Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/e09e58f8e975669ae6bd727ec6e680dc623d6e92.roa
File:                     e09e58f8e975669ae6bd727ec6e680dc623d6e92.roa (raw, json)
Hash identifier:          XqhpWY+IRA6ioIkvD9qx2TRKtdrOkO6k1B9KKvfMzuY=
Subject key identifier:   5F:DA:C2:49:D5:A4:A7:A9:B3:A1:19:95:0C:9B:F4:28:06:66:CB:2E
Certificate issuer:       /CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Certificate serial:       24EF7C
Authority key identifier: 29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/e09e58f8e975669ae6bd727ec6e680dc623d6e92.roa
Signing time:             Wed 01 Nov 2023 13:07:18 +0000
ROA not before:           Wed 01 Nov 2023 13:07:18 +0000
ROA not after:            Sat 01 Nov 2025 13:07:18 +0000
asID:                     263746
IP address blocks:        138.121.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420604 (0x24ef7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
        Validity
            Not Before: Nov  1 13:07:18 2023 GMT
            Not After : Nov  1 13:07:18 2025 GMT
        Subject: CN=e09e58f8e975669ae6bd727ec6e680dc623d6e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:86:23:a9:e3:32:1e:53:83:d6:b4:5a:a4:
                    bf:32:b8:52:3c:6b:cd:d2:7a:4b:30:b0:b6:13:d0:
                    8e:16:bb:24:61:e0:5c:b8:ca:95:11:1e:5b:c6:1e:
                    09:d0:bf:f4:07:bd:c7:1d:7e:f6:d9:2c:e7:07:3a:
                    d2:99:c3:01:c1:12:e6:17:68:eb:fa:43:b6:55:15:
                    60:ba:e8:0a:d1:a3:10:8c:75:b7:43:60:05:a2:01:
                    6a:f5:6d:08:39:ce:5b:f0:c2:77:d0:c1:2e:08:77:
                    5a:92:a6:f1:c9:10:4f:39:ed:29:ad:bc:4b:95:88:
                    3d:25:08:87:01:37:76:21:af:03:58:a2:3b:1c:21:
                    48:8a:66:47:71:33:02:c1:02:3a:1c:6b:99:64:b9:
                    6d:bb:cb:f6:07:fb:c7:a6:13:16:3b:29:97:33:1a:
                    be:95:82:bc:15:ae:e2:79:9b:69:3c:e4:03:83:50:
                    d2:ea:5e:9a:9d:f6:f7:62:08:2b:db:9d:46:61:46:
                    9f:83:47:e7:cc:71:2b:5b:b5:05:b5:73:28:6f:38:
                    7e:d5:83:82:15:0a:b6:29:bc:7c:99:5c:1e:c2:85:
                    f6:9e:de:e1:fa:2e:21:cb:54:11:19:10:15:1b:b4:
                    3b:d0:ae:56:33:05:d9:b8:de:40:73:68:e8:18:0a:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DA:C2:49:D5:A4:A7:A9:B3:A1:19:95:0C:9B:F4:28:06:66:CB:2E
            X509v3 Authority Key Identifier:
                keyid:29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/e09e58f8e975669ae6bd727ec6e680dc623d6e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:1f:0b:f9:13:e5:a6:c6:50:c4:3a:78:33:fc:86:90:a3:
         81:a2:93:47:e9:f4:1f:d8:ae:ed:9b:1c:00:e4:bf:bd:f8:ef:
         91:7b:1b:fe:8a:4b:d1:80:d3:30:30:6d:72:dd:46:ef:55:34:
         b5:98:ee:02:56:4e:1d:26:cb:59:1f:7e:8f:09:4b:27:b0:29:
         e3:e3:ad:6f:9e:03:b5:75:4b:a8:ac:3a:e4:ca:05:f4:7d:51:
         79:13:43:c0:93:75:ab:a4:0f:2a:c4:20:87:12:ce:45:84:55:
         22:fe:ff:24:45:64:e5:56:97:b0:bc:67:16:43:08:2a:35:c4:
         39:b4:83:db:4d:69:08:f3:28:9c:4b:6e:ef:4f:0f:d4:e2:51:
         e9:aa:53:6a:7a:98:db:18:45:af:d5:aa:c3:02:9c:7e:c4:f4:
         a6:a0:f1:79:5b:06:4e:fc:e4:57:9f:2e:e1:5a:86:fe:45:23:
         d0:66:88:79:bd:d6:3c:89:08:95:01:3d:c8:59:4d:21:09:a8:
         b0:c8:78:5a:a4:d4:7e:5c:0c:02:41:18:19:2b:1d:e0:56:da:
         45:d2:8a:58:7e:f1:12:08:5f:63:db:82:e8:02:be:b0:54:3f:
         86:4d:7d:81:43:84:5e:12:fd:2c:88:74:ec:ee:aa:0f:87:75:
         b4:b5:4b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org