Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/a2cdb3497caf4b395edece204fd6fbfcf4fddb29.roa
File:                     a2cdb3497caf4b395edece204fd6fbfcf4fddb29.roa (raw, json)
Hash identifier:          FXg5jR5YSGUYSed4sEWnoXr+loQcHcIChWRKTeuopx8=
Subject key identifier:   EB:84:1B:D8:61:00:31:0A:B2:21:BA:5B:B0:93:1F:F3:63:59:F5:B3
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       0D2644
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/a2cdb3497caf4b395edece204fd6fbfcf4fddb29.roa
Signing time:             Wed 24 Mar 2021 14:35:06 +0000
ROA not before:           Wed 24 Mar 2021 14:35:06 +0000
ROA not after:            Tue 24 Mar 2026 14:35:06 +0000
asID:                     264646
IP address blocks:        138.0.88.0/24 maxlen: 24
                          138.0.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861764 (0xd2644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Mar 24 14:35:06 2021 GMT
            Not After : Mar 24 14:35:06 2026 GMT
        Subject: CN=a2cdb3497caf4b395edece204fd6fbfcf4fddb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:83:3f:8c:e7:11:22:4f:64:e8:7b:fe:cc:
                    ea:31:54:9f:ab:63:bd:1c:06:25:1a:50:5a:96:19:
                    12:aa:1b:40:0f:58:84:de:6b:5d:ef:c8:94:74:07:
                    b6:42:09:8a:ac:15:20:69:1f:52:62:f5:65:a7:bd:
                    69:a0:bb:d5:73:e0:8c:b1:a0:7f:0a:4e:f1:56:2d:
                    67:07:3d:1d:71:71:47:ba:a7:99:1f:e9:83:ea:f9:
                    0a:d9:75:ee:e0:ad:82:d0:2c:f9:a1:71:8b:31:49:
                    e4:69:66:70:8b:4f:25:29:3f:6d:ed:d6:d9:cf:47:
                    84:41:ba:89:59:da:ab:1b:55:c0:d3:55:8e:16:80:
                    a2:73:5c:36:03:ff:ba:9a:3d:30:a3:fa:8b:5a:a1:
                    c7:dc:09:f2:c0:d5:d3:ce:9b:9f:15:67:8f:22:5b:
                    11:8e:e2:16:88:dc:eb:1c:cf:13:c6:fc:dc:a8:78:
                    31:07:44:b5:bc:9e:30:01:91:d4:79:79:1a:38:7c:
                    c0:6b:ec:6d:c3:f4:17:06:56:9e:4e:67:c1:38:c1:
                    db:3f:b5:4b:cb:18:f9:18:cc:bc:6f:85:ae:e7:6d:
                    b8:a2:c9:7a:2b:69:c4:bf:44:3c:ad:1e:8c:34:57:
                    63:d4:e1:ff:9c:92:3e:b4:14:e0:7b:21:70:35:1f:
                    4c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:84:1B:D8:61:00:31:0A:B2:21:BA:5B:B0:93:1F:F3:63:59:F5:B3
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/a2cdb3497caf4b395edece204fd6fbfcf4fddb29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.88.0/24
                  138.0.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:91:56:5e:de:c5:b3:28:bc:58:65:61:a0:14:05:0d:9d:
         fb:64:22:37:4e:a2:4a:84:cf:77:3c:98:d6:11:fa:d6:54:0e:
         81:6f:2c:a8:cb:93:3e:d7:7b:e6:5e:2a:21:22:23:81:b4:93:
         95:d7:dd:d4:04:b8:71:4b:34:d7:f3:83:3a:db:cc:7b:bf:5d:
         31:93:c9:eb:38:52:1b:fc:18:3e:ca:9d:97:21:ab:92:40:9a:
         57:27:d3:a4:52:32:b6:b9:61:6b:9a:fc:2a:84:f8:f8:93:d9:
         50:f2:61:5e:e7:a3:ec:c6:4d:2c:ee:9c:4c:76:7c:50:23:34:
         f9:b5:40:4d:ff:1a:72:0f:d6:17:82:1d:f2:3d:94:e3:94:e2:
         61:d9:21:1d:a7:6e:b0:9f:31:e2:93:4c:49:36:ad:1f:26:58:
         b4:3e:54:71:9b:73:f8:c7:0f:15:f9:ef:f4:22:49:3e:e2:c3:
         80:aa:9f:6b:63:c0:0e:61:e2:d3:5c:48:46:90:e0:f1:b6:9e:
         92:15:9a:22:a4:9d:8a:db:90:9f:6c:ee:d0:99:03:b5:7c:4a:
         13:18:1d:6b:1e:1f:64:c9:cb:2c:f8:5b:7f:7d:35:a6:6d:f4:
         a8:8d:c4:c7:5e:53:b4:78:b4:84:67:87:59:b6:f6:70:cb:11:
         5b:db:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org