Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/53fd7711eb155367e209ebdf373221ebdf9c6ded.roa
File:                     53fd7711eb155367e209ebdf373221ebdf9c6ded.roa (raw, json)
Hash identifier:          YB+02zhf/wioqEK4OjBrsO72PSOMsRqNORvUISeMtlc=
Subject key identifier:   FB:3F:CD:66:11:9F:E9:80:3B:5E:AE:5C:6D:63:E2:A4:49:A5:C3:7D
Certificate issuer:       /CN=dc0080782942a0e1f47428183d06112e6a9aa3d8
Certificate serial:       0D25E3
Authority key identifier: CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/53fd7711eb155367e209ebdf373221ebdf9c6ded.roa
Signing time:             Wed 24 Mar 2021 14:47:02 +0000
ROA not before:           Wed 24 Mar 2021 14:47:02 +0000
ROA not after:            Tue 24 Mar 2026 14:47:02 +0000
asID:                     265840
IP address blocks:        138.94.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861667 (0xd25e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0080782942a0e1f47428183d06112e6a9aa3d8
        Validity
            Not Before: Mar 24 14:47:02 2021 GMT
            Not After : Mar 24 14:47:02 2026 GMT
        Subject: CN=53fd7711eb155367e209ebdf373221ebdf9c6ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:e3:fb:f3:c5:5b:13:bb:33:f7:5c:fc:05:
                    cb:53:92:99:80:7f:f8:74:e8:44:48:60:dd:49:22:
                    59:34:93:37:94:ae:52:61:97:77:bf:cb:79:a1:2b:
                    7e:72:7b:df:2d:ef:2b:63:ff:4f:f8:f3:83:83:e2:
                    51:77:fa:bf:3f:31:a0:0a:3d:3e:b8:ea:a8:39:c8:
                    7e:78:95:e7:37:04:ec:ca:ad:fd:ee:22:ed:d0:6c:
                    be:91:cd:12:83:a4:d5:c9:f9:4b:ad:a6:ac:2e:b8:
                    80:cd:c5:8b:ca:e6:b6:80:da:d4:f6:b4:78:a6:d4:
                    a8:bd:05:6d:a9:2e:88:8b:b9:96:b4:8c:29:b8:f7:
                    29:47:b3:c9:ca:bc:e2:28:66:20:30:f0:f4:d7:e1:
                    f0:7a:5e:d6:6d:27:19:e5:b1:ad:8d:fd:91:b1:62:
                    92:03:fc:28:1e:bf:1d:7a:7a:2f:d2:5a:d4:5d:1f:
                    e1:aa:7c:79:2f:5f:f1:d0:1b:80:15:86:59:cc:fe:
                    0d:bc:f6:60:ad:2e:05:f3:17:dd:52:be:58:d5:61:
                    46:cd:be:66:14:ce:d2:50:50:ff:36:8a:20:02:72:
                    77:0f:8e:48:3a:f5:99:83:53:4d:3a:01:22:6e:d9:
                    dd:d1:c5:c2:17:a9:66:98:da:e4:28:70:dc:63:15:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3F:CD:66:11:9F:E9:80:3B:5E:AE:5C:6D:63:E2:A4:49:A5:C3:7D
            X509v3 Authority Key Identifier:
                keyid:CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/53fd7711eb155367e209ebdf373221ebdf9c6ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:43:c0:a6:f6:6d:2a:f3:f3:98:82:d5:bc:a6:b2:5d:d2:
         57:d7:e8:d2:0e:97:17:bc:c9:2c:7a:69:b6:c9:10:ef:31:12:
         a0:0e:58:f9:7c:0c:b4:3e:d8:db:3c:2c:44:08:80:87:81:d5:
         36:44:ab:00:40:2b:47:cb:a4:6c:e1:54:87:fb:9c:a5:9a:42:
         45:05:f9:0a:74:a0:32:86:8a:3d:0a:fe:f4:f2:5e:4f:16:2e:
         ad:81:89:d7:82:ba:3a:26:2b:7d:67:f5:bd:f7:1b:ec:65:15:
         68:e7:57:e8:cb:4f:0f:fc:1a:63:13:1f:c5:b5:07:6a:3a:db:
         cf:ed:76:81:0d:18:bf:d6:33:4d:aa:94:da:5b:8c:9e:ec:80:
         f6:40:bc:08:c1:6d:b2:bc:ab:85:30:12:ca:25:81:3d:ef:4e:
         58:34:43:98:1b:c1:49:4a:09:3f:ce:d8:b1:59:8a:17:c6:34:
         9f:dc:fc:2a:6e:59:63:f0:c9:56:cf:f6:1f:7c:f2:a8:8e:05:
         e3:01:6e:bd:45:b7:65:51:a5:e1:e5:ec:1d:92:b7:82:cb:35:
         f6:86:0e:a6:49:1b:e2:c7:c6:bf:cf:d6:ae:54:62:d4:7f:c3:
         81:58:b6:90:f9:8b:c8:00:94:76:34:d1:e0:69:31:2e:b6:06:
         28:43:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org