Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/6c17cacd62684d0d51fe63025b233f7d7f20afe4.roa
File:                     6c17cacd62684d0d51fe63025b233f7d7f20afe4.roa (raw, json)
Hash identifier:          wbVPmClnurIZgeg/9KErIWXqltjjXOmD8ubNZYA6OIY=
Subject key identifier:   60:6C:89:1D:F2:C6:AE:02:26:CA:D3:3D:93:25:38:F5:DD:65:B4:AB
Certificate issuer:       /CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Certificate serial:       271BA7
Authority key identifier: 88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/6c17cacd62684d0d51fe63025b233f7d7f20afe4.roa
Signing time:             Fri 12 Jan 2024 19:34:46 +0000
ROA not before:           Fri 12 Jan 2024 19:34:46 +0000
ROA not after:            Mon 12 Jan 2026 19:34:46 +0000
asID:                     61506
IP address blocks:        138.204.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2562983 (0x271ba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
        Validity
            Not Before: Jan 12 19:34:46 2024 GMT
            Not After : Jan 12 19:34:46 2026 GMT
        Subject: CN=6c17cacd62684d0d51fe63025b233f7d7f20afe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:db:df:80:0e:21:95:0c:c1:57:55:ad:2f:3c:
                    de:80:1a:ce:a7:c1:4a:7e:31:74:da:b7:d7:70:f4:
                    99:ca:03:f6:fb:5f:fe:f7:83:fa:2e:19:36:be:39:
                    b8:05:29:23:8d:24:c1:bf:6f:42:09:71:18:4e:f5:
                    b4:99:4b:af:81:50:92:fa:9e:9b:95:28:0c:80:09:
                    28:cb:3a:de:92:01:c9:eb:e6:84:b2:0b:fe:aa:10:
                    3f:4b:83:3f:01:4a:be:f4:48:3c:99:e5:4d:9f:5d:
                    b6:c2:f1:98:65:8b:9f:fc:26:bb:ed:b8:c7:92:0a:
                    8f:13:29:41:f3:f5:8a:54:10:29:a6:63:28:fd:75:
                    37:5b:bd:e6:0c:d7:7d:20:ed:8d:c3:41:8b:70:b5:
                    84:d3:56:66:8e:7c:12:9c:23:3b:15:34:8d:2a:18:
                    1c:69:39:19:17:3f:18:2d:b3:45:6a:9a:74:f5:64:
                    cb:3d:ce:02:45:0d:5f:e2:6d:74:99:12:c2:b3:1e:
                    ed:0c:4e:1c:92:15:4b:68:5e:88:fc:7f:5e:7b:89:
                    46:86:b8:e1:66:4b:af:a6:21:47:22:d0:ae:e2:85:
                    f3:3b:f5:f7:12:cb:c2:1f:51:bd:29:35:28:e5:b6:
                    0d:70:98:27:b8:0b:e1:12:28:ea:d8:a5:af:2d:62:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6C:89:1D:F2:C6:AE:02:26:CA:D3:3D:93:25:38:F5:DD:65:B4:AB
            X509v3 Authority Key Identifier:
                keyid:88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/6c17cacd62684d0d51fe63025b233f7d7f20afe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9d44e5cc8623c5cdabd559bdad688e9f03759533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:61:9d:3f:6d:9a:e5:19:92:f2:9b:c5:56:04:ab:9c:33:45:
         c1:22:3e:b6:ec:f5:69:15:97:7a:93:4c:d7:01:1f:4d:8d:e5:
         2b:9b:10:fe:0f:36:cb:bc:f2:2a:05:27:5d:ba:9c:79:ea:51:
         06:10:c1:af:1f:ca:36:75:06:10:8b:df:d7:9c:d1:d8:b2:72:
         9a:b1:3d:c4:f9:d2:a0:a0:7f:ff:e6:0c:d0:94:ee:97:e1:44:
         e2:5f:96:02:36:17:f0:53:87:04:65:08:7b:62:d9:ff:c7:7d:
         62:1a:1f:ec:ce:b7:7a:19:9b:cf:96:3d:88:61:30:27:c1:fb:
         6c:ef:a6:ae:73:9c:f3:8c:4f:f4:03:e1:35:da:5f:05:e2:de:
         3b:4a:f2:be:24:95:22:22:ed:d5:e0:db:90:d4:b6:4b:7f:c7:
         ba:a9:6f:59:1e:a4:15:38:26:05:01:d6:64:11:7b:6b:9f:d2:
         14:2c:69:60:7b:37:0a:24:b1:0c:2e:57:6d:23:81:bf:c0:6a:
         7c:5c:5f:81:73:11:0c:fa:10:5e:ea:85:a9:e6:d2:82:9a:41:
         cf:63:a5:0c:4d:9d:29:f4:33:83:98:8e:6e:4d:5c:fc:96:b1:
         30:09:8c:e8:40:63:de:61:3a:63:10:1a:9e:ca:2e:a9:7f:ed:
         6f:6c:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org