:96:7b:27:07:
                    38:56:a3:e8:2b:a0:a7:ee:7d:bd:30:34:dc:f2:dc:
                    be:fa:c7:7f:36:dd:48:66:65:af:20:d2:22:29:87:
                    2c:56:1d:22:98:a0:13:0e:e7:97:af:6a:d4:2c:25:
                    0c:40:e6:f3:9b:42:1f:ec:b0:a0:18:da:19:9a:0f:
                    1e:63:64:5b:1b:f2:10:df:e8:ad:3b:74:9d:77:56:
                    71:35:a6:ee:ba:a8:42:68:17:b2:00:71:3f:59:91:
                    e1:9a:ad:07:9a:7f:c9:71:24:e8:9a:52:ba:96:31:
                    0a:4f:5c:1a:15:97:04:b2:11:c0:6d:0f:ca:e1:8c:
                    54:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3F:3A:09:DB:B5:C0:DC:F1:30:F8:AE:03:F3:21:DA:CA:58:23:3C
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/8598f4e672f715b6f031af5608a248607c27d031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:0e:34:2e:fa:2a:1e:bf:c2:78:f8:84:f3:f0:67:14:04:
         6e:70:68:7f:56:7c:6b:3a:07:69:3e:1e:4d:c6:41:5f:a0:d0:
         81:a1:12:51:50:16:30:cc:5a:8f:90:6e:d8:9f:df:e0:37:cc:
         52:a7:2a:1a:40:2e:ae:76:df:70:16:7c:b1:9c:9e:fd:92:dc:
         f3:fb:d6:e9:5a:27:ee:30:cb:e0:0a:26:d2:a4:ae:6f:10:6e:
         06:81:3a:24:0a:bf:42:cc:cb:53:1b:c8:a9:fc:aa:a7:26:5c:
         0e:4d:55:a9:da:76:45:59:0f:f7:46:65:e2:51:e6:bc:91:ed:
         cc:16:c1:7b:1c:b1:53:be:2f:0f:a1:14:d4:bf:32:3f:05:30:
         e3:76:59:68:67:a8:84:84:ce:32:c8:73:fb:73:56:65:4f:b9:
         fc:12:d4:c3:27:57:8e:32:79:f8:3f:79:fa:00:d8:51:6a:49:
         a5:e3:8c:43:7e:d9:57:39:76:36:3f:a6:e6:ea:92:f0:f9:ef:
         92:17:7f:b6:22:0c:71:5c:09:39:5d:51:4e:be:13:70:25:9a:
         01:56:ee:ed:a4:3a:f2:fb:76:ea:0d:7a:de:9f:5b:2f:1f:b8:
         85:97:70:c2:fb:f8:f8:3b:2d:6d:40:35:b9:6f:73:e7:78:92:
         37:7f:c5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org