Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4a4bc82e718082fe0d146c9784b2358d7ee4f758.roa
File:                     4a4bc82e718082fe0d146c9784b2358d7ee4f758.roa (raw, json)
Hash identifier:          SrY60Yy+slZXAttJUOXVXRnqUPoBHS4k1dDBgr5LpkU=
Subject key identifier:   65:8D:93:83:93:6D:34:BC:61:3B:93:97:36:84:29:C9:B4:DE:6B:FB
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       247258
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4a4bc82e718082fe0d146c9784b2358d7ee4f758.roa
Signing time:             Fri 21 Jul 2023 20:55:26 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     269832
IP address blocks:        190.217.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388568 (0x247258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=4a4bc82e718082fe0d146c9784b2358d7ee4f758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:49:a3:92:16:43:1a:0a:5e:ea:bf:3d:da:29:
                    79:53:ab:79:e4:c1:8a:cf:45:0e:77:c6:f9:55:40:
                    31:78:1e:f3:00:4a:27:42:1a:ff:06:f9:c0:8a:0d:
                    33:e6:96:46:97:e6:5b:68:be:0f:c6:67:d0:e3:12:
                    a7:ee:ff:4a:d7:86:44:23:20:61:94:41:cf:17:6b:
                    1e:ad:b6:dc:f1:8f:9c:ec:5a:aa:75:04:de:d9:fd:
                    fb:b3:17:93:cb:6f:da:b2:47:9b:c4:4d:df:1e:e3:
                    a2:94:12:70:4b:27:52:6e:7d:ad:20:9c:31:8f:21:
                    57:8a:5f:09:00:35:57:23:f7:b8:c6:59:09:a1:18:
                    a6:64:27:2d:4c:e4:7b:ae:7e:4a:ef:a0:d4:a0:67:
                    98:a4:3d:6f:7c:fd:67:9a:c2:47:e1:31:4e:ae:70:
                    b9:0d:9f:eb:7e:22:80:81:8d:17:40:47:fd:01:e3:
                    c9:d1:35:3d:36:1b:33:97:d7:19:b4:cf:be:42:cd:
                    11:70:71:83:8b:d0:55:30:cf:08:f8:80:7a:3a:9e:
                    d9:4f:23:b9:ac:63:6c:a4:c3:19:d5:85:43:86:52:
                    b0:2d:bd:a6:90:b8:45:38:97:e1:0f:59:37:06:8a:
                    ac:d2:75:a7:30:79:e3:ad:bd:03:d6:cb:71:2e:9b:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8D:93:83:93:6D:34:BC:61:3B:93:97:36:84:29:C9:B4:DE:6B:FB
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4a4bc82e718082fe0d146c9784b2358d7ee4f758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:c6:19:97:56:63:96:b9:9e:64:d9:11:af:ba:1c:49:c0:09:
         6b:40:49:38:c9:3a:d5:a3:b3:f3:74:37:14:84:87:53:55:62:
         17:d7:65:c8:69:ea:90:f0:f0:20:54:9b:8c:94:d4:ac:f6:69:
         01:5f:b2:63:7b:3f:a9:68:50:2b:d1:af:2d:5f:63:45:b2:16:
         eb:3b:8f:a9:5e:fd:54:41:56:e0:33:ac:63:36:b3:8c:f8:1c:
         74:62:69:f7:66:59:88:d5:9c:75:1f:eb:79:74:4d:db:c3:29:
         6e:0f:32:b6:ab:00:d8:5d:37:1e:51:3b:30:ce:8c:1e:9f:f8:
         8c:8c:68:c0:ac:d9:98:dc:17:d7:a4:99:c4:8f:8b:28:16:00:
         8f:cf:8d:f5:31:fa:b9:c9:6e:da:f2:a2:36:38:27:db:44:e5:
         93:62:a3:eb:63:9d:aa:f5:1c:83:bd:5d:d8:22:9d:08:58:fe:
         ff:65:75:0a:2e:55:01:af:30:3e:a1:0d:b7:55:06:5d:a4:07:
         f6:88:4c:cb:34:b1:f7:32:c3:34:30:5c:0b:9d:83:c3:99:60:
         a7:f9:45:4f:14:71:0f:4b:9e:9d:ad:0e:94:72:91:a8:30:59:
         53:cf:2d:a2:77:25:32:1c:84:cf:c6:4c:73:de:35:45:91:a2:
         80:78:2a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org