Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/d5c0e1f93a07f765533d8ec4505059662940f172.roa
File:                     d5c0e1f93a07f765533d8ec4505059662940f172.roa (raw, json)
Hash identifier:          4sayErFCzECe4T7PD6iep54Lw02fs8hUAbdW1aKGRZg=
Subject key identifier:   39:EF:BE:22:6E:A9:F5:FD:9F:CD:B7:5E:F8:53:C9:6E:18:D2:55:84
Certificate issuer:       /CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
Certificate serial:       1901DA
Authority key identifier: 8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/d5c0e1f93a07f765533d8ec4505059662940f172.roa
Signing time:             Mon 13 Jun 2022 20:58:19 +0000
ROA not before:           Mon 13 Jun 2022 20:58:18 +0000
ROA not after:            Sun 13 Jun 2027 20:58:18 +0000
asID:                     266749
IP address blocks:        138.118.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638874 (0x1901da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
        Validity
            Not Before: Jun 13 20:58:18 2022 GMT
            Not After : Jun 13 20:58:18 2027 GMT
        Subject: CN=d5c0e1f93a07f765533d8ec4505059662940f172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:b0:5d:7a:93:51:ef:88:e6:fd:d0:b3:f1:
                    e5:cb:e0:42:aa:ae:01:36:ca:fc:a0:3f:7a:2b:20:
                    0d:07:97:17:b9:af:99:a6:d7:96:9c:fa:48:af:76:
                    b3:43:10:54:41:82:04:53:2a:96:da:ee:9d:c5:ff:
                    21:de:59:24:17:b5:ae:55:30:cb:82:f4:2c:b8:6a:
                    ed:e4:73:c1:34:1b:1d:ac:38:e9:95:03:85:12:cd:
                    30:65:fb:06:82:b2:f8:6b:72:78:6c:f7:00:37:55:
                    e6:72:99:33:c0:29:45:30:00:f8:92:27:3a:92:5d:
                    df:1d:a2:38:3e:0c:4d:22:0d:3d:da:e7:ae:a2:af:
                    20:9a:a7:48:83:67:8a:1e:c6:c4:b3:cc:89:95:e8:
                    0a:70:62:da:47:65:71:3a:49:6c:06:9a:30:0a:10:
                    bf:99:c0:5f:f0:3a:cb:86:de:23:89:11:44:06:ae:
                    cf:46:00:84:44:9a:94:00:0e:7e:4e:53:ee:2e:90:
                    3d:d8:22:64:4a:a8:36:23:f7:70:9c:99:dd:83:c6:
                    77:d4:05:3d:65:ca:cf:35:fd:ad:2d:0b:d2:6d:63:
                    dc:5a:ed:56:03:81:57:b4:4d:78:5e:d8:9e:25:3e:
                    74:78:e0:f0:e3:7f:7c:4c:4f:34:9a:68:33:fb:95:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EF:BE:22:6E:A9:F5:FD:9F:CD:B7:5E:F8:53:C9:6E:18:D2:55:84
            X509v3 Authority Key Identifier:
                keyid:8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/d5c0e1f93a07f765533d8ec4505059662940f172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/2530e9633e4c0fd319edd31c24cbda0c0b19490c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:8b:b7:82:a2:2c:09:2a:2c:c7:93:02:e4:16:c5:68:20:86:
         99:ba:d2:cb:23:82:05:da:7e:1d:8b:e9:b5:ea:38:ce:98:1b:
         df:ef:80:b9:cf:7d:57:34:30:f9:5f:79:aa:da:50:04:0c:4e:
         1a:78:86:40:3b:d4:ec:b2:fd:15:ec:37:c5:1f:f4:00:a5:39:
         0b:7c:fa:43:2b:32:d4:7f:c0:e1:e7:94:cd:93:66:00:6e:d3:
         70:97:42:1a:f3:a2:1d:92:f7:ae:3d:b7:0a:ba:fa:22:3b:1b:
         6b:e4:a0:1c:16:db:53:ef:9c:73:15:54:66:01:c4:3c:71:ee:
         54:e3:c9:26:75:6a:64:e3:c8:2a:2b:c8:75:4b:60:1a:49:92:
         66:c7:24:b6:32:5c:f8:82:b7:f3:f5:9a:f3:bd:f3:a4:81:4a:
         f5:e7:be:57:78:bf:56:db:50:1c:ad:91:36:35:31:60:65:70:
         ce:15:c3:06:77:6f:bf:00:63:e4:29:62:dc:3e:45:15:7a:8b:
         31:08:09:4c:a7:22:08:4e:50:ff:1e:8e:4a:c2:b2:32:d9:06:
         ea:c3:99:24:8a:31:4f:8c:f4:c1:14:6e:ba:f4:c2:b8:51:71:
         66:94:71:55:ed:bb:b8:6a:ef:2e:e9:c0:91:c0:69:a6:b7:1c:
         d3:97:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org