Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/8c9f00fe834bee4aeab907d46c36821e72bba0a9.roa
File:                     8c9f00fe834bee4aeab907d46c36821e72bba0a9.roa (raw, json)
Hash identifier:          JSmglCerSp/baV2sjthpSUAdr8LyL3SjdL2H+pbfBHs=
Subject key identifier:   D2:DA:9D:6F:AD:9A:F6:55:8C:1F:DA:94:7D:E9:8F:02:5F:CE:87:3D
Certificate issuer:       /CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
Certificate serial:       0DA39B
Authority key identifier: 8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/8c9f00fe834bee4aeab907d46c36821e72bba0a9.roa
Signing time:             Wed 24 Mar 2021 14:30:48 +0000
ROA not before:           Wed 24 Mar 2021 14:30:48 +0000
ROA not after:            Tue 24 Mar 2026 14:30:48 +0000
asID:                     263770
IP address blocks:        138.118.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893851 (0xda39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
        Validity
            Not Before: Mar 24 14:30:48 2021 GMT
            Not After : Mar 24 14:30:48 2026 GMT
        Subject: CN=8c9f00fe834bee4aeab907d46c36821e72bba0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:e9:25:2e:7a:9c:77:22:8a:82:0a:a5:a7:
                    b9:19:87:2b:c9:e9:79:6a:17:3a:f2:f5:c5:ca:32:
                    26:ee:b9:96:29:ac:d5:88:fb:29:f6:a7:29:92:58:
                    3a:36:dc:aa:7a:f3:b1:3e:39:0f:32:fd:e7:22:22:
                    d0:f7:2f:0b:71:f4:a9:52:d7:34:f5:f9:d8:2f:e8:
                    04:f5:ef:6e:c0:d6:22:1f:9d:a8:bb:4e:56:34:5b:
                    a1:3e:5b:0b:f8:f3:0a:1a:09:ae:e4:e6:ff:cf:9a:
                    40:6d:55:42:75:3a:11:46:7a:ba:da:cb:1b:c2:6e:
                    17:8c:d1:35:db:08:d5:d5:cd:25:9d:88:94:6f:63:
                    6d:f7:1e:a5:82:41:78:7c:03:d1:6d:d2:43:03:06:
                    24:6b:f7:85:a7:bf:06:4d:7c:90:3b:86:93:19:59:
                    d7:4f:d4:16:18:f1:bc:8c:d6:e9:f3:9a:38:89:f3:
                    29:74:00:86:01:23:28:98:45:4e:67:3e:9f:29:ff:
                    cd:92:06:51:fc:78:23:77:51:6f:18:ac:34:f0:d7:
                    4c:25:d4:d5:4f:03:d4:15:4a:ad:ca:d3:c1:c7:20:
                    db:44:22:7a:81:eb:54:82:34:d6:bf:b0:27:8c:b2:
                    64:f8:0d:47:c2:98:68:b9:89:f3:ae:6b:47:a6:43:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DA:9D:6F:AD:9A:F6:55:8C:1F:DA:94:7D:E9:8F:02:5F:CE:87:3D
            X509v3 Authority Key Identifier:
                keyid:8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/8c9f00fe834bee4aeab907d46c36821e72bba0a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/2530e9633e4c0fd319edd31c24cbda0c0b19490c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:c1:e7:a5:4b:7b:0b:40:b6:a9:b0:1a:37:de:5a:4d:fd:
         3f:b1:c0:d4:2f:34:71:58:8a:51:44:5a:66:d7:19:4a:29:21:
         ed:4b:f7:b9:84:13:3b:c9:7d:02:88:00:23:63:90:03:15:c0:
         4e:f5:e3:82:27:ab:bd:5f:c0:ff:64:07:fb:67:4f:30:b3:4f:
         f1:aa:5b:cd:a8:7b:2d:92:ac:37:b1:0e:c8:f6:70:12:fc:27:
         10:14:f5:12:46:47:96:42:05:e3:ff:32:9b:46:5b:05:83:cd:
         8f:bc:2b:3e:93:e0:0b:f8:9a:7b:85:69:c9:66:79:78:90:8f:
         88:b3:17:9b:44:4d:a1:c9:ea:99:6e:3a:33:55:04:36:a9:cf:
         f6:ee:56:38:3e:32:c7:7b:e5:1f:ef:23:61:b7:3e:91:0d:11:
         2f:34:4a:0d:09:60:c2:f5:f6:92:ed:39:6d:d2:04:08:8a:8c:
         f9:00:be:d5:e8:d5:bf:d1:aa:2b:b9:58:f9:a5:93:08:01:11:
         2e:be:7a:f8:19:69:09:01:90:e9:b5:47:eb:02:19:07:3c:9f:
         02:cc:2f:85:5f:2c:72:f8:24:58:44:b5:1d:d6:54:31:8e:24:
         1b:e6:eb:66:41:10:46:d1:de:f0:ad:d4:d2:04:23:5d:97:dc:
         da:34:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org