Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/c7696b180cd4905b96afd259bfa094f578b3a365.roa
File:                     c7696b180cd4905b96afd259bfa094f578b3a365.roa (raw, json)
Hash identifier:          OUl7244EhlywGRFkxaxYwIpES2Zz3vZKyMRLg2BLAVY=
Subject key identifier:   1E:D3:BF:6A:9C:0D:4E:16:BB:0C:CD:A1:BF:1D:FE:8B:B8:FE:3F:84
Certificate issuer:       /CN=1034a2eadc759845b0599fd410ba1e4691a1ea9e
Certificate serial:       0DAAEC
Authority key identifier: DC:65:2D:66:4B:B7:E8:A2:15:54:3E:D2:85:30:B3:3B:47:AC:11:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1034a2eadc759845b0599fd410ba1e4691a1ea9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/c7696b180cd4905b96afd259bfa094f578b3a365.roa
Signing time:             Wed 24 Mar 2021 14:29:50 +0000
ROA not before:           Wed 24 Mar 2021 14:29:50 +0000
ROA not after:            Tue 24 Mar 2026 14:29:50 +0000
asID:                     28066
IP address blocks:        138.185.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895724 (0xdaaec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1034a2eadc759845b0599fd410ba1e4691a1ea9e
        Validity
            Not Before: Mar 24 14:29:50 2021 GMT
            Not After : Mar 24 14:29:50 2026 GMT
        Subject: CN=c7696b180cd4905b96afd259bfa094f578b3a365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:9f:8c:ed:41:8b:9f:27:fc:54:69:40:06:
                    e4:b1:8b:10:f4:4d:75:6f:57:4e:de:82:d8:22:91:
                    b5:ab:10:83:a7:71:19:c1:08:d5:7e:94:49:34:be:
                    4f:36:53:0d:9e:c2:ee:49:60:c3:4d:02:78:29:5c:
                    89:73:de:0f:fb:e1:03:78:6c:89:3a:17:91:dd:0d:
                    f6:7e:20:b4:51:6d:0f:be:96:33:d0:8d:37:58:34:
                    b8:ef:4a:6d:d0:11:8a:d9:1a:c0:a0:36:11:67:db:
                    93:7d:9e:fa:93:e0:35:b1:b2:0d:3f:01:a2:d4:65:
                    e7:59:52:1b:06:59:88:24:42:29:a3:45:68:7c:da:
                    6c:fc:df:5e:68:5c:2c:c1:5c:6a:dc:22:b2:b3:4d:
                    f6:83:11:11:50:48:52:96:f7:87:76:d2:a2:9a:ad:
                    4b:54:03:af:b8:db:23:3b:6f:79:d0:18:b2:79:78:
                    5f:19:a1:21:4f:ba:cf:b7:7e:91:e0:52:d7:c6:59:
                    4d:48:1a:44:26:c7:3d:fb:bf:12:58:7b:80:e0:97:
                    fa:88:85:30:53:98:db:9a:d3:3d:9d:8e:79:1a:fb:
                    06:e0:5d:d8:07:da:7f:c8:9a:fc:40:62:1d:a7:85:
                    0c:9a:2d:a1:d1:87:6f:1c:03:43:5d:15:ba:f0:6c:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D3:BF:6A:9C:0D:4E:16:BB:0C:CD:A1:BF:1D:FE:8B:B8:FE:3F:84
            X509v3 Authority Key Identifier:
                keyid:DC:65:2D:66:4B:B7:E8:A2:15:54:3E:D2:85:30:B3:3B:47:AC:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1034a2eadc759845b0599fd410ba1e4691a1ea9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/c7696b180cd4905b96afd259bfa094f578b3a365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/1034a2eadc759845b0599fd410ba1e4691a1ea9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:ff:f0:2b:2c:4a:42:d6:68:28:8b:9c:03:42:87:80:8e:c9:
         b3:81:6c:77:b1:a7:ff:03:21:67:01:4d:70:bb:bd:cc:c1:f0:
         e0:01:80:c4:9c:ee:f7:bc:bc:a7:01:db:90:21:bd:c7:b4:1b:
         51:78:12:d3:4a:ef:66:e7:b0:e5:ba:3f:ee:01:55:ec:89:f9:
         59:a9:69:a4:68:3c:ec:ba:e7:a1:ca:9d:65:fa:ae:67:c1:b2:
         82:c9:a3:ae:6e:81:eb:d9:12:34:13:15:7f:31:17:17:f9:1a:
         47:0b:af:72:a9:bb:3a:9d:fb:fd:09:33:e9:c9:61:4e:14:e3:
         9a:da:57:3b:6f:ae:20:8e:d2:60:63:af:3a:87:20:c5:19:58:
         a2:1e:d8:c3:69:bd:7d:61:91:ed:eb:26:7c:15:f1:40:43:07:
         34:09:b0:91:3a:2d:56:07:56:b6:6f:24:98:89:bb:07:33:9c:
         8f:7c:ec:9d:4f:54:7e:66:7a:74:db:6f:aa:a6:87:6b:66:a6:
         31:1a:9a:fc:f9:30:fe:5e:c5:bb:9a:db:61:6a:e0:aa:80:38:
         7f:20:60:34:91:e5:96:7f:f2:a3:e8:55:66:39:e1:91:60:44:
         89:50:5e:ab:89:19:a7:9b:c1:60:b0:f1:74:dd:42:30:01:73:
         a5:b5:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org