Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/19241d5a017b56356e1dc26d561d18acf4133816.roa
File:                     19241d5a017b56356e1dc26d561d18acf4133816.roa (raw, json)
Hash identifier:          dfQ5d5HL7Sit5JECeArG2esXJeJLHOj8iml0ALzFMl4=
Subject key identifier:   E0:39:77:3C:2F:60:19:67:38:C5:50:73:AB:C3:EB:59:70:05:0F:30
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       243B48
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/19241d5a017b56356e1dc26d561d18acf4133816.roa
Signing time:             Fri 21 Jul 2023 20:54:57 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     28097
IP address blocks:        190.216.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374472 (0x243b48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=19241d5a017b56356e1dc26d561d18acf4133816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:57:c6:64:a0:6e:84:52:6f:49:2e:c5:ed:6b:
                    ae:97:c8:6c:b4:24:a8:ae:02:f2:f9:95:50:0d:ee:
                    58:a6:a2:e4:8f:45:40:9a:80:42:7a:e3:4d:c6:d6:
                    0e:b9:6e:cd:04:e4:10:47:c9:25:04:3e:0e:bc:8e:
                    94:53:bd:fb:2a:4a:70:71:f2:c6:ee:5b:da:44:62:
                    96:2a:de:53:48:da:d8:9d:2f:a8:9b:09:7f:40:fe:
                    fa:6c:37:79:5b:80:70:52:8f:fe:0c:e3:d9:8a:35:
                    0f:b0:86:a1:81:09:db:ab:2f:cf:0b:cb:c1:79:80:
                    44:fb:6e:83:7f:ac:21:a1:56:57:47:a5:4c:39:ce:
                    89:de:04:5f:6e:a6:12:6d:95:d6:e0:03:dd:da:04:
                    81:b4:c7:ad:3c:78:06:62:83:d4:4b:e3:f8:6a:b7:
                    37:25:08:74:0a:ac:9b:db:c1:62:3b:f4:b2:dd:e0:
                    ff:1d:37:47:b7:8c:12:43:8a:85:cc:29:76:97:80:
                    72:0c:ed:8d:81:7d:26:5c:15:e6:da:57:42:bc:04:
                    4f:10:a7:a9:b8:c5:46:4f:a4:2e:2e:ed:b2:3d:0f:
                    8d:bf:9b:0a:a3:09:9e:1e:68:c4:b8:fa:39:58:84:
                    be:f0:49:d7:74:a7:30:92:c3:a3:0e:db:32:c9:eb:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:77:3C:2F:60:19:67:38:C5:50:73:AB:C3:EB:59:70:05:0F:30
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/19241d5a017b56356e1dc26d561d18acf4133816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:53:94:f4:61:76:4b:d9:37:8c:ac:f1:44:98:e5:c8:06:0f:
         2b:77:44:77:7c:c9:98:34:d0:5f:99:c8:97:c9:f7:0d:6d:52:
         ed:af:aa:e9:17:34:4f:3b:d1:c2:4b:9b:d5:3b:db:8e:a0:bb:
         ff:85:4f:52:0d:71:71:ff:5b:c9:d8:1b:96:21:7b:61:02:9b:
         d4:7e:eb:d6:b9:3d:1e:ca:22:29:9f:07:95:8c:a7:90:32:8d:
         a6:62:9e:57:27:bd:14:64:10:38:98:44:be:ab:f0:32:6d:73:
         b1:ce:38:74:ba:54:02:3b:ee:a2:71:0a:05:23:c2:34:42:cd:
         e3:01:d8:fa:8f:15:2d:87:ff:b7:fb:86:dd:63:14:a6:64:88:
         9d:7d:ef:7c:ed:c8:db:26:13:ac:3d:fb:1c:7b:a1:7f:21:61:
         bf:3e:0e:46:6a:6a:fd:f5:ef:90:f4:a7:de:55:db:a1:1e:ec:
         d7:9d:fd:0a:3a:a8:17:09:cc:67:39:a8:4d:8a:d9:a6:ad:e7:
         f6:ab:5d:4e:1c:54:c7:ed:ba:9f:cf:77:8f:05:2b:9f:f5:4c:
         ae:c1:f2:08:29:ec:45:12:18:de:81:63:78:ca:f9:2b:6e:ed:
         10:3c:52:b0:f4:0f:27:f6:a1:bd:1c:7b:12:56:26:6b:32:0b:
         29:ce:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org