Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/7aa8b5bc685720673cee0652aa7bfab1575f72a5.roa
File:                     7aa8b5bc685720673cee0652aa7bfab1575f72a5.roa (raw, json)
Hash identifier:          0DfN8KJ6EQvAFz9UhRFkSMo8Yl7kjokE3zppDj8xYgA=
Subject key identifier:   DD:30:D9:AF:47:54:7F:26:CF:16:F8:8C:EF:E7:9D:27:0E:DC:71:0A
Certificate issuer:       /CN=dc0080782942a0e1f47428183d06112e6a9aa3d8
Certificate serial:       0D2222
Authority key identifier: CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/7aa8b5bc685720673cee0652aa7bfab1575f72a5.roa
Signing time:             Wed 24 Mar 2021 14:47:02 +0000
ROA not before:           Wed 24 Mar 2021 14:47:02 +0000
ROA not after:            Tue 24 Mar 2026 14:47:02 +0000
asID:                     16906
IP address blocks:        138.94.244.0/24 maxlen: 24
                          138.94.245.0/24 maxlen: 24
                          138.94.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860706 (0xd2222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0080782942a0e1f47428183d06112e6a9aa3d8
        Validity
            Not Before: Mar 24 14:47:02 2021 GMT
            Not After : Mar 24 14:47:02 2026 GMT
        Subject: CN=7aa8b5bc685720673cee0652aa7bfab1575f72a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:56:3a:18:76:40:67:20:e6:66:05:bd:ce:
                    2b:9b:ff:f1:95:8c:cd:1b:45:b0:e8:62:7e:1b:a7:
                    55:c3:17:d5:e7:fd:0d:2e:48:12:46:c1:ce:48:2b:
                    4f:c6:6c:04:dd:4b:1b:8c:58:c4:7e:f8:8b:36:f9:
                    d8:32:dd:33:05:a1:df:de:60:d9:ee:11:d1:ad:03:
                    ce:e4:d9:2c:3d:ea:34:cf:5c:3e:c2:60:e1:cb:13:
                    8a:fe:9b:55:5d:18:4e:44:42:21:ec:ae:73:74:cf:
                    e5:e1:67:05:f1:39:6e:dd:96:59:b7:31:f6:cc:f3:
                    36:3c:f3:8d:f1:fa:f8:6f:ac:33:fb:9f:a6:bd:35:
                    92:7d:ca:f1:d8:35:09:74:f5:50:18:8b:7d:6b:e6:
                    1a:b1:94:d6:a1:35:5f:58:14:15:72:dc:0e:61:2c:
                    5e:2b:d8:f4:9e:8d:af:47:1d:af:e2:37:61:73:15:
                    d6:0b:41:08:51:84:6b:a9:31:fa:df:d0:30:bd:43:
                    c5:dc:66:7c:5e:4c:21:54:b4:75:c3:c2:54:16:e3:
                    96:cb:03:3e:1e:d4:4b:07:24:af:cd:ef:46:cf:68:
                    de:c6:0d:0a:8a:63:34:b5:c4:85:bd:83:7d:df:ee:
                    14:e5:6e:c0:81:c2:e5:d7:cf:87:bd:9f:55:af:96:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:30:D9:AF:47:54:7F:26:CF:16:F8:8C:EF:E7:9D:27:0E:DC:71:0A
            X509v3 Authority Key Identifier:
                keyid:CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/7aa8b5bc685720673cee0652aa7bfab1575f72a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.244.0-138.94.246.255

