Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/5d431b284df671f6e937ef446db68ea7f986773c.roa
File:                     5d431b284df671f6e937ef446db68ea7f986773c.roa (raw, json)
Hash identifier:          pgzKGhXxQNwlDeC/H4YOwb63w23KN4M5UqSWST8IBso=
Subject key identifier:   43:C1:5A:83:0D:38:CE:C9:4A:FB:3F:D8:85:33:D1:34:89:EF:F7:65
Certificate issuer:       /CN=231291584c896b71599d4bb8b4d15a658a7149ad
Certificate serial:       06FB
Authority key identifier: 64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/231291584c896b71599d4bb8b4d15a658a7149ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/5d431b284df671f6e937ef446db68ea7f986773c.roa
Signing time:             Tue 28 Sep 2021 18:47:33 +0000
ROA not before:           Tue 28 Sep 2021 03:00:00 +0000
ROA not after:            Thu 28 Sep 2023 03:00:00 +0000
asID:                     20207
IP address blocks:        138.122.128.0/22 maxlen: 24
                          181.174.172.0/22 maxlen: 24
                          181.174.176.0/21 maxlen: 24
                          2803:cc80::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231291584c896b71599d4bb8b4d15a658a7149ad
        Validity
            Not Before: Sep 28 03:00:00 2021 GMT
            Not After : Sep 28 03:00:00 2023 GMT
        Subject: CN=5d431b284df671f6e937ef446db68ea7f986773c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:48:99:af:6f:d3:7c:8b:33:11:1b:84:b2:41:
                    7b:8c:f5:fe:dc:7d:ec:64:06:49:a9:83:fd:f0:37:
                    cf:46:00:35:d9:3c:7b:53:23:60:86:70:39:c1:bd:
                    68:06:f0:f1:05:97:5c:d1:f8:3a:8d:2f:e3:14:3c:
                    35:36:30:b9:7c:a4:44:75:67:ab:07:0f:23:a5:71:
                    f5:82:1f:bc:cd:28:4b:a0:3f:d4:3c:ca:b1:e5:f2:
                    98:b2:62:ca:fe:e1:0d:e0:9f:13:5e:df:f4:a8:11:
                    84:89:0a:14:c7:9a:d6:de:58:00:d8:6e:2a:57:ab:
                    a1:6b:d3:78:d1:61:4b:b9:dc:e3:38:29:d8:6c:0a:
                    02:00:c5:39:a5:69:0a:82:20:6c:5c:70:54:84:1b:
                    7b:64:2b:97:88:7f:30:2b:bf:95:5d:b2:10:74:4e:
                    b7:b3:b7:28:d1:8c:1d:8b:f2:7d:79:36:a1:40:a5:
                    1e:fd:0e:4e:10:30:3a:14:0e:5c:2c:02:f4:5c:8d:
                    ea:b3:a8:66:bd:6d:00:74:eb:a9:9b:c4:8c:f7:ce:
                    90:c8:9d:ce:22:0f:de:3a:26:3d:5b:b2:6c:86:98:
                    25:0c:74:e2:e9:35:0e:22:92:de:e6:72:33:a7:fa:
                    1b:47:31:4d:3c:f0:ef:33:71:e9:90:0d:53:0b:4b:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C1:5A:83:0D:38:CE:C9:4A:FB:3F:D8:85:33:D1:34:89:EF:F7:65
            X509v3 Authority Key Identifier:
                keyid:64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/231291584c896b71599d4bb8b4d15a658a7149ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/5d431b284df671f6e937ef446db68ea7f986773c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/231291584c896b71599d4bb8b4d15a658a7149ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.128.0/22
                  181.174.172.0-181.174.183.255
                IPv6:
                  2803:cc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:49:57:ce:66:14:69:82:d8:bf:af:83:20:2d:ce:a1:e7:
         e3:8b:ef:31:b8:c8:cb:fa:d7:7c:92:56:20:35:bf:d7:73:b3:
         64:6c:a9:99:1b:3b:fb:86:bc:14:fe:b4:68:51:fa:34:bb:37:
         0f:c4:dc:8f:ad:89:8e:9e:af:6f:89:c4:8a:0f:e8:b0:d1:80:
         c2:37:64:49:9a:b3:5b:7d:aa:bf:42:b0:a1:e2:f2:20:3c:00:
         df:3f:e9:94:42:d0:59:d5:91:54:c2:68:82:85:fb:24:d1:d9:
         b9:4d:58:1f:da:ef:82:e1:2d:19:bb:d3:e2:c9:fe:58:c6:b6:
         ef:40:db:83:11:01:a7:ec:a4:b9:a6:5c:0e:b8:bc:58:fa:98:
         68:1d:dd:46:5e:a7:ee:8e:17:1a:c5:27:55:be:5a:fb:16:d1:
         2f:3f:9c:0c:c6:7c:0c:c7:c9:df:cb:30:25:6b:c7:54:5b:49:
         29:c5:03:0f:f1:e3:cd:79:38:fe:3c:b8:45:e5:aa:cd:80:a2:
         bb:73:9e:f3:c4:26:03:da:e3:99:16:84:a3:a9:a1:c3:00:9b:
         8f:b6:e9:4d:f8:16:c8:e0:25:56:e4:fa:ff:43:77:79:0e:b0:
         59:7b:9e:65:42:28:bc:41:eb:6d:fb:e0:eb:78:d4:8b:c0:ed:
         b9:30:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org