Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/326673d6fab2570691dcad26efbec4c926f93e5e.roa
File:                     326673d6fab2570691dcad26efbec4c926f93e5e.roa (raw, json)
Hash identifier:          CPv6HLbVwA8RWxd5llNOZ61VQ999LSImTIH1kNEU0FE=
Subject key identifier:   E9:BB:A5:3B:8A:F8:29:E7:AF:15:FF:16:0C:C4:0D:32:78:C9:78:E7
Certificate issuer:       /CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab
Certificate serial:       0E4B54
Authority key identifier: 03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/326673d6fab2570691dcad26efbec4c926f93e5e.roa
Signing time:             Sun 16 May 2021 21:57:54 +0000
ROA not before:           Sun 16 May 2021 03:00:00 +0000
ROA not after:            Wed 22 Apr 2026 03:00:00 +0000
asID:                     61497
IP address blocks:        138.99.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936788 (0xe4b54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab
        Validity
            Not Before: May 16 03:00:00 2021 GMT
            Not After : Apr 22 03:00:00 2026 GMT
        Subject: CN=326673d6fab2570691dcad26efbec4c926f93e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:ef:1e:25:91:44:3a:89:bc:b0:03:13:38:
                    1f:2e:0d:cf:7d:a7:3c:2e:63:e3:4b:04:a7:0a:6d:
                    15:3f:66:3b:aa:ee:20:d2:eb:1f:cf:b6:63:bb:a5:
                    98:26:59:a5:30:d9:d0:28:81:91:7a:1a:11:01:d6:
                    33:b3:11:3a:bf:65:c4:68:30:b3:6f:90:4c:2f:1f:
                    cc:8d:b4:64:cf:e2:4b:32:a0:0e:e1:03:17:50:94:
                    34:4b:10:d3:aa:56:07:aa:e8:59:9c:6c:01:bd:7e:
                    7b:9c:a3:e4:79:a7:33:b7:9e:88:71:02:a8:59:77:
                    43:dd:48:c5:bc:1b:cc:c8:9b:a6:5b:f9:d6:98:82:
                    30:f3:3d:d0:65:fc:0a:6a:2b:fd:0f:32:12:2a:25:
                    c7:4c:5b:4a:28:a0:a6:ad:0f:5c:c4:d3:ea:bb:56:
                    63:f3:f1:3c:d8:25:42:31:42:ad:9a:2d:8d:cb:7c:
                    50:af:87:3c:dc:d6:f9:b7:19:67:6b:23:64:98:60:
                    10:14:8c:8a:94:9c:5c:bc:a6:b1:93:72:70:8e:b9:
                    a2:1d:02:d5:c3:ce:6d:2c:41:6b:19:ec:20:37:ac:
                    b8:5b:77:87:55:57:38:8d:e3:3d:11:ef:1c:1b:2b:
                    5a:eb:d1:ef:4d:2d:2d:fb:b3:06:7c:a6:22:e8:5b:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BB:A5:3B:8A:F8:29:E7:AF:15:FF:16:0C:C4:0D:32:78:C9:78:E7
            X509v3 Authority Key Identifier:
                keyid:03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/326673d6fab2570691dcad26efbec4c926f93e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:1b:cf:ce:ee:79:ae:00:af:1b:6d:ea:24:ee:9c:b4:62:
         96:85:ab:7c:0b:81:d2:6f:1e:57:27:79:16:36:26:cd:51:33:
         94:b4:4b:8a:77:b9:d5:19:fd:f0:03:62:40:8a:63:ed:ad:9d:
         64:af:c0:c2:77:24:b8:be:da:95:d5:95:0e:d2:b0:e4:24:25:
         86:81:e4:3d:2e:ef:e4:4e:4c:d3:07:81:2a:24:9f:fb:c7:47:
         1b:2c:b2:ee:a6:12:d4:ea:c0:64:63:82:99:fa:00:16:02:c8:
         4a:8f:9f:bd:ce:30:f0:e5:0a:a4:50:f6:7e:08:77:52:bb:c1:
         3b:bf:be:72:22:63:e1:d6:c5:85:4a:41:2b:91:19:8f:28:fb:
         e6:35:f5:af:9c:ef:4a:c4:ae:1b:c5:09:d8:06:02:eb:a4:5c:
         ac:07:17:b0:fa:7e:8b:b5:d2:62:16:44:ce:59:0e:1a:11:72:
         af:b2:97:93:8e:e2:33:87:73:7f:98:ec:aa:c8:ee:d1:b4:3b:
         9f:de:76:09:35:f8:b6:df:2a:de:db:65:e8:9e:c7:63:8c:2f:
         a9:fa:fa:dc:cb:44:96:60:fd:13:73:e4:10:50:6d:2a:74:57:
         c4:00:65:ac:66:58:09:a8:df:52:45:7a:e7:2f:59:34:5f:af:
         75:8a:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org