Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/a2d187b80346ba925e0a71891107ff16fa2d23c8.roa
File:                     a2d187b80346ba925e0a71891107ff16fa2d23c8.roa (raw, json)
Hash identifier:          +HuemgOW9TqnOYvzNiun3LmvXJGpOlsDB9zcSou0qjE=
Subject key identifier:   EE:0B:AA:D8:FA:3A:83:2B:6C:A9:03:61:81:A1:78:79:64:71:DE:9D
Certificate issuer:       /CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
Certificate serial:       22C043
Authority key identifier: 81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/a2d187b80346ba925e0a71891107ff16fa2d23c8.roa
Signing time:             Mon 10 Jul 2023 11:43:03 +0000
ROA not before:           Sun 09 Jul 2023 11:43:03 +0000
ROA not after:            Thu 10 Jul 2025 11:43:03 +0000
asID:                     61508
IP address blocks:        138.219.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2277443 (0x22c043)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
        Validity
            Not Before: Jul  9 11:43:03 2023 GMT
            Not After : Jul 10 11:43:03 2025 GMT
        Subject: CN=a2d187b80346ba925e0a71891107ff16fa2d23c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ee:83:96:db:15:3c:1e:a3:c3:fe:63:8b:ba:
                    37:a6:24:98:a1:fe:1a:3c:de:79:87:e9:87:e1:b7:
                    c3:ba:c7:f6:d8:71:b5:f9:da:b6:59:65:b0:78:00:
                    78:02:86:ed:0c:a3:b8:f7:ac:aa:c9:b4:b1:46:32:
                    54:48:64:fa:0b:78:37:d4:7c:c2:24:f8:03:45:8a:
                    65:e9:a6:af:27:ee:ba:4f:5b:7c:f8:58:d8:df:12:
                    d1:27:b1:60:2c:07:5a:45:af:b4:92:9e:34:a8:52:
                    55:b7:7f:25:7f:58:77:a9:11:1b:37:9b:e4:8c:27:
                    56:e3:d5:8f:b2:09:44:0b:f6:c9:ef:8b:a5:ca:22:
                    ea:1e:2d:ef:b3:26:76:d6:9c:5a:5c:d8:73:34:91:
                    35:d5:83:6a:19:fe:69:a4:25:3d:1e:64:35:d3:4d:
                    20:96:57:9c:ac:f8:b1:77:3f:bd:eb:de:18:f9:87:
                    18:03:d1:df:9d:0e:c4:f9:62:9d:f0:68:36:58:8c:
                    3d:aa:c4:5e:aa:5e:26:cd:64:61:49:20:e5:e6:d3:
                    d8:3e:1a:09:08:9d:f6:4a:86:5f:15:f8:dd:06:6a:
                    5f:3e:0c:6c:75:ed:91:0d:06:33:39:1b:c6:39:fa:
                    07:32:77:8c:e0:0c:60:af:23:e9:da:d8:e4:92:33:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:AA:D8:FA:3A:83:2B:6C:A9:03:61:81:A1:78:79:64:71:DE:9D
            X509v3 Authority Key Identifier:
                keyid:81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/a2d187b80346ba925e0a71891107ff16fa2d23c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:d4:40:ce:3b:07:1e:9c:66:70:42:cf:1f:7e:6a:ed:4b:2f:
         28:0f:a3:f5:0f:05:10:6b:b0:9f:e9:68:3c:96:78:25:e9:89:
         0e:99:ea:2c:ed:42:b3:e2:f0:39:e9:fa:bb:5d:a6:d6:0c:c2:
         67:af:7e:3b:a2:10:b0:d5:fd:80:7b:ee:6f:c2:ba:7c:a1:6b:
         96:39:16:04:22:0c:95:66:3d:00:21:4d:c6:20:8c:b4:50:d9:
         fc:fa:c9:e0:2a:4a:e3:2c:34:32:91:7e:61:f3:92:9b:d2:37:
         9e:55:28:f6:3e:ca:b9:dc:e8:87:d9:27:cd:7b:ba:c7:b5:fc:
         33:3b:49:9d:c5:53:13:39:07:d5:10:ca:2a:50:10:88:a6:a7:
         70:34:1e:56:5b:ad:67:d4:56:25:0f:5c:d7:50:9e:38:81:c8:
         ef:e7:ac:26:18:ba:f0:a2:a7:e4:4a:53:7a:23:54:0d:f9:34:
         db:1f:ad:f1:5b:69:f9:d0:c6:08:7a:fb:c7:04:23:d5:b6:2c:
         c2:ec:2a:4b:25:db:41:6f:0c:fa:59:13:06:13:93:53:c7:43:
         53:71:83:2e:a6:0a:83:5d:98:79:dd:28:9b:1f:53:72:14:14:
         c1:53:bc:6b:2e:b0:a3:67:a4:64:ae:65:9c:8b:b1:fc:aa:7e:
         c8:99:91:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org