Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/35e65ee550ede1005d3891e5c4eefa473ed54692.roa
File:                     35e65ee550ede1005d3891e5c4eefa473ed54692.roa (raw, json)
Hash identifier:          eRhgdhNHlZ3ct5SCw8QItYzgpK0bn9nouhm7iZODt1k=
Subject key identifier:   C3:65:18:5B:D3:C7:06:3B:4F:73:8A:EE:D1:DF:07:BF:9D:ED:91:15
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       2526DA
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/35e65ee550ede1005d3891e5c4eefa473ed54692.roa
Signing time:             Fri 21 Jul 2023 20:57:39 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     21756
IP address blocks:        201.234.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434778 (0x2526da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=35e65ee550ede1005d3891e5c4eefa473ed54692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:84:70:5b:5c:7d:69:5c:5f:70:fe:de:06:
                    5c:29:a3:7e:08:64:96:01:6c:65:7c:71:66:79:fc:
                    d2:43:d0:3d:57:0b:f3:f2:e9:63:17:e6:6b:3b:b8:
                    0d:d6:b4:73:55:0b:c6:72:60:36:18:df:b2:24:e9:
                    91:77:01:26:73:67:56:66:2f:6d:4f:2e:e4:b4:90:
                    12:de:9f:33:19:23:76:c3:b8:c6:4e:d1:83:b5:9b:
                    da:96:60:30:d0:0e:78:19:76:9a:29:eb:b7:cc:5a:
                    28:a8:f8:f6:77:d2:0c:7a:3c:c8:c1:12:06:f7:1b:
                    7c:67:5f:a2:de:ed:c5:86:aa:45:0d:47:ca:d1:16:
                    68:60:49:25:37:b1:79:73:bf:fe:01:ba:0a:b8:89:
                    94:27:1c:06:b9:6e:e0:28:02:17:db:a2:25:fc:3c:
                    cd:a5:a4:2a:39:87:8a:3f:e5:97:aa:88:55:86:77:
                    f4:d0:11:73:2e:bf:1f:2b:7e:9b:08:a3:e8:49:10:
                    3b:48:fe:41:ee:db:c3:37:0d:b9:9d:14:6e:fb:c7:
                    f5:95:47:90:24:c5:24:b4:92:53:80:e2:29:46:9c:
                    3e:3c:0e:01:81:d6:9d:76:24:30:6c:72:c7:af:9a:
                    93:68:fb:4f:61:be:44:51:f6:56:dd:ba:5d:2b:f3:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:65:18:5B:D3:C7:06:3B:4F:73:8A:EE:D1:DF:07:BF:9D:ED:91:15
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/35e65ee550ede1005d3891e5c4eefa473ed54692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a0:76:c4:c1:47:96:45:db:16:b0:7c:dd:d4:55:68:73:df:
         c4:98:b8:06:6d:e7:82:ab:08:b6:31:42:c7:7b:cc:58:07:5f:
         35:4f:12:de:67:24:78:25:91:58:ff:ce:c5:fb:47:49:56:f2:
         bf:25:ca:90:59:4e:33:5e:77:a4:c5:7f:4d:0b:3d:2f:68:5b:
         7e:bf:cd:23:2c:b4:d0:1d:32:91:55:35:b4:d4:4a:ee:35:b4:
         d6:e6:73:62:9a:46:86:b1:a0:fe:9c:63:e6:e2:91:45:4e:11:
         a6:39:ae:fc:ba:81:ec:cc:87:48:07:8e:c4:cd:b6:a5:bd:b5:
         94:20:9a:58:37:af:59:bc:b4:e9:88:f8:2b:52:04:f1:ed:63:
         02:fa:b9:f0:a3:81:e7:47:b7:77:df:ad:9c:c1:35:df:50:f4:
         c0:bf:44:f3:5e:06:4e:86:80:69:a5:f7:5a:ad:4a:09:f1:c9:
         6c:26:71:de:81:ec:32:81:ff:1b:d1:77:e7:a7:9d:ca:03:38:
         f2:2e:06:da:09:b6:6b:00:15:a2:16:51:6f:20:4d:9e:05:49:
         b8:fe:0e:39:45:74:45:9e:3c:35:e6:38:52:d4:94:d3:43:e6:
         5d:30:4e:75:8a:b7:82:6d:d1:f6:ef:27:52:01:d1:d0:50:b0:
         1e:bb:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org