Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/c6085d3410319662515183d34c500a206a4aa300.roa
File:                     c6085d3410319662515183d34c500a206a4aa300.roa (raw, json)
Hash identifier:          KRAhE8BmGr5W9kXn7ZvRuk2zqz4obbRmzBfcA/JURdI=
Subject key identifier:   34:DD:0D:1B:A6:F8:0D:07:F4:E8:49:3C:2A:B4:08:3C:9B:C9:5E:CE
Certificate issuer:       /CN=fd27aaa53c78abaf8042781fb063418e78442bcb
Certificate serial:       0D38FC
Authority key identifier: 1D:56:B7:C7:F8:CD:1C:28:8D:85:4E:C1:89:2B:4A:9E:AF:B9:4F:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd27aaa53c78abaf8042781fb063418e78442bcb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/c6085d3410319662515183d34c500a206a4aa300.roa
Signing time:             Wed 24 Mar 2021 14:34:23 +0000
ROA not before:           Wed 24 Mar 2021 14:34:23 +0000
ROA not after:            Tue 24 Mar 2026 14:34:23 +0000
asID:                     264681
IP address blocks:        138.186.120.0/22 maxlen: 24
                          170.79.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866556 (0xd38fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd27aaa53c78abaf8042781fb063418e78442bcb
        Validity
            Not Before: Mar 24 14:34:23 2021 GMT
            Not After : Mar 24 14:34:23 2026 GMT
        Subject: CN=c6085d3410319662515183d34c500a206a4aa300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e8:e7:43:21:25:82:8c:bf:61:54:99:11:45:
                    57:27:03:0c:c0:88:6b:46:1c:0e:5c:0e:c4:1d:96:
                    8e:5d:8b:67:e8:98:e7:54:da:7c:8b:5c:07:48:8c:
                    95:66:98:94:f7:0a:8b:76:c2:dc:77:85:22:8b:c3:
                    a1:f8:3b:91:86:4d:a5:40:6f:c1:56:c3:a8:26:e9:
                    54:ef:fb:4b:53:f0:bb:55:0a:e8:7e:8a:1b:1e:db:
                    ec:35:3b:ff:a2:a7:75:56:80:3b:6c:04:1c:c0:52:
                    33:93:e6:11:d7:a2:e5:e7:de:8d:71:67:f2:f1:e7:
                    e4:f9:5b:50:9c:6b:65:51:31:4a:9d:26:f3:da:d9:
                    7a:f5:a0:91:bb:82:fe:8a:92:4e:25:42:68:f6:76:
                    d1:67:b0:11:b2:ee:6a:4b:4a:10:ce:e9:30:22:26:
                    85:81:2a:c0:30:87:72:5a:00:8a:60:bb:07:66:f3:
                    14:3f:73:0b:52:f9:73:74:3b:0d:f1:61:31:de:8f:
                    2a:fe:80:92:0a:89:d1:48:4f:6a:20:5c:c6:c8:4c:
                    da:b0:8e:a0:a1:40:be:37:37:75:40:1e:c1:d5:32:
                    14:4d:d1:d0:8b:09:19:2d:e2:d8:ec:cf:ec:f2:ee:
                    24:f3:29:79:ea:80:6d:41:3c:16:f5:06:0b:ac:8f:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DD:0D:1B:A6:F8:0D:07:F4:E8:49:3C:2A:B4:08:3C:9B:C9:5E:CE
            X509v3 Authority Key Identifier:
                keyid:1D:56:B7:C7:F8:CD:1C:28:8D:85:4E:C1:89:2B:4A:9E:AF:B9:4F:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd27aaa53c78abaf8042781fb063418e78442bcb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/c6085d3410319662515183d34c500a206a4aa300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.120.0/22
                  170.79.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:be:15:83:1d:50:60:db:21:78:f0:85:f5:df:7c:38:d1:36:
         a8:3b:f0:eb:0e:9d:1d:93:b4:e6:73:9f:8c:64:7e:26:c1:9d:
         d5:48:3a:f1:65:1b:9b:3c:54:72:a4:f1:19:4b:67:9a:61:fa:
         b2:0b:c6:bc:61:53:bd:b8:17:d1:85:85:32:1a:61:43:31:92:
         58:c0:e8:81:55:ed:11:01:10:a9:72:2c:86:50:09:5b:f6:46:
         56:68:9d:c4:fa:44:11:7b:b2:0e:85:fe:ce:0f:9c:03:03:f2:
         a3:d5:3e:9c:a3:cc:65:81:41:e0:30:1c:18:4d:af:11:d2:d0:
         66:54:a2:29:2c:3f:fa:3a:31:a4:75:4e:ca:b8:2a:87:6e:2e:
         a0:03:6d:6b:ac:75:e3:89:a1:2c:8c:67:46:de:0d:41:e7:34:
         f8:22:f4:10:76:c3:d4:da:53:a6:42:7e:d0:fa:67:7f:89:90:
         59:64:fb:44:96:ed:9f:d0:98:89:97:3e:55:04:eb:a8:90:98:
         12:8a:f4:06:d0:74:24:91:34:4e:fb:e4:a4:41:60:66:6e:46:
         58:bf:f0:0d:76:5c:42:cb:8f:a6:b5:23:16:96:d8:ee:25:c3:
         29:43:8a:ba:db:0e:2d:4f:e7:6e:34:14:23:df:81:8a:99:42:
         82:64:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org