Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/d97fbda5ba93975c5e7b96c7f94843767cbd7c55.roa
File:                     d97fbda5ba93975c5e7b96c7f94843767cbd7c55.roa (raw, json)
Hash identifier:          EManmi/3SbPHoVr7yjPAVIcwpZFZaukYYFGzuuTZySU=
Subject key identifier:   36:17:94:CB:6E:BE:84:A5:27:FA:30:34:98:5D:82:8B:A4:A6:73:47
Certificate issuer:       /CN=0a9b0c850b0e3d642c9616f419a02c86c57e4ef3
Certificate serial:       0923C5
Authority key identifier: 41:0E:AC:7C:47:5D:F5:8B:2C:87:92:10:F6:2C:D3:8A:1E:4F:43:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/d97fbda5ba93975c5e7b96c7f94843767cbd7c55.roa
Signing time:             Thu 11 Apr 2024 14:15:47 +0000
ROA not before:           Thu 11 Apr 2024 14:15:47 +0000
ROA not after:            Sat 11 Apr 2026 14:15:47 +0000
asID:                     263751
IP address blocks:        138.97.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598981 (0x923c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9b0c850b0e3d642c9616f419a02c86c57e4ef3
        Validity
            Not Before: Apr 11 14:15:47 2024 GMT
            Not After : Apr 11 14:15:47 2026 GMT
        Subject: CN=d97fbda5ba93975c5e7b96c7f94843767cbd7c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:24:56:08:b0:11:36:9f:ae:ab:e8:29:67:
                    f1:00:42:aa:fe:9e:b2:47:2c:60:f6:35:ef:12:8b:
                    14:67:4e:a5:bb:29:66:46:2c:bd:04:5e:b4:11:cc:
                    62:5e:44:d3:01:8c:7e:5c:23:4d:d3:26:1a:48:9d:
                    24:9e:8d:c5:2b:24:80:50:37:f8:4b:8d:f1:01:49:
                    7a:96:63:f1:20:ee:4c:35:bc:db:aa:01:9f:32:c9:
                    d6:c3:2e:10:0f:37:e3:73:1a:87:69:6f:9a:c4:7b:
                    69:89:c6:e3:46:39:29:82:56:1b:3b:95:82:ef:70:
                    05:ed:0a:7a:ba:10:62:93:07:99:88:21:af:bb:97:
                    cc:19:0d:0f:03:4e:1a:6d:2e:1b:7d:2b:67:b7:46:
                    7a:d4:2d:c1:b6:57:33:1d:3a:11:ab:d1:4e:ab:9f:
                    3c:44:1a:b2:13:bd:b3:1a:e1:b0:18:64:9c:26:5c:
                    35:7d:b5:b3:b8:be:cd:0e:a5:d6:62:aa:d4:6d:0d:
                    2d:9c:be:eb:ca:8b:2b:95:1b:73:c5:ad:a6:62:41:
                    09:3d:08:9e:c6:5d:0a:32:9d:d5:ab:a0:0f:9c:01:
                    06:29:f9:0a:9d:e5:b4:95:59:56:df:7a:3c:93:f4:
                    46:e2:82:d3:de:12:28:ea:37:ac:a0:9a:ed:3a:47:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:17:94:CB:6E:BE:84:A5:27:FA:30:34:98:5D:82:8B:A4:A6:73:47
            X509v3 Authority Key Identifier:
                keyid:41:0E:AC:7C:47:5D:F5:8B:2C:87:92:10:F6:2C:D3:8A:1E:4F:43:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/d97fbda5ba93975c5e7b96c7f94843767cbd7c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:29:94:92:cb:30:fb:32:53:8d:e5:f8:ec:b2:35:73:7d:ed:
         96:0f:2d:09:93:2f:bf:80:9f:c3:75:e3:8f:9d:5f:c0:49:6a:
         fd:3a:be:59:8f:58:fe:3b:50:5d:90:4b:33:f7:1d:b6:86:6e:
         ac:0d:20:d2:de:7e:d3:b7:d6:bd:75:9c:c1:f6:60:3d:75:7e:
         f4:1d:93:ca:f6:a5:85:8a:ed:8a:b5:f8:f0:bb:66:05:0c:8e:
         f8:75:33:f4:8b:f3:0f:aa:c2:24:70:bd:aa:48:55:4b:9c:7e:
         f4:34:2b:e9:07:62:40:47:c2:ba:a5:73:6e:18:0d:68:f6:46:
         86:30:53:4d:55:21:00:fe:42:ec:f1:32:3b:1f:88:51:2a:f1:
         73:4c:f6:82:02:0e:54:38:d1:60:c8:08:c5:b3:c5:d6:bd:a3:
         9d:7e:f7:84:e1:bb:8a:5b:11:0e:06:e7:a7:12:3c:bf:a6:f6:
         62:98:e1:d9:c6:00:b2:b7:8c:12:80:49:9d:ad:72:93:41:9f:
         60:1a:fc:e2:b5:e2:6e:3b:a0:78:b3:1a:17:8c:b9:52:b6:10:
         8d:ab:e8:ff:9a:5b:8d:ac:d7:3b:cd:ee:cb:b7:03:8e:98:ee:
         b4:88:f2:c9:95:28:00:ab:09:20:9b:9b:c4:a2:d2:51:c2:1e:
         4b:3c:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org