Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/f97d7affcdc078aad4b768741a4ba25c29c84d01.roa
File:                     f97d7affcdc078aad4b768741a4ba25c29c84d01.roa (raw, json)
Hash identifier:          a25MySz70zlCjjGolNoBRj30O4VkfW2MDRVHzK7rcRc=
Subject key identifier:   50:AA:F9:D5:73:34:04:A8:E8:AF:0D:70:CF:1B:43:D4:78:E9:B0:FB
Certificate issuer:       /CN=bd6057380dd89aff72d7ae49a56065fc54e4eeee
Certificate serial:       012D
Authority key identifier: F0:C8:B1:04:9F:A1:06:94:7E:E6:C0:0B:55:38:AC:EB:10:2B:ED:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd6057380dd89aff72d7ae49a56065fc54e4eeee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/f97d7affcdc078aad4b768741a4ba25c29c84d01.roa
Signing time:             Mon 22 Nov 2021 20:21:05 +0000
ROA not before:           Mon 22 Nov 2021 02:00:00 +0000
ROA not after:            Wed 22 Nov 2023 02:00:00 +0000
asID:                     28397
IP address blocks:        138.94.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6057380dd89aff72d7ae49a56065fc54e4eeee
        Validity
            Not Before: Nov 22 02:00:00 2021 GMT
            Not After : Nov 22 02:00:00 2023 GMT
        Subject: CN=f97d7affcdc078aad4b768741a4ba25c29c84d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5c:bd:70:02:d4:b6:e4:88:09:e1:c6:6c:4f:
                    49:5f:98:42:79:62:44:65:81:73:b0:01:fa:73:8e:
                    83:4c:87:59:45:33:cb:c8:98:17:b4:77:75:f5:02:
                    d1:bb:81:97:ec:8a:cb:c5:17:9b:0d:c8:cf:d9:aa:
                    d8:56:5e:30:76:7d:d4:c9:56:8d:6b:8e:99:70:9f:
                    37:cb:27:10:93:5b:d9:27:ae:a4:79:f7:25:79:de:
                    a8:42:74:7e:d7:66:7b:fe:2d:ea:15:f0:8a:ae:fd:
                    b8:81:58:96:2f:1c:38:e2:74:b5:69:23:c4:66:51:
                    24:88:ec:e8:2a:0e:3c:11:a8:2f:10:ad:6c:f2:c8:
                    7f:32:3b:28:a8:d7:d3:83:67:f9:b5:f3:21:2a:37:
                    ea:50:0b:2c:5c:ef:54:cd:5e:93:d3:80:50:98:b7:
                    d7:f9:b4:d8:9e:cd:1a:6e:e7:bb:7e:38:a0:66:fb:
                    54:14:8e:e8:5d:ba:6e:be:c8:4e:f4:e7:4c:15:f2:
                    cd:9d:08:1e:b9:ac:90:79:a1:f0:80:e1:0a:22:8d:
                    f7:ef:20:81:5e:21:07:54:3a:e5:42:02:96:e9:d6:
                    c4:85:e0:ad:85:f0:80:64:54:6b:cd:80:c3:38:c3:
                    d7:46:a6:dd:8e:dd:e6:57:36:80:58:53:4e:8c:13:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:F9:D5:73:34:04:A8:E8:AF:0D:70:CF:1B:43:D4:78:E9:B0:FB
            X509v3 Authority Key Identifier:
                keyid:F0:C8:B1:04:9F:A1:06:94:7E:E6:C0:0B:55:38:AC:EB:10:2B:ED:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd6057380dd89aff72d7ae49a56065fc54e4eeee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/f97d7affcdc078aad4b768741a4ba25c29c84d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/bd6057380dd89aff72d7ae49a56065fc54e4eeee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:43:ff:89:4f:a4:57:89:e0:5e:7f:b7:fb:4e:da:33:66:1d:
         b4:25:f3:f4:ca:57:e5:09:66:60:f1:b2:69:e3:dd:c2:f4:47:
         05:de:70:5f:d7:3a:4b:0e:b9:b7:22:26:75:42:56:55:7c:0f:
         04:5c:26:d2:9e:0d:c6:97:11:ab:bf:53:67:92:73:06:62:d2:
         67:e7:51:31:ef:7a:b7:a7:ea:c0:0f:8d:e2:cd:59:61:15:c7:
         f4:fe:bb:55:14:71:47:4b:5f:e7:99:14:84:7f:85:6b:d7:1e:
         37:3d:9a:a3:38:01:53:3e:ae:96:01:58:99:4f:ad:b1:83:67:
         49:ab:d7:6f:51:1f:df:c7:01:56:96:d8:85:58:16:c0:64:ef:
         f1:a4:eb:81:cd:97:ea:ed:20:ab:33:c1:1e:ee:a4:cc:28:1a:
         06:d8:af:ab:80:46:63:ee:c8:59:62:2e:ef:a1:c4:40:33:e1:
         8b:ee:a0:b9:ad:2f:01:8a:72:76:1d:a5:75:a7:02:c0:58:18:
         97:bc:91:6c:93:ef:76:e1:7b:af:b5:69:86:82:12:7b:5c:84:
         75:20:8d:ca:59:cd:e0:f9:85:76:bd:a8:fa:51:fc:47:e2:49:
         ef:d7:39:25:68:ff:4d:a1:f4:bb:d1:2e:31:5b:c8:88:25:56:
         78:54:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org