Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/02ce07c0d2a3609f6c7dd482f0ab6a23e417c78e.roa
File:                     02ce07c0d2a3609f6c7dd482f0ab6a23e417c78e.roa (raw, json)
Hash identifier:          N9WLO6fHlPOD9VZ4QsfBfZz3sSTAGsAJeaXgp2YuVpk=
Subject key identifier:   9B:19:66:38:B7:68:1D:74:59:45:B5:F7:01:CB:5D:01:FD:65:99:E6
Certificate issuer:       /CN=1a88658a27071695cf06a4d90d6df905871a233a
Certificate serial:       B108
Authority key identifier: 1A:D8:E3:FE:32:13:C7:51:55:FB:E4:F8:A7:4E:79:6A:C8:A6:D8:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a88658a27071695cf06a4d90d6df905871a233a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/02ce07c0d2a3609f6c7dd482f0ab6a23e417c78e.roa
Signing time:             Mon 13 Sep 2021 20:06:01 +0000
ROA not before:           Thu 19 Aug 2021 03:00:00 +0000
ROA not after:            Sat 19 Aug 2023 03:00:00 +0000
asID:                     265501
IP address blocks:        138.255.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45320 (0xb108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a88658a27071695cf06a4d90d6df905871a233a
        Validity
            Not Before: Aug 19 03:00:00 2021 GMT
            Not After : Aug 19 03:00:00 2023 GMT
        Subject: CN=02ce07c0d2a3609f6c7dd482f0ab6a23e417c78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:d6:cd:d7:97:9e:70:bd:8b:cc:7b:e3:83:
                    5f:2a:5a:00:a7:c4:a0:c3:cd:d6:af:ed:af:da:8b:
                    21:b3:2c:88:af:93:40:70:5f:01:9a:33:a4:2d:85:
                    59:8f:ab:9f:88:c0:37:81:83:d9:8e:5f:8c:e3:96:
                    ff:d9:74:74:11:01:c0:ab:ba:12:0c:01:f6:08:d5:
                    e9:2a:a2:a4:9c:66:15:5d:89:81:70:cc:96:4a:33:
                    94:10:00:7f:88:55:01:f2:a1:f0:39:fa:d1:67:0e:
                    1e:1d:82:8d:dd:df:6e:b2:79:35:88:bc:55:c6:68:
                    72:e1:a4:b0:3e:b3:a2:7d:c4:ac:dc:f9:db:5f:f3:
                    26:ef:35:58:72:2f:62:38:cd:ec:ec:03:80:d8:e6:
                    c7:9f:a8:25:24:eb:ff:68:49:fc:fb:41:29:9c:37:
                    31:a0:f0:0a:57:ce:29:e0:85:3d:25:24:c0:1d:41:
                    02:d9:68:74:09:2d:ef:d8:99:89:db:73:dc:37:bb:
                    e4:11:bc:1d:4e:52:d9:7b:56:c6:77:5e:b1:35:45:
                    1d:54:d4:3b:8f:73:78:07:1b:01:be:31:47:ae:39:
                    87:d3:0a:d5:a9:31:26:4d:d0:78:cd:b2:ff:e8:26:
                    ab:a7:0e:cb:62:50:1b:95:5d:6b:f7:db:c7:77:8b:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:19:66:38:B7:68:1D:74:59:45:B5:F7:01:CB:5D:01:FD:65:99:E6
            X509v3 Authority Key Identifier:
                keyid:1A:D8:E3:FE:32:13:C7:51:55:FB:E4:F8:A7:4E:79:6A:C8:A6:D8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a88658a27071695cf06a4d90d6df905871a233a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/02ce07c0d2a3609f6c7dd482f0ab6a23e417c78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/1a88658a27071695cf06a4d90d6df905871a233a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:c2:fb:5a:31:e1:1c:a3:15:b9:cb:8c:f2:e4:15:11:2c:
         0b:86:71:52:8d:62:08:24:a5:e9:ad:c2:1b:c2:4d:a1:4e:3a:
         c9:2b:76:13:54:c0:79:2f:f1:c1:c6:4f:da:ad:85:1f:08:69:
         52:2d:e4:ed:d6:74:3e:c8:c2:aa:87:19:e8:92:6d:42:5f:71:
         7e:25:b5:cb:48:fb:ec:1e:8a:9d:e7:de:a2:7e:64:e9:92:79:
         98:09:1f:af:1f:44:61:22:86:49:c8:82:da:ee:21:9b:69:47:
         73:28:9c:8f:aa:3d:ac:7f:bf:10:5f:db:ea:06:40:57:a2:43:
         2a:c0:77:c9:2c:2f:2c:0c:6d:17:fb:9a:01:42:53:11:ab:59:
         68:15:8d:66:d1:b5:22:e7:ff:af:c6:a2:39:0b:39:0d:e9:27:
         c3:50:ed:a3:1f:2e:4b:fd:f0:e5:31:8a:b4:c0:db:3a:0d:86:
         b8:e5:66:56:32:ef:ec:70:87:fc:c1:23:f2:a5:2a:d0:4d:70:
         31:fd:15:a0:c5:31:2f:df:40:57:58:30:ef:ef:2d:37:b4:e5:
         ca:e6:b5:9f:fd:6d:47:50:73:a1:14:d1:83:48:64:2f:d9:13:
         16:8a:eb:9e:09:79:2d:4e:1d:68:4f:a8:dd:02:9e:b9:6c:fd:
         46:88:b5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org