Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/79e6fbff1e66ec998de85c558dec7d251388347a.roa
File:                     79e6fbff1e66ec998de85c558dec7d251388347a.roa (raw, json)
Hash identifier:          D2lT/YRWtp+5XIJVSpGhynqLW7Lf8LQ26wVb0aCVUjg=
Subject key identifier:   F5:43:16:15:99:28:5A:4A:4D:9E:9D:F7:CA:5F:83:79:B4:08:5F:56
Certificate issuer:       /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial:       0828B5
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/79e6fbff1e66ec998de85c558dec7d251388347a.roa
Signing time:             Tue 05 Sep 2023 21:17:57 +0000
ROA not before:           Mon 04 Sep 2023 21:17:56 +0000
ROA not after:            Fri 05 Sep 2025 21:17:56 +0000
asID:                     7155
IP address blocks:        189.201.228.0/24 maxlen: 24
                          189.201.230.0/24 maxlen: 24
                          189.201.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534709 (0x828b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
        Validity
            Not Before: Sep  4 21:17:56 2023 GMT
            Not After : Sep  5 21:17:56 2025 GMT
        Subject: CN=79e6fbff1e66ec998de85c558dec7d251388347a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:7a:f3:dc:9b:a5:b3:b4:e4:64:c2:f4:dd:
                    9c:37:2d:23:ce:7b:7b:e7:b6:6a:c1:07:b3:96:b6:
                    8c:a7:f2:6e:ab:03:45:86:d6:d4:aa:18:59:81:58:
                    6d:c3:dc:1b:18:2b:3e:dd:dc:d1:3c:8c:d1:f3:60:
                    57:60:9b:c4:5e:ad:09:75:db:0e:f0:a1:db:94:21:
                    61:7f:41:13:2c:37:b3:4f:d8:52:64:45:70:23:0b:
                    dd:21:eb:3a:7f:4d:4e:bc:1c:01:b6:6d:54:f7:68:
                    b1:1d:cc:cc:76:1b:a0:fe:9a:66:54:a8:53:c9:f8:
                    fd:73:6e:d5:e3:41:07:39:6f:86:d3:59:c3:d4:5d:
                    1a:82:52:23:ef:05:71:48:b0:6e:0b:65:26:e3:f8:
                    94:ef:27:f4:9b:ca:ac:d2:4a:74:fa:1d:64:83:3c:
                    87:fb:60:3e:a3:15:6f:7e:42:7d:78:cd:16:b9:29:
                    dc:c1:25:d4:56:3e:b8:13:22:5e:bd:fc:2f:2b:92:
                    c4:bd:9a:d2:1e:36:62:ba:58:59:00:89:d8:6a:2a:
                    95:37:1d:51:70:14:d7:a9:80:6e:68:74:75:03:80:
                    e9:5b:d7:63:6d:80:8b:9c:36:76:fc:b5:37:56:0a:
                    d6:0f:52:88:40:a0:a7:ce:cd:64:39:16:8c:32:1f:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:43:16:15:99:28:5A:4A:4D:9E:9D:F7:CA:5F:83:79:B4:08:5F:56
            X509v3 Authority Key Identifier:
                keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/79e6fbff1e66ec998de85c558dec7d251388347a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.226.0/24
                  189.201.228.0/24
                  189.201.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:57:e1:aa:92:d5:ef:16:ab:35:30:a0:43:fe:46:ad:ff:4f:
         2d:e3:21:a1:2b:aa:61:8b:72:ce:13:d1:2d:8f:8a:e0:0e:20:
         8f:06:be:bb:d2:e1:a9:3a:e8:3f:41:12:c1:54:59:8f:09:eb:
         e0:4a:d7:19:a5:45:23:50:28:d5:56:db:65:20:c1:6f:bd:ec:
         04:17:3c:dd:79:ce:ce:3b:27:a7:67:9d:87:a0:a2:ed:70:43:
         c7:3a:3c:22:97:9c:44:18:8e:f7:d1:76:30:55:72:5b:c0:23:
         dc:88:a0:ad:32:e7:52:61:ba:b7:af:a2:f1:04:aa:f0:47:f7:
         be:e0:51:4d:e6:93:b8:5f:79:10:6c:99:6a:0d:38:97:36:fc:
         23:c4:a7:15:fc:66:4e:23:aa:1d:f3:df:75:bc:7c:f9:f3:87:
         b2:58:17:0d:37:9e:8d:a7:28:01:aa:5d:53:f0:b1:9e:95:84:
         9f:2c:8a:b4:68:6f:e0:24:5e:3e:ea:22:c2:5c:4c:83:7c:53:
         82:76:bd:09:b9:51:51:8e:ff:42:66:00:9a:da:4b:6b:9a:a5:
         03:88:7e:d0:56:b7:38:99:f7:6f:29:0a:7c:af:98:0a:cf:71:
         18:63:69:8f:8c:81:63:cd:9e:db:31:b1:12:9a:ad:9f:bd:c5:
         6c:c9:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org