Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/c20bb4080841a90dd653977c14c734bcce09caf6.roa
File:                     c20bb4080841a90dd653977c14c734bcce09caf6.roa (raw, json)
Hash identifier:          Gi69Ddag+gvkLEJZcVzlAU6OcEl6WFdfTbQQsrmYYWs=
Subject key identifier:   CD:CF:B8:4F:07:27:DA:8C:13:61:52:FF:01:76:64:C5:D9:CF:75:34
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       107D18
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/c20bb4080841a90dd653977c14c734bcce09caf6.roa
Signing time:             Thu 23 Sep 2021 15:21:39 +0000
ROA not before:           Thu 23 Sep 2021 03:00:00 +0000
ROA not after:            Sat 23 Sep 2023 03:00:00 +0000
asID:                     399382
IP address blocks:        138.185.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080600 (0x107d18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Sep 23 03:00:00 2021 GMT
            Not After : Sep 23 03:00:00 2023 GMT
        Subject: CN=c20bb4080841a90dd653977c14c734bcce09caf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:54:00:44:27:32:ff:e3:be:31:1d:63:63:
                    d2:fa:3c:58:96:ec:bb:6f:da:02:34:5c:7e:52:8b:
                    ce:f2:ce:68:2f:c1:f8:2d:8e:c3:b1:2b:43:67:83:
                    dc:94:c9:2e:c2:00:5f:ba:6d:5d:8d:02:9a:82:c4:
                    67:70:8c:62:27:09:d0:f9:61:23:d9:50:cb:d1:22:
                    a8:87:c0:e5:67:aa:3d:27:94:97:c4:07:80:e5:fb:
                    83:2b:52:c1:80:fa:52:a1:85:a9:6f:03:d9:74:85:
                    1e:52:ea:fc:36:73:06:8b:38:0d:b0:c7:fd:32:87:
                    a9:97:f4:1a:38:63:e2:65:66:25:46:4d:89:fc:2f:
                    d2:74:3b:7c:e8:c6:8f:b8:15:90:8f:b1:46:1c:80:
                    e1:b6:6c:9d:6b:9b:e8:c2:be:3a:4c:8d:e2:f1:28:
                    65:48:91:13:9c:dc:31:6a:af:bf:b1:a1:ca:8a:7c:
                    31:92:80:e7:e2:18:d8:d3:d1:61:81:0d:d6:10:55:
                    e4:98:ce:6a:89:d5:1e:c7:b0:eb:88:d8:b4:d7:a8:
                    34:53:d9:a9:59:49:f5:34:e6:47:8e:18:5f:5a:11:
                    b2:21:a2:65:60:6d:c2:95:30:e9:db:93:f7:f0:c6:
                    b4:13:84:03:4d:30:a8:5c:4a:54:90:17:d7:a2:d5:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:B8:4F:07:27:DA:8C:13:61:52:FF:01:76:64:C5:D9:CF:75:34
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/c20bb4080841a90dd653977c14c734bcce09caf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:83:4e:e2:b9:a5:51:b5:c1:a8:c8:b0:57:ed:32:79:ef:
         86:88:72:fd:06:e6:be:72:b4:31:59:03:fe:9a:44:41:d2:20:
         ad:13:ba:3e:93:d6:7e:5b:0d:db:95:1c:81:21:e5:ec:64:ac:
         c2:00:c6:85:9f:62:68:c1:09:b9:0c:2c:c9:bc:77:74:17:44:
         9a:bd:d0:b9:07:59:a0:08:ab:11:49:2f:bb:01:ce:51:31:d1:
         60:f6:97:48:ec:8a:88:da:5a:00:78:50:0b:cf:a4:9c:8d:e9:
         e4:6d:e7:74:8c:83:68:3a:3d:16:ed:91:f7:7d:62:6d:b9:08:
         e4:2b:43:65:04:2a:0c:f8:d7:dc:3c:d7:e9:32:53:01:23:c9:
         9f:e2:a6:f4:61:46:8e:36:3e:0b:70:bc:0e:07:38:77:fb:aa:
         47:ea:b6:72:c7:3d:19:93:cb:bc:9c:0f:af:a4:f5:3e:a2:e0:
         c5:e5:c8:f5:4d:d6:93:5b:99:84:f2:9a:dc:b0:a6:04:96:5d:
         2a:74:31:26:46:d4:a7:4f:9d:93:09:a3:b0:3e:15:bf:9c:53:
         61:42:3c:15:38:56:9a:71:ef:37:bc:ca:06:65:40:8b:db:85:
         ec:38:f4:6b:75:5e:47:4f:66:b0:86:25:ac:c3:c0:a8:a2:ea:
         51:1f:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org