Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/8fbc71ad1c3b3d88a143b826fc6127d8cb730f84.roa
File:                     8fbc71ad1c3b3d88a143b826fc6127d8cb730f84.roa (raw, json)
Hash identifier:          MQdY8ik9Em/zgXyW5fYLDzYnYGIHuazbKjPBfr5h2SY=
Subject key identifier:   6C:F9:55:80:B9:A1:DA:64:71:C0:84:35:C1:8B:12:B0:E1:07:AD:6A
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       0BBBD0
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/8fbc71ad1c3b3d88a143b826fc6127d8cb730f84.roa
Signing time:             Wed 24 Mar 2021 14:34:05 +0000
ROA not before:           Wed 24 Mar 2021 14:34:05 +0000
ROA not after:            Tue 24 Mar 2026 14:34:05 +0000
asID:                     64116
IP address blocks:        138.99.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768976 (0xbbbd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Mar 24 14:34:05 2021 GMT
            Not After : Mar 24 14:34:05 2026 GMT
        Subject: CN=8fbc71ad1c3b3d88a143b826fc6127d8cb730f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0d:dc:e7:86:e4:89:b1:84:9e:38:ff:6d:89:
                    fb:d8:66:a8:64:8c:41:ef:00:03:13:80:87:98:6d:
                    77:5b:5d:b2:68:0b:78:09:68:e4:64:00:b4:1f:5e:
                    81:ef:5a:8f:3b:3b:3c:34:c8:6a:58:6f:00:4d:b6:
                    01:8f:6c:41:b8:eb:3c:33:68:bf:88:f8:f2:3b:2e:
                    1f:9c:79:d6:c2:18:2e:5a:4d:0b:a9:31:af:14:9d:
                    1d:cd:76:fd:3b:f3:01:67:84:6e:af:35:28:d3:36:
                    58:9d:0a:b1:4d:56:1e:54:b8:60:cc:c2:4a:33:0d:
                    6e:2f:43:5d:72:4e:0a:59:66:4e:f6:60:64:bb:5e:
                    7c:92:a7:43:18:3b:bf:ce:26:a6:84:dd:60:33:a8:
                    ac:47:dd:ed:41:77:95:00:90:14:ef:3a:87:b3:0e:
                    eb:b6:ef:66:23:af:22:d1:57:fb:2b:cf:4e:d3:97:
                    cd:5c:8e:ac:eb:e9:21:c7:32:78:75:d6:ad:bb:bb:
                    cb:65:42:8c:33:48:73:bc:09:04:9a:e3:d8:75:b9:
                    14:98:16:b9:b1:67:ac:58:77:f1:0b:26:c9:96:29:
                    9f:07:35:24:24:e9:3d:2f:70:df:b1:9e:f9:25:95:
                    b4:0a:b7:32:1b:76:0f:50:76:5d:2e:67:b7:1a:29:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F9:55:80:B9:A1:DA:64:71:C0:84:35:C1:8B:12:B0:E1:07:AD:6A
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/8fbc71ad1c3b3d88a143b826fc6127d8cb730f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:b7:dc:66:7e:5f:5b:13:cf:9b:92:46:cc:c3:71:15:6c:
         fc:f1:19:15:31:f8:f2:fb:f3:2d:ac:f7:e4:e9:cc:0b:97:10:
         cc:14:cb:61:e5:18:68:cf:06:e7:ec:46:ef:fe:35:d0:88:ba:
         de:63:f9:42:fa:b6:63:82:65:f3:31:0a:a0:bf:61:c6:f9:97:
         01:8a:bb:29:f5:56:28:81:1e:55:f8:ac:b9:a6:55:90:39:02:
         10:a0:c0:f2:0c:5e:ad:6b:85:2b:9b:7e:31:d6:15:ab:b3:bd:
         d3:f6:fd:97:d8:14:1f:7a:a6:31:79:32:4b:57:07:05:2c:8e:
         8a:70:53:69:b6:1a:3b:10:cf:91:4d:01:a1:cf:48:b2:0b:4c:
         9e:6d:0b:2b:78:1a:1e:ae:d3:bd:5c:8d:8e:1f:d7:03:ce:0b:
         1e:f6:a1:98:21:f8:5f:83:e4:f9:f9:ed:68:68:5f:e6:54:e1:
         64:7a:e9:d6:80:ac:09:c7:25:eb:32:67:ac:3d:07:b9:26:58:
         0d:4e:b8:61:ec:04:d4:13:5c:7d:d9:f0:d5:41:4e:af:ef:9e:
         ef:d3:65:35:9a:d9:a6:f5:34:ee:ad:f2:12:7e:c3:5d:78:25:
         6c:42:92:24:12:0e:53:7a:bf:dc:5b:bc:d7:0b:a8:99:e6:95:
         4b:47:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org