Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/062ae39fb7323b6d20f5c6df5495702fb9c807cf.roa
File:                     062ae39fb7323b6d20f5c6df5495702fb9c807cf.roa (raw, json)
Hash identifier:          wfIKgeCb4O+Dt4EEOpttfQ3nZ1i1kqdUzKpw+NEi6EA=
Subject key identifier:   5E:83:4C:B2:CA:EF:BD:98:88:6E:56:B1:75:61:68:74:4A:DA:FC:B0
Certificate issuer:       /CN=fa092f07e38e9048e9276bd9c5b8977da9cfba5d
Certificate serial:       227C09
Authority key identifier: 3E:AA:95:D2:CF:03:E3:F0:24:4B:07:C4:63:06:80:FB:09:6F:B7:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa092f07e38e9048e9276bd9c5b8977da9cfba5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/062ae39fb7323b6d20f5c6df5495702fb9c807cf.roa
Signing time:             Tue 22 Aug 2023 17:34:33 +0000
ROA not before:           Mon 21 Aug 2023 17:34:33 +0000
ROA not after:            Fri 22 Aug 2025 17:34:33 +0000
asID:                     263807
IP address blocks:        138.255.96.0/24 maxlen: 24
                          138.255.97.0/24 maxlen: 24
                          138.255.98.0/24 maxlen: 24
                          138.255.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259977 (0x227c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa092f07e38e9048e9276bd9c5b8977da9cfba5d
        Validity
            Not Before: Aug 21 17:34:33 2023 GMT
            Not After : Aug 22 17:34:33 2025 GMT
        Subject: CN=062ae39fb7323b6d20f5c6df5495702fb9c807cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:02:09:54:74:14:06:cf:76:7c:77:1c:d3:
                    78:06:c2:7c:02:bb:91:98:7a:26:b7:01:11:49:98:
                    28:b8:6c:77:33:cf:a4:70:83:00:cf:f6:1c:d4:e6:
                    29:ff:d5:9a:e8:ed:c7:b9:49:de:1f:1c:11:6c:db:
                    93:65:0f:a5:8c:85:70:99:29:90:5c:17:e4:20:fc:
                    09:7b:30:0d:b4:aa:a0:64:0c:dd:0b:39:64:6b:7e:
                    53:c7:b1:2e:20:a5:4e:b5:14:7d:a0:da:b8:2d:a6:
                    98:dd:a5:d5:25:02:10:15:23:14:23:34:be:9a:24:
                    22:ef:b9:d9:74:d4:d2:83:d1:6a:e9:28:5b:10:09:
                    1d:6d:9a:59:7e:47:0f:06:e4:e6:31:a6:77:7e:ea:
                    e3:8e:9b:1c:16:0a:42:71:19:ac:54:da:4f:d7:57:
                    0c:4f:f9:b2:47:82:95:1c:65:d4:b8:42:a9:71:5d:
                    e0:5d:08:7d:39:17:6f:06:df:ff:21:dc:f9:3f:ea:
                    37:b4:7b:87:ad:80:bb:09:e5:3a:28:b3:16:8a:ef:
                    64:08:1e:7e:54:4c:e2:82:77:ec:b5:8d:90:3b:97:
                    87:f6:a8:4e:a2:15:74:1d:2d:28:b0:87:22:2e:b8:
                    ba:12:b0:4f:c1:17:7a:26:52:ca:dc:bf:d1:ba:43:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:83:4C:B2:CA:EF:BD:98:88:6E:56:B1:75:61:68:74:4A:DA:FC:B0
            X509v3 Authority Key Identifier:
                keyid:3E:AA:95:D2:CF:03:E3:F0:24:4B:07:C4:63:06:80:FB:09:6F:B7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa092f07e38e9048e9276bd9c5b8977da9cfba5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/062ae39fb7323b6d20f5c6df5495702fb9c807cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/fa092f07e38e9048e9276bd9c5b8977da9cfba5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:9c:2a:c9:f9:e3:97:4c:e4:fe:c6:f6:28:ff:b5:76:d2:9a:
         e9:d5:b6:a8:10:29:3a:8f:38:d5:4e:81:c5:55:15:67:aa:ba:
         e3:7b:4d:52:f8:5a:95:21:17:bf:f1:45:11:bd:36:18:45:e0:
         27:23:20:46:6a:b9:70:e6:7a:9c:cb:67:36:7d:99:e7:92:72:
         a4:a6:74:97:9d:69:84:08:88:f5:7b:37:a8:0c:ab:14:ca:ef:
         72:41:82:63:53:1e:88:03:78:89:9c:da:dd:7d:71:ca:b5:ff:
         f8:73:0f:6a:51:d6:73:6d:3f:a2:be:ea:0c:71:43:23:34:8f:
         76:2d:b4:a0:97:83:44:c6:e2:8e:a5:f2:2d:f7:4c:a7:60:c0:
         8a:fd:09:e9:47:ff:ad:17:35:ef:03:09:69:88:c3:9a:07:ee:
         15:8b:db:6c:6e:ee:da:28:43:d9:e8:65:7e:69:3d:5e:0d:f4:
         01:95:40:b1:31:e9:0e:be:be:a5:9d:e7:0b:ea:77:38:06:4b:
         db:62:57:f5:96:fa:4b:aa:03:a3:b9:3a:b9:89:41:d3:6a:ed:
         51:1c:b9:c0:62:e2:1f:c4:a5:3b:7a:41:13:43:fc:cf:e0:67:
         a5:aa:d0:20:b1:29:96:f7:23:7c:56:2b:42:6d:a1:53:dd:ea:
         2a:f9:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org