Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/51516043e88bb2665f256121397096dd9b9a34c5.roa
File:                     51516043e88bb2665f256121397096dd9b9a34c5.roa (raw, json)
Hash identifier:          yb7xK6Ois34mqjR6Wd43olIGhZRME1D6UJXCgdERXLE=
Subject key identifier:   59:99:F2:D4:6B:69:6E:1A:D4:5E:99:BE:74:60:CE:19:82:9E:8A:D6
Certificate issuer:       /CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
Certificate serial:       133EBF
Authority key identifier: 61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/51516043e88bb2665f256121397096dd9b9a34c5.roa
Signing time:             Fri 14 Apr 2023 08:30:14 +0000
ROA not before:           Thu 13 Apr 2023 08:30:14 +0000
ROA not after:            Sat 12 Apr 2025 08:30:14 +0000
asID:                     270076
IP address blocks:        138.186.76.0/23 maxlen: 23
                          138.186.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261247 (0x133ebf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
        Validity
            Not Before: Apr 13 08:30:14 2023 GMT
            Not After : Apr 12 08:30:14 2025 GMT
        Subject: CN=51516043e88bb2665f256121397096dd9b9a34c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9c:c5:67:78:23:26:26:eb:87:0e:c1:00:2e:
                    4e:c4:c0:d9:3d:de:df:1b:c6:7e:6f:62:c4:12:31:
                    af:bc:83:54:64:9f:1d:4a:b5:30:67:69:13:c0:01:
                    f1:11:24:95:76:dd:3b:e7:c5:ce:f7:a4:22:20:26:
                    e8:ef:4e:b6:26:73:56:e1:98:bb:44:fb:5f:28:dd:
                    7f:87:92:05:d7:db:1d:15:9e:f0:fe:04:7c:5b:bf:
                    64:5f:3a:dc:44:54:7b:0a:a7:62:ec:31:c8:53:66:
                    ee:f7:47:a4:fb:95:ba:99:5d:5e:bb:5d:07:47:ea:
                    81:c8:12:d0:62:96:9b:e9:3c:95:3b:af:53:30:0a:
                    a8:3d:91:d2:84:ee:ea:c3:26:03:b1:27:fa:a4:33:
                    ac:29:f2:bc:63:24:0b:88:c9:f8:77:ed:0b:0e:e0:
                    36:05:01:5f:83:72:67:52:c0:19:34:7d:ed:07:58:
                    36:38:bf:df:ee:11:85:d2:e4:3a:72:16:5e:f4:4e:
                    55:54:85:0a:a5:96:a4:07:79:32:bd:18:3f:a9:ac:
                    64:86:ae:86:8f:09:d0:53:f9:39:01:c1:81:aa:15:
                    70:ab:f6:66:cf:4a:40:40:1a:87:44:3e:a2:07:13:
                    8d:4d:67:8c:ab:d0:35:66:7f:14:80:06:a3:7b:a2:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:99:F2:D4:6B:69:6E:1A:D4:5E:99:BE:74:60:CE:19:82:9E:8A:D6
            X509v3 Authority Key Identifier:
                keyid:61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/51516043e88bb2665f256121397096dd9b9a34c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:e5:b3:64:7b:0d:dc:10:76:06:41:46:9e:72:a3:a4:ac:52:
         51:6a:1a:0d:d4:80:24:a8:67:d7:98:2f:5b:aa:d6:b7:c4:b6:
         d3:c1:d3:aa:bd:54:f2:83:d0:38:aa:bf:a5:6d:8b:01:4a:23:
         3b:7b:37:3b:99:fc:57:73:ae:06:1c:17:1e:5f:8f:12:7a:6f:
         77:eb:93:ed:5e:02:8f:7a:34:65:ba:1b:31:3d:b2:58:08:9f:
         29:89:9c:ac:85:e5:54:d6:e3:4b:4a:8a:25:70:d9:b2:45:0e:
         ad:5d:f1:45:c8:3f:22:13:e7:d9:a9:57:6b:b5:51:2a:e9:61:
         6c:b7:0e:e8:03:d8:67:b1:94:57:2f:69:44:df:ae:b9:e5:61:
         be:44:03:c3:f0:fd:34:be:ce:cc:21:25:6d:18:71:ab:88:65:
         08:19:eb:84:b9:f2:65:b7:7d:e8:94:34:a2:dc:a0:2c:a4:d2:
         49:5a:f7:d0:20:4b:72:32:6e:c9:d1:a4:1a:e6:e0:84:88:41:
         3c:7b:b4:e4:cc:50:c6:9c:fa:43:47:34:35:0c:f4:c0:cc:a7:
         e2:95:66:96:06:b5:44:62:be:0b:fb:bd:f4:23:ea:db:9e:88:
         4e:59:b0:92:da:c5:d8:d0:b7:44:ba:80:4f:b1:8a:fd:f7:82:
         7f:60:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org