Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/463096d15d7e12cb0480c049bbbeb8c15aca11ef.roa
File:                     463096d15d7e12cb0480c049bbbeb8c15aca11ef.roa (raw, json)
Hash identifier:          yUZ3KKeLfRw7TWY5ju5GVx6ol40BcAJUg8OI3OKw2jM=
Subject key identifier:   FB:A2:9C:7F:13:73:6A:22:9B:19:13:35:C8:C0:BD:E6:C4:80:4C:87
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E4081
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/463096d15d7e12cb0480c049bbbeb8c15aca11ef.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     28097
IP address blocks:        190.216.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934017 (0xe4081)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=463096d15d7e12cb0480c049bbbeb8c15aca11ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:94:99:17:af:28:27:8e:21:5c:20:42:46:
                    8e:b4:0d:dd:90:ee:21:90:0b:24:ff:6e:33:89:fb:
                    42:ad:82:33:b6:c6:50:3c:e8:18:97:a7:a9:ab:13:
                    c9:5c:49:a0:72:ab:5b:68:92:f1:54:71:60:ad:a9:
                    d2:07:f2:7d:9d:ba:36:69:da:0a:0a:b9:4d:55:7d:
                    f9:f2:0d:9e:1e:6a:54:65:25:5c:5b:64:3d:a2:0b:
                    46:ae:3d:60:21:96:59:e0:69:79:c4:f6:f7:6f:a3:
                    a3:da:d2:a1:c1:60:70:e7:f4:b7:22:2e:0c:ed:80:
                    45:26:32:7e:bf:86:1d:cf:e1:27:83:a1:52:d7:4e:
                    dc:ac:3b:5a:56:61:37:ec:dd:86:66:91:d1:5d:25:
                    a3:5d:b4:29:d0:1a:98:11:24:dc:1e:2d:d2:4d:76:
                    ec:aa:e6:d2:2a:8b:9f:57:7f:87:aa:81:bc:ae:5a:
                    6b:50:36:91:4f:26:1a:a3:52:b5:f4:12:28:e7:d6:
                    a0:a3:ba:18:93:66:ea:b1:75:69:3b:26:1d:60:7a:
                    8d:96:d2:52:ec:1c:ec:2d:5a:d4:94:53:aa:61:7a:
                    66:12:97:d6:4f:c1:39:4c:13:f6:6e:fb:2a:ee:77:
                    20:a7:84:0e:4c:0b:81:55:4d:2c:d5:6b:fd:6a:d8:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A2:9C:7F:13:73:6A:22:9B:19:13:35:C8:C0:BD:E6:C4:80:4C:87
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/463096d15d7e12cb0480c049bbbeb8c15aca11ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:95:0e:08:80:50:20:bb:6a:a8:d9:e5:5c:b0:df:86:37:
         35:75:1c:32:1d:64:c0:2b:20:03:36:56:1e:92:a5:4b:c7:e7:
         17:2d:8b:28:ab:8e:a9:cd:24:25:b7:12:1f:98:8f:e1:15:41:
         b0:13:f0:6c:7d:54:90:fd:55:a6:a0:a2:d9:57:52:42:23:b5:
         4b:20:ad:33:1e:bb:36:fd:ea:e8:bf:27:18:74:0a:51:95:14:
         52:df:41:d8:fc:b6:96:a0:42:5f:e1:cb:3f:e8:dd:c1:df:ca:
         3e:b1:06:36:61:53:36:c8:96:49:19:6d:f5:e5:7e:76:5c:a4:
         2d:57:39:eb:fc:c6:f1:86:f1:20:de:e7:b9:43:7b:51:fc:f4:
         81:c9:10:11:77:68:e1:c9:89:1f:aa:56:6e:cb:01:05:f1:b9:
         25:0f:92:62:4e:97:0e:04:0d:29:1b:d7:e4:18:b1:2a:2f:be:
         ee:6b:ff:82:5b:96:dd:c6:a2:b4:ec:07:ab:65:e3:85:e4:2c:
         23:f8:5e:24:db:8d:27:2c:f1:bc:cd:57:28:a8:84:a5:90:9b:
         39:b3:67:98:45:e8:31:4e:83:0b:22:cc:5e:e3:7e:86:e5:c6:
         f3:aa:3d:01:bb:a7:1b:4e:06:66:64:e1:bb:a5:50:c6:d8:65:
         d5:7d:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org