    Signature Algorithm: sha256WithRSAEncryption
         60:93:a3:e8:25:66:db:b1:47:9d:4e:7a:f7:7e:a9:b4:8c:42:
         79:bf:f7:bd:f7:a9:ab:78:eb:b6:71:0b:20:69:03:49:3c:c4:
         51:fa:9c:5b:3b:af:85:a9:66:96:5b:ad:15:2f:b5:bf:01:24:
         73:06:f4:a6:38:1b:d0:e9:ef:ca:00:e3:db:b5:d2:83:d8:a7:
         6c:3f:87:14:33:48:09:be:e0:9b:d4:d2:8d:1c:f1:8b:48:4d:
         91:11:d9:53:90:ec:38:71:5e:1b:7e:47:3d:7d:af:fa:b3:c5:
         e4:44:0b:76:77:e3:29:36:4c:df:9f:0f:9c:b4:16:07:76:a6:
         11:e1:99:0f:f2:79:24:0d:5c:78:9b:69:ff:69:83:b8:af:1a:
         61:1e:79:b8:76:d1:f0:a1:84:fd:1f:48:21:c8:d4:e8:fe:a3:
         d6:34:6a:57:b0:68:72:86:d2:ae:33:d7:21:8f:17:84:c3:6b:
         0f:11:5a:7b:c0:80:33:9a:0d:d5:74:f8:88:f6:0f:5f:74:1e:
         62:b1:19:2a:de:cc:e1:85:74:1a:16:d8:59:64:8d:73:a0:5b:
         66:97:d9:23:83:6a:45:f3:52:bb:7f:d0:e1:db:50:c0:68:44:
         dd:98:1f:f9:04:02:c9:e7:cc:22:f9:1d:04:87:ea:47:8c:71:
         c4:d7:bf:5f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDSIiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj
MDA4MDc4Mjk0MmEwZTFmNDc0MjgxODNkMDYxMTJlNmE5YWEzZDgwHhcNMjEwMzI0
MTQ0NzAyWhcNMjYwMzI0MTQ0NzAyWjAzMTEwLwYDVQQDEyg3YWE4YjViYzY4NTcy
MDY3M2NlZTA2NTJhYTdiZmFiMTU3NWY3MmE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiX1WOhh2QGcg5mYFvc4rm//xlYzNG0Ww6GJ+G6dVwxfV5/0N
LkgSRsHOSCtPxmwE3UsbjFjEfviLNvnYMt0zBaHf3mDZ7hHRrQPO5NksPeo0z1w+
wmDhyxOK/ptVXRhOREIh7K5zdM/l4WcF8Tlu3ZZZtzH2zPM2PPON8fr4b6wz+5+m
vTWSfcrx2DUJdPVQGIt9a+YasZTWoTVfWBQVctwOYSxeK9j0no2vRx2v4jdhcxXW
C0EIUYRrqTH639AwvUPF3GZ8XkwhVLR1w8JUFuOWywM+HtRLBySvze9Gz2jexg0K
imM0tcSFvYN93+4U5W7AgcLl18+HvZ9Vr5Z59wIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFN0w2a9HVH8mzxb4jO/nnScO3HEKMB8GA1UdIwQYMBaAFM+9wQNtj/YmOac1
8ZAqM0smMq1OMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGMwMDgw
NzgyOTQyYTBlMWY0NzQyODE4M2QwNjExMmU2YTlhYTNkOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGFlMWJjNDctNDIyYy00MDJmLWJmMGUtYzMwZjQ5
MmEyMmRjLzdhYThiNWJjNjg1NzIwNjczY2VlMDY1MmFhN2JmYWIxNTc1ZjcyYTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYWUxYmM0Ny00MjJjLTQwMmYtYmYwZS1jMzBm
NDkyYTIyZGMvZGMwMDgwNzgyOTQyYTBlMWY0NzQyODE4M2QwNjExMmU2YTlhYTNk
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCil70AwQAil72MA0GCSqGSIb3DQEBCwUAA4IBAQBgk6Po
JWbbsUedTnr3fqm0jEJ5v/e996mreOu2cQsgaQNJPMRR+pxbO6+FqWaWW60VL7W/
ASRzBvSmOBvQ6e/KAOPbtdKD2KdsP4cUM0gJvuCb1NKNHPGLSE2REdlTkOw4cV4b
fkc9fa/6s8XkRAt2d+MpNkzfnw+ctBYHdqYR4ZkP8nkkDVx4m2n/aYO4rxphHnm4
dtHwoYT9H0ghyNTo/qPWNGpXsGhyhtKuM9chjxeEw2sPEVp7wIAzmg3VdPiI9g9f
dB5isRkq3szhhXQaFthZZI1zoFtml9kjg2pF81K7f9Dh21DAaETdmB/5BALJ58wi
+R0Eh+pHjHHE179f
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org