Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/edcd662731d57ecd8b16e0ebfcb591f94aff6a4a.roa
File:                     edcd662731d57ecd8b16e0ebfcb591f94aff6a4a.roa (raw, json)
Hash identifier:          puW3AnkPzgt0J3kzQINAEOVC6N1lNNheO5ewjjf64Ec=
Subject key identifier:   9B:13:FD:AB:AF:02:7F:85:94:66:5A:A0:84:67:FF:FF:26:50:A5:69
Certificate issuer:       /CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
Certificate serial:       21B149
Authority key identifier: DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/edcd662731d57ecd8b16e0ebfcb591f94aff6a4a.roa
Signing time:             Thu 27 Jul 2023 19:36:09 +0000
ROA not before:           Wed 26 Jul 2023 19:36:09 +0000
ROA not after:            Sun 27 Jul 2025 19:36:09 +0000
asID:                     28005
IP address blocks:        190.102.56.0/21 maxlen: 23
                          138.118.124.0/22 maxlen: 23
                          2803:b840::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2208073 (0x21b149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
        Validity
            Not Before: Jul 26 19:36:09 2023 GMT
            Not After : Jul 27 19:36:09 2025 GMT
        Subject: CN=edcd662731d57ecd8b16e0ebfcb591f94aff6a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:db:9c:5a:a6:aa:c2:4e:e8:ad:c8:f5:6d:a9:
                    2a:9b:86:f3:ca:5c:89:92:39:06:d7:bd:84:52:cc:
                    63:ce:0c:d5:f4:10:d2:2d:1d:4f:35:f5:44:85:09:
                    32:a4:f9:f9:77:14:04:c2:d8:8b:ba:27:c3:7b:0f:
                    23:a4:64:b7:00:85:7f:10:8e:6b:a9:64:0c:45:53:
                    d6:72:48:e5:a9:4e:2c:4e:17:88:94:d0:f1:c8:b5:
                    75:80:ac:c5:5b:a2:a7:af:24:77:67:92:49:d6:28:
                    99:d6:03:3a:43:91:a6:1a:ce:c2:de:73:68:13:f2:
                    0c:e2:94:a8:04:24:06:08:2a:e7:aa:1b:f8:ff:b3:
                    65:79:5c:b3:31:ac:db:f7:97:2d:9f:db:f3:b3:04:
                    19:4a:2d:2b:87:2c:41:b7:ba:b6:05:d5:da:ba:b8:
                    ab:f1:d4:ed:3e:2c:38:ae:f1:f1:b1:d7:4c:f4:9b:
                    3f:ef:48:9d:4d:49:9d:45:d6:61:d4:9d:37:97:36:
                    3c:33:4d:a0:2f:c6:76:3a:75:da:60:4b:3a:2c:a4:
                    79:0a:d1:80:29:9f:b2:65:7b:9d:3e:9c:7a:5e:46:
                    d5:5d:25:20:88:8a:c1:ba:5e:88:43:f7:95:7d:c3:
                    cd:0c:92:98:f8:ee:e1:c0:c7:f3:9b:77:da:6f:ef:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:13:FD:AB:AF:02:7F:85:94:66:5A:A0:84:67:FF:FF:26:50:A5:69
            X509v3 Authority Key Identifier:
                keyid:DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/edcd662731d57ecd8b16e0ebfcb591f94aff6a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/3c8bc735a993962fcbd639234bae2ac1d5a1f158.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.124.0/22
                  190.102.56.0/21
                IPv6:
                  2803:b840::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:de:2f:97:06:67:0d:f6:90:7c:bc:52:7e:0a:c2:0f:c0:5e:
         3d:73:13:52:79:61:99:92:6e:95:8f:d9:65:0d:b4:05:98:39:
         c5:eb:cf:f5:77:0b:14:47:12:68:43:0e:94:77:3a:5a:b1:5d:
         f5:84:d8:a6:f9:66:c5:6e:5b:6b:52:5a:11:e6:dc:36:de:b7:
         8c:7a:d0:dc:0d:03:2f:98:a5:79:47:1d:3f:1d:76:31:d3:a8:
         24:ef:2d:50:79:f7:e4:99:65:35:20:b7:3f:d7:37:3c:db:24:
         1a:e3:5a:b9:9d:44:4e:23:43:f0:89:57:96:68:fc:d9:3d:ec:
         49:6c:56:be:48:d7:1e:fd:9a:a1:80:dd:05:2a:85:5f:a2:9a:
         35:89:0d:09:92:e6:27:81:c2:ea:44:13:47:9b:00:d5:4d:06:
         f5:08:c0:9e:f9:9b:a1:01:15:e1:1b:e6:d1:b9:93:44:05:84:
         6e:d9:af:2f:60:d7:05:31:2e:17:2d:a8:22:51:01:31:51:39:
         d5:5b:23:06:d4:c8:ed:ad:3d:30:67:ad:84:36:e3:37:2e:7a:
         ba:7b:7d:84:0f:3b:b2:3e:6e:d0:82:84:e9:ea:80:54:ff:41:
         54:af:17:26:9d:42:db:f3:51:1e:af:a0:1e:c6:51:d6:73:8b:
         ff:ad:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org