Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/487a79657831b18c3fab16741ad9609f5173d853.roa
File:                     487a79657831b18c3fab16741ad9609f5173d853.roa (raw, json)
Hash identifier:          cUK6FGb1wiD8QDogQTFhIlR2B788ziwhXTKGhlI7Lpg=
Subject key identifier:   3D:DD:3A:9C:21:C2:05:9D:A8:B6:FF:B0:5F:93:DA:B6:5E:1D:3F:7D
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       248409
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/487a79657831b18c3fab16741ad9609f5173d853.roa
Signing time:             Fri 21 Jul 2023 20:55:29 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     16528
IP address blocks:        190.216.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2393097 (0x248409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=487a79657831b18c3fab16741ad9609f5173d853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:d2:db:d0:4f:6d:0d:c4:56:07:ab:7e:d8:
                    09:43:d5:45:80:00:1a:66:60:af:60:99:3c:60:ea:
                    53:e2:96:24:ee:9d:07:87:55:8a:1c:e4:69:bc:b2:
                    e7:8b:13:41:86:b9:83:2f:9d:61:19:98:1b:fd:b1:
                    19:61:d5:1c:af:61:f8:35:2e:bd:67:69:15:45:c4:
                    60:db:58:72:bf:6b:90:c9:87:21:cd:39:cb:d6:b7:
                    53:8d:fa:16:70:37:d4:41:4e:0f:dc:23:69:bf:36:
                    15:d4:b8:7d:84:d8:79:29:ba:d8:79:52:ef:42:c8:
                    6e:a4:b0:ad:b4:d9:90:3e:8f:9c:48:ac:a5:bf:2f:
                    ce:53:b2:cf:30:54:7c:86:6d:f0:05:92:95:f7:9d:
                    81:06:5c:d9:b4:55:7d:43:e5:30:dc:24:46:5f:48:
                    20:df:f4:70:96:01:6c:e1:cc:8f:33:2f:04:84:81:
                    3e:d1:43:ae:42:3b:39:fa:14:6c:57:ed:df:2f:02:
                    dd:3f:4e:98:23:20:57:be:ac:6b:3a:25:37:b9:aa:
                    ef:1e:87:44:fe:a1:d1:da:31:8c:f8:78:9c:83:3e:
                    06:8c:05:80:fc:38:d0:d7:a4:97:68:a7:28:b8:73:
                    fd:93:6a:df:bb:83:13:09:16:a8:57:53:bc:77:ae:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DD:3A:9C:21:C2:05:9D:A8:B6:FF:B0:5F:93:DA:B6:5E:1D:3F:7D
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/487a79657831b18c3fab16741ad9609f5173d853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f7:54:19:93:1d:7e:3f:8e:0a:f4:e6:67:49:59:a6:47:bd:
         18:81:54:d5:a7:f8:c4:b3:f1:e8:59:40:8c:b8:20:b6:89:6b:
         e7:17:3e:3d:e6:3b:03:64:f3:6f:2f:6d:41:02:9a:44:b5:c0:
         dd:b9:b7:ab:f6:d1:06:4e:24:3c:be:c3:52:ec:ce:fb:9e:e9:
         7a:02:eb:65:2a:0d:b2:9d:43:20:88:76:44:b7:a0:93:2c:48:
         2a:d4:bb:9f:e9:50:6c:86:50:8c:fc:cd:31:89:90:07:4e:a3:
         24:dd:f3:8c:d8:32:34:3f:10:43:70:9d:27:81:3d:d4:ff:07:
         04:53:d1:e9:ab:4a:f8:13:7a:82:be:0b:20:c7:8f:39:cb:15:
         f9:eb:fa:3d:f1:c8:7e:c8:e0:38:d2:49:77:31:8f:ff:07:c9:
         a9:0d:dd:cb:a9:2b:d4:d5:38:f8:e9:a7:81:0a:c0:32:33:2d:
         cf:63:d1:5f:54:da:0d:0e:6d:82:e5:93:fc:ea:77:49:11:ca:
         a1:1c:12:c4:3b:4f:4e:6e:7e:29:34:e4:b5:0e:d2:44:07:0b:
         6c:db:6c:0e:ed:ae:14:71:d6:7d:75:65:d6:45:c4:db:5c:98:
         47:13:76:f8:dd:3b:1a:20:47:6f:69:cd:c9:8d:f6:f0:b6:0a:
         cc:ff:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org