Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/128464d7044ae2cba32b8ba2d21d8d4cd1d19713.roa
File:                     128464d7044ae2cba32b8ba2d21d8d4cd1d19713.roa (raw, json)
Hash identifier:          jWFf+AuIRA5pApHywzHmcZDDg9bTDjnVaN1U5xgfjwQ=
Subject key identifier:   56:FE:93:AA:E1:AD:2B:6C:5A:D9:33:ED:E9:53:65:9D:5C:6F:64:9D
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       137242
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/128464d7044ae2cba32b8ba2d21d8d4cd1d19713.roa
Signing time:             Wed 10 Nov 2021 13:05:32 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        138.117.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274434 (0x137242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=128464d7044ae2cba32b8ba2d21d8d4cd1d19713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:e7:8c:d4:2d:63:c7:15:c5:a2:5c:4b:df:
                    ad:41:a3:c3:b1:0a:3e:9d:c7:de:aa:d2:d7:de:3a:
                    4f:a0:fc:68:af:ad:16:e7:db:7c:93:65:29:d8:57:
                    ef:de:71:fb:68:e4:30:71:b9:12:3f:53:ed:5b:2d:
                    fd:fe:67:6f:6e:b8:81:af:56:af:b3:3e:d0:3f:19:
                    18:c6:c6:26:73:95:cc:b5:6f:f8:be:e6:cc:f1:23:
                    50:77:34:8c:0f:4e:52:c8:d5:a1:63:42:8f:f4:84:
                    95:3f:3d:a0:ce:2f:f3:58:cd:a8:65:e6:84:a0:ba:
                    75:a5:97:cb:53:c3:2c:23:4e:66:7c:37:a0:34:d4:
                    dc:18:af:99:b5:1f:fc:de:70:85:c0:d5:f6:7e:02:
                    89:ce:ba:61:e5:41:3c:28:1a:44:a1:53:de:a2:72:
                    13:ee:8d:56:54:86:a6:d0:45:ef:41:ea:1e:8a:25:
                    53:c8:45:52:e4:06:40:57:e5:cb:9a:a6:a7:7a:a1:
                    9a:4f:f6:e2:80:b4:57:a9:ba:cd:f2:a6:54:9b:be:
                    8c:3d:bf:b0:2f:f1:9a:7e:37:bd:17:18:ee:6f:8e:
                    4e:07:46:f6:05:87:16:af:73:a2:c4:c2:85:47:7c:
                    ee:5c:90:68:27:d1:3b:53:fe:ad:97:a5:5b:87:44:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FE:93:AA:E1:AD:2B:6C:5A:D9:33:ED:E9:53:65:9D:5C:6F:64:9D
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/128464d7044ae2cba32b8ba2d21d8d4cd1d19713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:5a:f5:18:cc:1f:28:14:4b:0e:73:8b:3d:6a:50:4d:84:92:
         5d:48:f4:ea:d1:06:63:e0:36:94:d1:2f:63:a8:7f:09:6c:9c:
         c1:70:db:00:ff:a0:04:5a:2b:df:f6:90:60:a0:a7:a7:01:9b:
         28:84:e6:8a:cd:73:60:1d:66:f8:1c:0d:9f:ca:d4:36:07:27:
         15:7b:98:81:7e:d3:b9:82:65:26:76:aa:5d:69:a9:56:29:db:
         d1:87:03:eb:0b:55:1c:2a:56:d9:75:ec:32:e2:5a:68:6c:ab:
         9e:60:90:d5:d6:9a:c6:7b:e7:7f:7c:17:ef:eb:5b:83:86:05:
         1b:22:69:5c:3a:53:22:7d:09:0b:80:f2:09:20:f2:72:97:6f:
         90:7a:1b:78:eb:d6:04:50:81:4d:04:94:fc:ad:24:bd:09:c6:
         16:3e:7e:cf:17:3f:8c:99:04:3a:d9:f1:74:52:fb:73:d2:7e:
         ce:5b:1e:70:44:12:b7:88:6d:eb:a9:b5:89:26:2d:1f:82:3c:
         e8:f4:49:3a:ba:e4:87:d6:e9:40:27:68:08:35:36:3e:23:a4:
         f7:02:06:f3:5a:14:95:e9:1a:99:3b:94:7b:bc:96:7e:20:f7:
         02:9e:e5:38:08:7d:74:f7:51:8e:72:7a:a2:9a:e6:89:9e:59:
         3c:21:e0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org