Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/3d3b9b7487378ae84f7b203d9273141ab580706a.roa
File:                     3d3b9b7487378ae84f7b203d9273141ab580706a.roa (raw, json)
Hash identifier:          u4T2AOspjPZWPCfxqc/92vj1msHn5m/qGH7/dpf5tnY=
Subject key identifier:   BF:3F:04:0A:A3:DE:66:6E:B5:01:7A:54:B2:9A:21:18:31:27:C3:2B
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       252E40
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/3d3b9b7487378ae84f7b203d9273141ab580706a.roa
Signing time:             Fri 21 Jul 2023 20:57:49 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     19582
IP address blocks:        201.234.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2436672 (0x252e40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=3d3b9b7487378ae84f7b203d9273141ab580706a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:09:33:6e:63:74:10:6d:99:4d:f7:1a:ef:
                    cf:8e:1b:72:f5:12:c8:69:15:6b:be:ef:81:a7:73:
                    ba:0d:b9:30:ee:1e:b2:fb:e3:a3:0a:38:0f:30:ae:
                    18:50:b5:c2:d2:0a:62:2d:06:d8:e3:ae:2f:a0:b1:
                    db:55:96:4e:7a:f9:2e:fd:ce:b5:05:b2:04:87:1d:
                    b6:a7:52:7c:94:c7:61:68:3b:b8:01:a2:1f:05:b0:
                    32:a8:a2:78:44:88:0b:3e:35:43:88:57:ca:9f:47:
                    2b:94:eb:b0:a7:8f:0a:16:a2:b9:a0:08:ef:7b:e1:
                    ff:a4:e6:46:cf:bf:81:35:c1:4c:6f:31:62:aa:c1:
                    fb:35:29:98:25:ad:16:10:de:18:48:f2:50:72:4b:
                    ba:4c:88:d5:25:f2:ad:59:4c:a8:1d:32:d6:18:13:
                    fd:7f:c2:1b:c9:ff:b2:87:70:9c:39:25:eb:4d:7c:
                    83:38:ee:af:f6:4b:4d:2d:94:65:83:c0:c7:4d:26:
                    2a:22:c5:17:94:0e:10:0d:a5:10:24:fc:05:09:82:
                    72:62:2e:90:5d:c2:38:31:4f:01:1d:fe:61:88:43:
                    97:e1:c9:30:29:c5:71:fc:8e:1e:5e:3e:8d:bb:a5:
                    e2:e5:8e:80:0b:d4:33:ed:78:27:14:de:68:a0:1b:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3F:04:0A:A3:DE:66:6E:B5:01:7A:54:B2:9A:21:18:31:27:C3:2B
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/3d3b9b7487378ae84f7b203d9273141ab580706a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:fe:da:e1:06:38:66:1e:55:40:aa:5c:90:d2:fb:93:8c:c3:
         41:7f:78:42:5c:3b:8c:1a:8a:f2:de:44:dc:b0:a4:86:bd:80:
         15:48:46:06:03:9f:c5:87:04:3f:b1:37:39:67:23:c5:eb:1e:
         bc:c7:78:62:f4:23:90:d1:6f:a5:c4:8f:d8:72:a3:e3:fd:0a:
         8b:3d:de:4d:1a:6f:3c:ed:44:d9:64:95:ae:cc:30:b0:a8:c9:
         ce:01:52:22:0d:a4:e9:30:4f:b2:a8:30:19:d6:be:6a:5e:24:
         53:60:e9:59:a4:df:a1:73:42:4b:d9:d7:aa:f5:83:30:1f:72:
         70:5b:e5:3a:16:d8:f6:97:5c:7c:06:ad:27:01:1d:04:7f:1e:
         e7:e8:8e:cf:ca:89:5d:46:ec:a0:15:f2:e4:fa:f2:df:b8:dc:
         57:49:23:76:f0:1f:95:48:e1:f6:3d:07:8d:5a:26:87:71:35:
         55:87:68:ec:ec:53:8e:cf:bd:f4:4a:d8:c6:b6:83:35:ce:c2:
         9f:65:eb:ae:01:88:d1:90:d9:65:0f:d2:f7:37:32:65:36:f0:
         30:b8:d3:cb:b9:4d:2a:2d:e4:8d:7c:ae:76:a3:78:2c:6f:ce:
         1e:9a:d5:81:ec:ec:30:18:bb:31:44:d5:1d:56:c9:73:88:db:
         6a:c1:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org