Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/06e4d1bdf42cb27259d14a4bb2e1e2c90c6faca3.roa
File:                     06e4d1bdf42cb27259d14a4bb2e1e2c90c6faca3.roa (raw, json)
Hash identifier:          Wksb9LpIoxPOB5oxVSXSgn3KWh6OU572eeIWiHImByo=
Subject key identifier:   B1:7F:E8:EF:4C:D9:F9:D1:33:DB:22:CA:B5:71:65:57:AB:DE:2C:59
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E0B39
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/06e4d1bdf42cb27259d14a4bb2e1e2c90c6faca3.roa
Signing time:             Wed 24 Mar 2021 14:30:54 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     19582
IP address blocks:        201.234.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920377 (0xe0b39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=06e4d1bdf42cb27259d14a4bb2e1e2c90c6faca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:ac:56:4e:c6:b2:c1:5e:d1:17:ab:ed:24:
                    f8:65:fc:69:d0:36:de:56:e5:36:65:61:a3:0f:ac:
                    eb:61:96:49:d7:e7:de:d1:c6:4d:b1:2f:48:c1:c7:
                    9c:02:5b:01:b3:9e:c6:ab:6f:e1:c6:e8:06:ff:44:
                    4e:d4:f2:05:08:f9:bf:14:57:86:3a:88:c0:bf:f4:
                    c2:d4:6e:01:52:57:6d:87:67:a9:00:27:db:7e:1f:
                    77:af:54:02:ae:2e:47:97:6d:40:d3:39:13:84:a0:
                    a0:39:ef:b8:a8:66:4a:3d:2d:be:59:1b:62:7f:0d:
                    44:bc:4f:79:3d:a0:9b:b5:e1:24:3a:7c:7a:05:4c:
                    18:b4:7e:a5:4b:f0:bf:52:19:2f:10:e0:9a:19:f5:
                    ef:f7:eb:94:55:58:4a:7e:c1:cf:57:8c:f7:d2:0e:
                    ed:6f:19:9f:cd:3d:bf:e1:02:ac:77:b8:5c:98:b5:
                    82:39:31:b4:57:a1:61:bf:58:50:9e:da:7b:86:fd:
                    d0:c1:f8:6a:af:09:e8:ee:d3:bf:2c:f2:2a:fd:0d:
                    a4:b7:9b:a0:f8:56:91:e2:e4:32:25:9f:9f:b4:bd:
                    db:9e:54:c7:4a:63:b8:6a:e6:2d:b2:98:7a:93:79:
                    64:46:6b:63:53:1a:19:da:a9:29:95:18:42:2b:15:
                    dc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7F:E8:EF:4C:D9:F9:D1:33:DB:22:CA:B5:71:65:57:AB:DE:2C:59
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/06e4d1bdf42cb27259d14a4bb2e1e2c90c6faca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:25:24:63:d3:c9:92:ff:0e:40:b7:45:88:0e:ba:4a:f7:41:
         7f:53:d5:82:b6:9f:41:a3:08:00:2e:b5:4a:da:fa:e5:3b:3c:
         9f:3d:d1:f3:7a:7c:ca:5a:24:a0:5f:aa:31:bc:52:d8:f9:bf:
         04:89:7c:be:40:f9:6b:48:73:d1:ae:c5:96:de:1a:8e:d0:3e:
         3a:ea:1c:29:3f:3a:d9:ed:c9:23:f9:ac:d6:71:16:43:38:d3:
         35:4f:34:88:73:36:1d:e3:91:a8:a1:ac:9f:2d:05:31:6d:df:
         2f:e1:c6:03:7c:45:3b:12:db:c4:ed:f9:a1:e2:90:b6:68:05:
         61:19:ff:c2:46:88:f1:13:34:d1:c6:db:ef:87:38:e6:04:78:
         61:6c:87:e9:80:41:5e:e7:da:29:bc:63:3b:2e:bd:4e:6f:e1:
         60:76:3a:50:c3:4d:dd:53:b8:86:cf:da:ee:42:f3:f8:73:b5:
         db:39:ac:17:99:aa:0b:f6:a7:f9:f5:95:00:89:17:07:d2:3a:
         37:49:b3:f2:9b:8a:07:9a:29:47:c6:21:38:51:7e:7a:72:13:
         2a:37:e0:96:61:6c:84:db:c3:b6:18:97:9f:2c:95:34:d2:54:
         c0:b7:61:f6:0e:ac:07:36:d4:b6:32:84:b8:93:82:32:e2:a3:
         84:c0:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org