Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/b516aa5694cdf95c439189cccdee96042c11dd15.roa
File:                     b516aa5694cdf95c439189cccdee96042c11dd15.roa (raw, json)
Hash identifier:          n+u/zS1iuDyFwzVAVvaOONCcwRw4HoVLK0eOFmyd31g=
Subject key identifier:   7E:85:1F:18:EF:47:99:F2:17:39:FF:9C:DA:4E:06:11:E8:AF:32:24
Certificate issuer:       /CN=d380f261f4e23159ca264d740602eeef80a350a5
Certificate serial:       13B3
Authority key identifier: 70:54:53:74:8F:CE:20:C5:2C:BB:28:F4:AE:89:87:C3:4F:C8:D5:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d380f261f4e23159ca264d740602eeef80a350a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/b516aa5694cdf95c439189cccdee96042c11dd15.roa
Signing time:             Sat 08 Oct 2022 13:32:13 +0000
ROA not before:           Sat 08 Oct 2022 13:31:27 +0000
ROA not after:            Tue 08 Oct 2024 13:31:27 +0000
asID:                     263737
IP address blocks:        138.59.140.0/22 maxlen: 24
                          2803:df80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5043 (0x13b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d380f261f4e23159ca264d740602eeef80a350a5
        Validity
            Not Before: Oct  8 13:31:27 2022 GMT
            Not After : Oct  8 13:31:27 2024 GMT
        Subject: CN=b516aa5694cdf95c439189cccdee96042c11dd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:07:fc:df:91:38:6d:5d:57:09:ba:22:41:03:
                    92:e8:f9:9c:96:e9:26:ac:03:40:a5:ba:b0:b3:3e:
                    c5:fc:a1:5a:a6:01:02:bd:bc:00:d1:c0:5a:39:10:
                    aa:b0:b0:f0:df:df:3d:51:5e:6a:09:95:10:d9:2a:
                    34:b3:1a:c7:b8:ab:16:8e:27:3c:18:ae:c1:05:66:
                    45:53:8b:58:40:86:95:6d:01:20:89:51:52:88:6b:
                    bf:c2:5e:b1:54:df:24:93:46:d5:36:cb:9d:a0:f2:
                    3a:99:d6:d4:15:b3:9a:29:2a:bf:a5:2b:9a:e3:72:
                    58:79:50:1e:6d:72:c9:cf:ac:ad:27:99:ef:f1:6e:
                    8b:fa:07:4d:54:de:79:67:13:a3:52:9a:71:52:df:
                    ed:3f:b8:47:eb:4c:0b:d3:a6:b6:bc:9e:78:24:26:
                    e0:24:60:47:7f:8e:03:db:b1:3a:4f:2a:ec:63:a1:
                    22:cf:5c:37:f7:59:92:7e:15:0b:92:3d:6e:fb:5b:
                    d6:be:37:5b:a9:9f:37:29:a3:9d:8e:10:a8:3c:c6:
                    12:7f:a3:dd:29:35:fe:ef:06:ca:09:4c:71:8b:6b:
                    f9:e0:c8:1c:05:ca:44:92:19:11:01:0f:d5:0a:f9:
                    90:8a:14:f4:ef:ac:00:98:1f:b1:6c:63:56:e1:9e:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:85:1F:18:EF:47:99:F2:17:39:FF:9C:DA:4E:06:11:E8:AF:32:24
            X509v3 Authority Key Identifier:
                keyid:70:54:53:74:8F:CE:20:C5:2C:BB:28:F4:AE:89:87:C3:4F:C8:D5:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d380f261f4e23159ca264d740602eeef80a350a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/b516aa5694cdf95c439189cccdee96042c11dd15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/d380f261f4e23159ca264d740602eeef80a350a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.140.0/22
                IPv6:
                  2803:df80::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:0f:ce:a6:58:04:21:31:5a:ce:95:c4:c0:e3:13:b2:eb:
         07:ad:88:86:e8:72:cb:b4:05:61:db:de:cc:d5:73:48:77:8f:
         76:59:6b:95:67:b6:1b:a4:7c:70:b9:8b:73:85:4e:1e:ed:42:
         fa:43:53:c5:90:b9:ce:cf:2d:d5:8c:63:2f:a8:4a:ab:03:12:
         0d:9c:42:46:96:24:c5:ca:0a:8b:5a:9d:c7:13:92:d6:63:09:
         5d:ab:db:30:9b:98:80:82:0a:e9:4a:3f:01:21:f5:f4:21:e2:
         15:83:54:af:fc:f5:bb:cb:97:2f:ea:6a:a2:3a:a5:ac:15:7c:
         a8:e1:55:85:13:e8:04:14:06:8c:a4:76:63:27:f3:55:b0:2d:
         05:db:31:3e:03:ac:b2:47:f9:14:b2:41:a3:5f:7b:2a:9d:b1:
         d2:92:c7:b4:63:d9:ea:48:75:6a:d7:e7:7f:28:c1:1a:ef:c5:
         5e:17:0d:73:27:18:88:00:ba:93:ef:9e:4a:7d:da:ea:fc:a9:
         05:53:b7:12:71:c6:71:45:75:a4:6f:6f:c8:fc:58:f0:66:03:
         92:c7:d1:3d:bc:99:5d:76:78:02:5e:7b:cd:9e:75:71:dd:80:
         75:48:a0:5a:a4:d3:b6:76:69:a5:4c:b4:1b:0c:98:d5:71:6e:
         ad:92:55:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org