Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/63e3e7da2481511cc4d7a7c62e27bd0f9998b372.roa
File:                     63e3e7da2481511cc4d7a7c62e27bd0f9998b372.roa (raw, json)
Hash identifier:          RB45k42R/z18rgrObt+fCDBEfZNNOGzXHY1/imWSy7Q=
Subject key identifier:   86:C5:08:BB:10:A1:DB:F1:A6:49:0A:2C:CF:3D:D8:70:4F:01:72:68
Certificate issuer:       /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial:       18E412
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/63e3e7da2481511cc4d7a7c62e27bd0f9998b372.roa
Signing time:             Wed 11 Oct 2023 18:21:27 +0000
ROA not before:           Tue 10 Oct 2023 18:21:27 +0000
ROA not after:            Sat 11 Oct 2025 18:21:27 +0000
asID:                     27775
IP address blocks:        138.186.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631250 (0x18e412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
        Validity
            Not Before: Oct 10 18:21:27 2023 GMT
            Not After : Oct 11 18:21:27 2025 GMT
        Subject: CN=63e3e7da2481511cc4d7a7c62e27bd0f9998b372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5b:1d:36:a6:60:7c:7b:3f:a3:f0:ae:cf:ef:
                    2a:ea:e7:27:6f:c8:8a:0f:ac:58:51:71:47:9a:3b:
                    06:a7:23:82:93:60:39:e6:f8:f6:46:a7:4b:b6:2b:
                    fb:50:23:d7:7a:85:af:03:c6:65:2f:cc:d6:97:ae:
                    25:84:b0:17:ed:b9:f4:8d:48:73:b2:88:fe:78:9a:
                    29:f4:be:58:ac:4b:7b:04:6f:1e:8b:86:1e:c7:29:
                    b1:a4:0b:cc:81:a5:ff:b7:7e:58:c0:3d:78:9a:18:
                    d0:cd:b0:2a:58:a7:0a:af:2d:ed:b6:2a:4d:e2:8f:
                    76:0e:ff:82:6d:64:e5:f5:3b:d5:cd:66:f5:20:f0:
                    31:79:3e:de:11:85:c7:8e:99:d3:c7:c1:f5:24:76:
                    bc:68:2b:81:48:9e:89:43:4f:c3:6f:6f:d0:13:cd:
                    fe:af:7a:a5:91:47:4a:a3:74:bb:56:5d:ba:51:0b:
                    a4:c0:b7:f0:62:14:1c:3d:a8:66:a4:92:a1:b9:78:
                    53:2c:06:71:ec:69:87:7d:4c:75:e2:4c:52:02:9b:
                    89:5a:70:53:6f:61:ed:42:c4:bf:f8:6f:24:89:89:
                    cc:cc:c5:ee:60:dc:ca:ca:c4:38:8c:3f:06:62:47:
                    b5:7e:28:cc:59:87:52:5b:1a:ee:6d:d6:46:24:da:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C5:08:BB:10:A1:DB:F1:A6:49:0A:2C:CF:3D:D8:70:4F:01:72:68
            X509v3 Authority Key Identifier:
                keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/63e3e7da2481511cc4d7a7c62e27bd0f9998b372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:93:a6:4a:05:42:fc:1e:25:3a:8d:a3:ed:24:f2:82:c3:ef:
         18:66:d0:da:34:5c:46:c6:ea:d8:ee:90:ba:1c:58:00:34:0a:
         ea:a4:d7:22:5c:13:0d:42:9b:0f:e7:72:ca:88:4f:af:5f:f8:
         f5:86:e7:06:d9:ee:7c:2d:0c:0f:04:ca:4b:b9:de:07:24:a1:
         1d:e5:8f:71:c9:16:ae:60:2b:c9:cd:a1:24:61:d0:b7:d6:06:
         75:e3:e4:e6:92:f1:61:17:6f:1a:2a:65:9b:dc:4c:42:6c:d1:
         57:43:80:2c:01:08:9d:f4:53:f3:9b:6b:08:de:84:33:1a:b2:
         7b:92:81:81:3f:34:cd:6b:07:c5:c3:b1:49:46:66:1f:07:01:
         7e:56:a7:4e:76:92:e6:95:6b:e8:dd:7e:11:49:c1:22:eb:7d:
         80:04:ed:b8:24:19:7d:d8:6f:7a:36:32:5f:53:58:5a:50:e4:
         95:4e:38:fb:0c:70:a6:17:74:9e:00:6c:12:e6:7e:5b:75:ff:
         d2:ac:cc:0c:c0:dc:95:21:c5:2b:6b:a5:d7:07:eb:cc:6c:12:
         8f:d5:1b:92:13:2d:0d:72:8a:66:1d:70:4f:70:f1:dc:d4:d1:
         9e:e2:82:74:d0:aa:f1:1d:64:09:6f:ce:c9:c5:8b:ae:0e:45:
         07:2c:a3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org