Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/75bb7922d9e57d66437a8e129dcaded43ad75902.roa
File:                     75bb7922d9e57d66437a8e129dcaded43ad75902.roa (raw, json)
Hash identifier:          zTZ5MQXct99A9QztrEi/rE+m2LzdUP5imm3b3Ux4QPI=
Subject key identifier:   C0:85:DF:2D:9D:DD:F4:7A:0B:33:29:09:AC:A1:00:4E:E6:8B:3C:75
Certificate issuer:       /CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
Certificate serial:       0CF300
Authority key identifier: DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/75bb7922d9e57d66437a8e129dcaded43ad75902.roa
Signing time:             Wed 24 Mar 2021 14:45:16 +0000
ROA not before:           Wed 24 Mar 2021 14:45:16 +0000
ROA not after:            Tue 24 Mar 2026 14:45:16 +0000
asID:                     28005
IP address blocks:        138.118.124.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848640 (0xcf300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
        Validity
            Not Before: Mar 24 14:45:16 2021 GMT
            Not After : Mar 24 14:45:16 2026 GMT
        Subject: CN=75bb7922d9e57d66437a8e129dcaded43ad75902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6c:45:bd:e7:b3:30:2b:86:79:fe:62:5b:f2:
                    d5:95:70:73:3c:93:19:c8:a5:4d:be:9d:d2:b4:6a:
                    43:aa:1b:f3:73:a7:40:f4:68:92:fd:16:bc:bb:f1:
                    9e:f9:16:0e:7e:99:5f:7c:dc:18:ad:a2:9a:a0:99:
                    f6:de:e9:ed:5a:b2:c0:81:5d:d9:fe:de:09:d0:f5:
                    52:64:97:5e:5c:89:dd:9e:83:39:2b:11:f5:c1:7b:
                    37:57:7d:83:13:ef:5e:01:30:3d:67:aa:5c:b2:bd:
                    a2:c7:8a:5e:b5:3e:42:5e:40:2c:98:34:55:4c:12:
                    f7:d8:42:77:49:6d:98:ff:08:02:65:15:34:1e:45:
                    fc:d5:ee:a5:4c:6e:ba:2d:7c:0b:a5:0e:38:fa:72:
                    ed:b3:d1:3f:63:8a:b1:b4:23:3d:b8:2c:50:31:df:
                    da:c7:8a:79:01:d6:d3:a7:99:16:bd:0c:1f:93:bc:
                    3c:e0:64:4d:9e:78:5f:e2:a2:f9:46:01:bd:26:52:
                    50:70:1a:e3:65:01:e3:d1:10:d8:0f:8f:c0:f1:d7:
                    7c:ad:2c:18:59:d6:66:8b:e4:df:0f:77:c4:44:22:
                    4d:f3:ff:b8:56:0f:2e:78:1a:ca:d1:63:f4:30:a5:
                    b0:91:5a:60:19:b4:64:8e:48:95:ea:f0:11:c6:3b:
                    0f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:85:DF:2D:9D:DD:F4:7A:0B:33:29:09:AC:A1:00:4E:E6:8B:3C:75
            X509v3 Authority Key Identifier:
                keyid:DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/75bb7922d9e57d66437a8e129dcaded43ad75902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/3c8bc735a993962fcbd639234bae2ac1d5a1f158.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:3d:40:cd:7b:fb:63:f4:f0:0b:78:01:f4:49:c5:bb:d9:
