Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/b3caeb8d16398a60adfdc1aaa62d756535299753.roa
File:                     b3caeb8d16398a60adfdc1aaa62d756535299753.roa (raw, json)
Hash identifier:          lZpxv+IaDZ78dAGf4TJuGnkeSP979pNITLx6Fj3NDRI=
Subject key identifier:   1E:D6:32:F6:79:65:3E:D3:8D:C6:3A:14:CC:AC:EF:C6:92:99:FC:DA
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       238665
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/b3caeb8d16398a60adfdc1aaa62d756535299753.roa
Signing time:             Fri 20 Oct 2023 04:31:50 +0000
ROA not before:           Fri 20 Oct 2023 04:31:50 +0000
ROA not after:            Mon 20 Oct 2025 04:31:50 +0000
asID:                     64116
IP address blocks:        138.185.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328165 (0x238665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Oct 20 04:31:50 2023 GMT
            Not After : Oct 20 04:31:50 2025 GMT
        Subject: CN=b3caeb8d16398a60adfdc1aaa62d756535299753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d7:8f:e9:ed:33:59:d9:e3:b7:8b:84:e3:a7:
                    cf:c6:97:0d:9a:c6:0a:15:ee:91:ce:ad:a8:33:29:
                    ec:83:c6:bb:e1:c4:67:21:50:4c:1b:f1:10:14:54:
                    00:a2:f8:f2:68:42:40:c1:d4:57:ae:59:d3:59:6a:
                    fd:b4:76:ec:f1:cd:f3:c7:4e:a1:aa:99:c9:67:3a:
                    5b:86:eb:f5:89:17:85:ec:4a:36:57:e3:81:24:1c:
                    3d:4e:52:5f:5e:f6:03:e5:47:96:89:6c:81:f9:76:
                    96:47:38:f7:ef:73:25:ee:23:1c:df:3c:8b:b4:eb:
                    a6:b0:79:7a:89:30:b7:7a:5d:c3:b8:4a:1b:cf:ac:
                    1c:3d:5d:51:40:46:c5:0d:6a:39:d0:50:74:1d:3e:
                    62:fc:da:4f:ab:84:96:a4:3a:9f:ad:c4:7a:5a:b4:
                    2a:3d:d3:42:14:29:f8:9c:a9:6a:d5:2e:0d:6e:3e:
                    f8:8b:72:06:65:36:02:24:30:1e:77:ff:d2:30:48:
                    94:98:f8:72:61:a0:ad:a2:61:24:04:ec:5a:27:88:
                    ed:14:75:c9:58:1f:d3:f1:4d:41:8e:a8:d9:1b:c5:
                    85:55:87:52:80:71:5c:5e:19:1c:6c:44:10:12:26:
                    4a:2c:ed:28:43:1d:d3:2f:a2:70:58:3e:92:16:be:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D6:32:F6:79:65:3E:D3:8D:C6:3A:14:CC:AC:EF:C6:92:99:FC:DA
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/b3caeb8d16398a60adfdc1aaa62d756535299753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:8c:e2:3a:3c:6d:66:83:7c:5f:da:c3:8a:ba:aa:29:35:e2:
         b5:6c:4d:a5:52:ca:e0:b2:7b:44:80:3f:4f:b3:7e:b5:48:7a:
         55:63:22:3d:da:24:ab:65:0d:5a:c7:f8:ed:57:98:99:49:a3:
         62:cb:4f:89:47:e4:1a:00:20:dd:9e:6a:78:50:50:b7:68:29:
         5e:ba:d6:2b:dd:ca:83:8e:48:58:53:7a:9a:3c:4c:3e:85:2f:
         d0:63:85:b4:23:36:36:6e:9a:df:0c:75:ab:95:77:f4:ae:38:
         17:32:a2:4d:bd:f7:52:79:eb:d0:1d:a5:65:f0:44:74:a5:10:
         eb:a5:3f:95:c7:cc:98:f2:5d:45:9b:12:96:c5:73:f9:c2:4a:
         1e:f6:fa:24:aa:50:60:cd:57:d5:11:9d:5a:89:57:f8:47:a9:
         07:66:8c:d1:36:23:fd:24:11:1d:44:35:f4:45:b9:f3:4e:e9:
         3f:05:b1:fa:4b:f8:c9:13:93:98:7e:6e:05:6d:01:16:6d:c3:
         28:d6:63:a7:f1:ce:86:59:5f:0d:f7:4b:d5:d9:69:42:ef:f4:
         6e:0b:a9:64:53:ba:73:b9:49:78:7d:db:ce:2b:29:7f:58:5b:
         7d:ad:f5:9e:16:bd:34:bd:2d:dd:f5:d8:b8:98:e4:5c:86:be:
         f7:08:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org