Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/c5da19864ca37f10090a3f203ee5a595abd6c8d0.roa
File:                     c5da19864ca37f10090a3f203ee5a595abd6c8d0.roa (raw, json)
Hash identifier:          xtOQTkzASeRIQt9VMntXb5LOcfkXehyX2eGx8SYC8Tw=
Subject key identifier:   93:18:96:EE:91:3D:0B:BE:9B:B9:34:E1:FF:7E:37:5B:EC:92:19:8B
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       023D1D
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/c5da19864ca37f10090a3f203ee5a595abd6c8d0.roa
Signing time:             Wed 01 Sep 2021 17:36:39 +0000
ROA not before:           Wed 01 Sep 2021 03:00:00 +0000
ROA not after:            Fri 01 Sep 2023 03:00:00 +0000
asID:                     263833
IP address blocks:        138.255.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146717 (0x23d1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Sep  1 03:00:00 2021 GMT
            Not After : Sep  1 03:00:00 2023 GMT
        Subject: CN=c5da19864ca37f10090a3f203ee5a595abd6c8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:a9:e0:27:26:21:e5:9e:85:0a:85:89:43:
                    5b:92:28:e5:e9:98:b6:dc:da:07:cc:3b:d4:fd:ba:
                    67:42:e7:da:42:2f:23:5e:f0:3e:8c:1e:7c:3e:c5:
                    69:a5:41:f6:eb:dc:94:aa:60:70:08:a5:6f:6e:9b:
                    64:d1:f6:25:fb:11:44:02:08:23:91:4c:10:48:a4:
                    dd:6d:7c:76:06:77:16:42:ba:08:61:67:b7:ff:f5:
                    83:d0:7a:d1:eb:55:b3:ce:3e:5d:cf:44:5f:da:f3:
                    db:af:d4:22:31:5e:ff:a9:a9:9f:2a:a6:ee:6e:9b:
                    d6:fe:2d:23:e1:b3:2f:e3:7c:22:0f:b9:43:3a:6b:
                    e8:4e:e8:e2:d2:e4:61:2a:44:d2:a7:24:cd:d4:7a:
                    2a:57:b7:e3:f6:82:92:09:67:86:bd:94:06:66:02:
                    09:71:14:7c:40:65:87:98:bb:7b:99:36:22:62:21:
                    55:98:e2:26:d0:85:ff:86:97:54:7b:f0:fd:c1:9e:
                    2d:2e:78:a9:69:70:84:70:27:0e:f5:f1:4e:85:30:
                    89:cd:91:04:e1:09:c9:67:65:d6:df:b5:9f:31:17:
                    85:de:44:c7:cb:0e:1d:d7:7b:ae:cc:67:55:8c:05:
                    1f:47:27:c9:45:9c:8d:07:75:20:02:c6:70:b5:b3:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:18:96:EE:91:3D:0B:BE:9B:B9:34:E1:FF:7E:37:5B:EC:92:19:8B
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/c5da19864ca37f10090a3f203ee5a595abd6c8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:3f:7c:82:11:05:26:81:e7:ad:d6:4e:24:73:84:b8:53:e5:
         00:31:45:0d:ad:22:16:54:78:5a:f7:ca:57:66:ba:08:d9:4e:
         c1:97:f5:7f:9c:58:fc:55:25:d5:b3:bf:4a:29:49:da:e1:1b:
         a4:dc:0f:97:e1:ba:b1:82:ab:ed:b7:dc:df:47:b7:5c:78:dd:
         92:a3:9c:06:97:82:c3:60:1d:fe:ee:32:9c:2f:01:af:ed:27:
         87:02:e0:d8:ab:8e:76:1d:d7:b3:92:04:47:c6:2f:b6:19:d6:
         0f:44:a8:6a:52:86:25:35:49:d7:71:99:bf:02:b7:be:9d:5c:
         60:69:7c:30:ba:12:a3:79:a5:6d:a9:22:b6:89:38:a2:13:9c:
         ed:9e:7c:78:07:c6:bc:26:8d:5c:3b:8f:50:88:d8:94:00:6a:
         bd:e4:59:db:37:fa:82:90:f4:23:a0:7d:69:2a:9a:7c:63:a1:
         5a:63:d4:13:3c:89:88:fd:9d:a3:03:a6:67:be:37:76:d5:16:
         be:00:e4:cf:05:98:28:0f:7d:eb:04:eb:d7:99:a8:e8:1b:7f:
         3e:ea:a8:ec:d0:f1:d5:87:70:c0:22:08:05:0d:95:fd:cf:2f:
         f7:c1:59:09:1f:a8:7e:eb:45:e4:44:db:6b:30:f6:87:3a:51:
         04:3a:c4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-ams.rpki-client.org