         26:cf:1e:b1:71:53:61:54:fd:de:5c:a7:cb:f9:53:14:36:87:
         b7:67:a9:48:9a:dd:91:fc:10:94:6e:b3:dc:47:d7:b0:d3:48:
         0a:7d:43:02:5e:81:26:0d:e9:48:16:3e:f9:3d:7a:8d:48:fe:
         2d:d0:49:06:ea:a6:f9:16:b6:85:77:8d:fb:14:8e:84:8e:88:
         57:7b:64:0c:34:cd:56:a5:2e:11:63:9e:b9:76:b7:8e:91:db:
         73:16:84:a3:ed:ab:28:be:15:82:95:77:8e:ad:e3:66:9c:d8:
         2e:23:83:45:22:8f:45:a3:31:8f:d2:c6:5c:73:bd:fe:19:8c:
         db:ca:33:f9:7c:56:c5:4c:99:37:07:6c:cf:42:b5:2b:60:85:
         a5:53:55:42:52:9e:0d:d6:8b:6a:81:83:8e:ec:a0:8f:4a:a9:
         c1:3e:14:2c:31:72:15:c7:74:a3:9a:43:9a:71:bb:53:d1:92:
         ea:83:5f:0d:5e:fa:a6:b1:2d:d9:10:8d:57:39:92:e1:9f:71:
         af:17:45:e7:da:a9:94:b7:ff:29:fa:66:b4:ef:d9:70:58:a3:
         e7:98:75:31:61:6b:ba:42:11:c1:3a:3d:61:77:98:83:e3:b0:
         8a:2c:94:f1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDPMAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNj
OGJjNzM1YTk5Mzk2MmZjYmQ2MzkyMzRiYWUyYWMxZDVhMWYxNTgwHhcNMjEwMzI0
MTQ0NTE2WhcNMjYwMzI0MTQ0NTE2WjAzMTEwLwYDVQQDEyg3NWJiNzkyMmQ5ZTU3
ZDY2NDM3YThlMTI5ZGNhZGVkNDNhZDc1OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiWxFveezMCuGef5iW/LVlXBzPJMZyKVNvp3StGpDqhvzc6dA
9GiS/Ra8u/Ge+RYOfplffNwYraKaoJn23untWrLAgV3Z/t4J0PVSZJdeXIndnoM5
KxH1wXs3V32DE+9eATA9Z6pcsr2ix4petT5CXkAsmDRVTBL32EJ3SW2Y/wgCZRU0
HkX81e6lTG66LXwLpQ44+nLts9E/Y4qxtCM9uCxQMd/ax4p5AdbTp5kWvQwfk7w8
4GRNnnhf4qL5RgG9JlJQcBrjZQHj0RDYD4/A8dd8rSwYWdZmi+TfD3fERCJN8/+4
Vg8ueBrK0WP0MKWwkVpgGbRkjkiV6vARxjsP3QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMCF3y2d3fR6CzMpCayhAE7mizx1MB8GA1UdIwQYMBaAFNvkWXJVBbNB+/Xd
mJJwAEYcoHC+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2M4YmM3
MzVhOTkzOTYyZmNiZDYzOTIzNGJhZTJhYzFkNWExZjE1OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjU2ZTMzNzMtZTEyOS00OTYzLWFkODktZDgyMDM4
MjNjZGM2Lzc1YmI3OTIyZDllNTdkNjY0MzdhOGUxMjlkY2FkZWQ0M2FkNzU5MDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNTZlMzM3My1lMTI5LTQ5NjMtYWQ4OS1kODIw
MzgyM2NkYzYvM2M4YmM3MzVhOTkzOTYyZmNiZDYzOTIzNGJhZTJhYzFkNWExZjE1
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAop2fDANBgkqhkiG9w0BAQsFAAOCAQEALfs9QM17+2P08At4
AfRJxbvZJs8esXFTYVT93lyny/lTFDaHt2epSJrdkfwQlG6z3EfXsNNICn1DAl6B
Jg3pSBY++T16jUj+LdBJBuqm+Ra2hXeN+xSOhI6IV3tkDDTNVqUuEWOeuXa3jpHb
cxaEo+2rKL4VgpV3jq3jZpzYLiODRSKPRaMxj9LGXHO9/hmM28oz+XxWxUyZNwds
z0K1K2CFpVNVQlKeDdaLaoGDjuygj0qpwT4ULDFyFcd0o5pDmnG7U9GS6oNfDV76
prEt2RCNVzmS4Z9xrxdF59qplLf/KfpmtO/ZcFij55h1MWFrukIRwTo9YXeYg+Ow
iiyU8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org