Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0a3531b768e1a8746bda37a1f914e71506af5ed.roa
File:                     b0a3531b768e1a8746bda37a1f914e71506af5ed.roa (raw, json)
Hash identifier:          exJHCDx0lSky3yve/m/+cBKJYSAxPupA19Oru4yJPWQ=
Subject key identifier:   8B:E3:02:0D:FC:F3:94:BF:69:D3:74:08:C8:04:F4:FD:85:F1:F2:CE
Certificate issuer:       /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial:       0DAA31
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0a3531b768e1a8746bda37a1f914e71506af5ed.roa
Signing time:             Wed 24 Mar 2021 14:47:42 +0000
ROA not before:           Wed 24 Mar 2021 14:47:41 +0000
ROA not after:            Tue 24 Mar 2026 14:47:41 +0000
asID:                     264660
IP address blocks:        138.186.5.0/24 maxlen: 24
                          138.186.6.0/24 maxlen: 24
                          170.247.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895537 (0xdaa31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
        Validity
            Not Before: Mar 24 14:47:41 2021 GMT
            Not After : Mar 24 14:47:41 2026 GMT
        Subject: CN=b0a3531b768e1a8746bda37a1f914e71506af5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:35:4f:90:46:6c:43:b5:24:3f:71:32:bb:
                    e9:d2:e1:e5:db:68:4d:16:33:d1:68:3a:3c:05:3a:
                    ff:fd:bc:ca:c5:93:60:00:ba:df:f2:43:99:a7:5f:
                    b6:a4:2a:2f:24:bb:04:b7:93:5a:06:2c:7a:66:8d:
                    14:51:a3:9a:cb:0e:89:48:a8:b3:86:7e:77:c0:e8:
                    a0:94:95:04:7e:0d:21:ec:c3:f4:c6:ea:4c:1c:b4:
                    bd:58:20:1f:ab:62:89:13:b6:64:57:76:3b:d7:45:
                    15:71:d5:f0:07:8b:4b:2d:da:8c:57:6f:de:6a:08:
                    9a:6f:10:b6:ab:4d:3c:da:84:11:d7:2e:ad:cf:76:
                    3c:c0:88:54:be:24:ef:13:9d:03:d3:ad:8c:8e:d3:
                    15:99:14:a2:be:61:0e:44:43:ad:32:eb:f8:07:f3:
                    bb:20:ef:8d:64:c7:4c:cc:f2:14:81:a8:aa:9e:39:
                    eb:e9:8c:79:a1:b7:13:d3:2e:56:c8:ac:28:55:6b:
                    ce:19:37:62:cb:03:ba:39:5a:c5:c6:81:ca:f6:69:
                    aa:37:4b:b3:79:2a:52:01:b5:2e:1a:3b:ad:13:73:
                    1c:51:13:a8:20:14:65:c8:31:55:61:2e:44:24:a0:
                    1f:bb:2f:a4:b9:0f:6d:3a:5a:f3:48:31:0f:d1:68:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:02:0D:FC:F3:94:BF:69:D3:74:08:C8:04:F4:FD:85:F1:F2:CE
            X509v3 Authority Key Identifier:
                keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0a3531b768e1a8746bda37a1f914e71506af5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.5.0-138.186.6.255
                  170.247.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:56:6e:95:2b:60:00:00:5c:6d:70:ba:1b:f0:9e:15:b1:7a:
         31:73:96:fc:8d:80:6d:9b:c0:02:39:78:81:3e:7a:16:67:21:
         c0:21:24:5e:72:83:21:54:86:02:58:2a:60:05:0a:16:1f:87:
         3d:b4:0b:ce:82:bc:ca:38:54:73:1b:74:ba:68:41:fd:45:3a:
         fe:6a:5e:cf:68:13:ea:67:8e:08:0b:1d:db:ee:a3:18:a3:0a:
         f5:e0:d1:65:28:56:7e:62:db:58:5c:a6:c9:6b:07:c2:24:d9:
         0b:3e:f8:9a:e0:77:d6:dd:55:68:3f:95:84:20:03:ee:b2:fa:
         5f:8d:85:c1:3d:e6:4b:a4:c5:de:88:0c:ac:b9:52:c6:e8:b7:
         e7:79:3c:1a:98:7f:46:b9:3c:a1:e5:6e:ab:69:77:95:70:d1:
         86:26:8b:2d:72:46:6d:87:d0:8f:8a:07:1e:bb:7b:93:11:7b:
         b8:bf:bd:39:ed:8b:a9:7b:09:15:d7:db:f7:c9:e4:ef:1c:20:
         e7:22:ee:f0:ef:ce:9e:71:8e:b2:b8:3d:de:53:49:e1:d0:1a:
         c0:ce:66:f8:70:3b:e4:4d:d2:00:43:fc:59:6e:ef:78:c0:7a:
         f4:3c:06:38:0a:67:ab:2c:48:71:ce:33:6b:55:d4:96:53:2a:
         55:02:53:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org