Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/62bf9a91a4bd05536ec8fe68ad9f31abcab9004a.roa
File:                     62bf9a91a4bd05536ec8fe68ad9f31abcab9004a.roa (raw, json)
Hash identifier:          geIPQHjLQEc9/M6LQWjiog+XQPs6YDNTrZMbf+0fYGA=
Subject key identifier:   18:C2:DF:AF:7D:1A:A2:CB:7C:1E:EC:C1:BA:BE:C6:5E:7B:AE:33:07
Certificate issuer:       /CN=e17587a4cdec02d0d1592726772c8b9bee90f10a
Certificate serial:       0D4FF8
Authority key identifier: 98:64:4A:C3:63:0B:C4:C7:12:A9:C5:42:FA:FF:1F:39:AC:5F:34:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e17587a4cdec02d0d1592726772c8b9bee90f10a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/62bf9a91a4bd05536ec8fe68ad9f31abcab9004a.roa
Signing time:             Wed 24 Mar 2021 14:46:04 +0000
ROA not before:           Wed 24 Mar 2021 14:46:04 +0000
ROA not after:            Tue 24 Mar 2026 14:46:04 +0000
asID:                     265515
IP address blocks:        138.36.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872440 (0xd4ff8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17587a4cdec02d0d1592726772c8b9bee90f10a
        Validity
            Not Before: Mar 24 14:46:04 2021 GMT
            Not After : Mar 24 14:46:04 2026 GMT
        Subject: CN=62bf9a91a4bd05536ec8fe68ad9f31abcab9004a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:95:1e:73:40:22:49:a6:4c:3a:e9:96:8d:
                    ca:9c:be:e6:a4:12:f2:b0:e9:0b:5b:d3:f2:b7:a1:
                    85:e3:28:7d:1b:b7:51:72:41:ff:a1:49:13:8e:b1:
                    54:de:f0:47:18:1e:46:5f:e0:13:03:e6:e3:b3:e7:
                    2c:47:84:3e:19:e2:22:1c:4f:e8:d5:fd:78:5f:fd:
                    93:f6:13:c6:30:3c:57:1a:c4:24:ba:63:a3:f9:54:
                    5e:7d:63:40:b2:6f:bc:a5:e9:75:ad:8f:7d:a8:3e:
                    de:50:b4:ae:42:6e:6e:60:09:a2:b3:90:57:c9:ce:
                    82:0a:45:a8:2c:ba:ac:0e:45:1d:cc:45:67:04:92:
                    1a:e2:7f:3d:d8:e8:01:c8:63:84:15:d4:fd:e8:13:
                    9f:8d:c5:fd:f3:98:bc:b2:ce:58:4f:16:22:5b:95:
                    c5:e1:4a:18:f2:12:c5:06:ab:df:43:06:e6:bb:28:
                    07:15:1c:ac:6e:ce:ff:93:39:b2:10:c2:7a:68:5c:
                    71:79:78:48:1e:cc:5b:b8:31:3c:5a:ce:0a:86:29:
                    65:73:85:de:7e:4d:c9:bf:c1:34:03:9b:83:dd:f6:
                    af:89:93:6b:71:50:2b:4a:f9:ee:94:eb:2f:b6:67:
                    1d:74:fa:cf:a7:ce:01:4f:22:d0:e9:47:21:04:62:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C2:DF:AF:7D:1A:A2:CB:7C:1E:EC:C1:BA:BE:C6:5E:7B:AE:33:07
            X509v3 Authority Key Identifier:
                keyid:98:64:4A:C3:63:0B:C4:C7:12:A9:C5:42:FA:FF:1F:39:AC:5F:34:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e17587a4cdec02d0d1592726772c8b9bee90f10a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/62bf9a91a4bd05536ec8fe68ad9f31abcab9004a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/e17587a4cdec02d0d1592726772c8b9bee90f10a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:e1:f9:bc:b5:85:ce:ef:3e:5d:5f:b4:80:8d:5c:7b:fc:
         72:66:07:b9:b6:ac:89:aa:52:33:6b:4b:d0:21:6f:9b:d3:85:
         70:30:5b:03:7e:f5:72:a1:bd:52:26:55:1e:0f:d1:19:8e:97:
         27:b8:a6:33:34:d4:1d:95:67:cc:6a:dd:54:f9:5d:4b:ee:aa:
         a6:b3:d0:d1:c3:81:a4:91:9a:25:1a:96:09:eb:a3:03:5e:b8:
         3f:f8:08:25:e6:5e:ec:e4:db:54:18:f1:fe:a1:f4:e0:33:2f:
         6c:c1:e2:59:b7:41:1c:8c:e8:fe:7b:dc:fd:05:9c:12:c4:b2:
         d9:64:8f:f1:db:3c:8f:eb:b8:56:b0:0d:85:38:28:21:39:85:
         33:29:82:51:46:f4:4a:8c:a8:92:58:f1:f8:4b:33:5d:fd:4e:
         08:ff:0b:63:4d:c1:07:4b:3b:ac:07:7c:14:50:17:59:85:0b:
         dd:72:f4:92:88:0a:5f:d5:06:32:11:6a:02:a4:b4:a0:30:cf:
         75:11:9e:f4:76:a8:68:2f:b3:17:d3:59:0a:11:b5:2a:b6:ae:
         37:98:e9:df:36:3c:f9:52:f4:b0:41:cb:eb:ab:f6:1d:e6:8e:
         31:7a:23:08:a0:75:22:ca:65:ed:a4:da:a8:c5:3d:59:32:46:
         cc:dc:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org