Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/5790f73320d05d91598466476950d2bd3dd58880.roa
File:                     5790f73320d05d91598466476950d2bd3dd58880.roa (raw, json)
Hash identifier:          PH2noXLoWWj4AdryTiVEJDpjtKuOxWvxcijEqngVG/k=
Subject key identifier:   14:BB:B8:0D:53:77:CD:F5:55:09:AD:E7:BF:8D:5C:06:86:90:B6:68
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E5AC3
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/5790f73320d05d91598466476950d2bd3dd58880.roa
Signing time:             Wed 24 Mar 2021 14:30:56 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     32590
IP address blocks:        190.216.121.0/24 maxlen: 24
                          190.217.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940739 (0xe5ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=5790f73320d05d91598466476950d2bd3dd58880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7a:0c:0d:12:e8:e6:b6:7d:05:ef:f7:de:f9:
                    8a:23:5f:3d:f4:1d:7c:f8:44:50:ac:54:79:ce:7f:
                    01:f8:a8:fd:2f:65:a1:c6:9d:7c:f3:f8:fb:11:c9:
                    cc:35:48:8f:5e:87:3e:b9:ad:b7:0a:20:fe:9b:3f:
                    c1:b8:84:92:ea:9c:73:af:6b:74:3d:9e:f1:18:0c:
                    88:47:94:92:28:65:bc:92:01:c3:9b:19:9b:1c:2c:
                    86:6c:a0:55:99:4d:97:48:b2:05:2a:10:d9:85:bf:
                    c5:cc:2e:65:8a:41:8b:a7:9a:9e:af:77:5d:a1:67:
                    68:e4:5b:02:6f:dd:53:d4:b0:d5:6d:e8:8f:cc:0b:
                    27:67:9b:c2:93:66:c3:e9:6e:17:c6:ff:58:f1:b9:
                    e8:6a:b6:42:1e:a9:ff:5b:da:6d:75:ea:f1:7c:d0:
                    d2:48:10:26:ad:72:a0:e9:9f:7d:24:45:27:4a:df:
                    7f:83:eb:4b:93:17:54:5d:fb:48:c1:cf:47:16:a1:
                    4e:a7:c1:c7:ad:ba:8a:bc:fd:94:65:85:07:ef:39:
                    00:07:0a:bc:72:cf:33:7f:02:83:fa:2f:92:6a:b0:
                    75:be:bf:00:5f:ab:ef:9f:3f:f8:4c:63:71:52:79:
                    a6:40:45:6f:72:05:2b:b6:00:6c:30:68:08:e2:95:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BB:B8:0D:53:77:CD:F5:55:09:AD:E7:BF:8D:5C:06:86:90:B6:68
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/5790f73320d05d91598466476950d2bd3dd58880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.121.0/24
                  190.217.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:a9:94:ff:02:86:31:70:6a:74:e4:9a:81:6e:ad:f8:17:e8:
         d1:25:9b:80:b2:de:5d:c3:37:91:11:aa:d6:08:ce:c9:88:0b:
         6f:24:9a:62:21:b0:bc:35:4f:42:cd:33:1d:8d:88:e0:ca:03:
         55:3c:68:b0:d4:66:af:6e:ba:46:69:c6:1f:ae:9c:f2:ad:c9:
         1b:a9:d6:96:31:75:da:30:32:30:91:ed:d2:72:e3:b8:ab:7c:
         b7:83:03:e3:d8:d4:c3:19:1a:e8:e4:f8:ff:04:cb:38:49:0d:
         04:e0:9d:75:dc:34:93:7c:5a:dc:a2:2c:24:1d:4e:fd:f5:71:
         54:9a:49:49:0e:39:ba:f3:53:c1:22:d2:4d:66:d6:83:87:5d:
         61:41:0c:b3:a2:fb:19:a7:3c:46:25:62:2f:f6:af:ca:69:7d:
         d5:42:6c:f3:25:e1:bc:b3:60:1a:d7:16:8b:6e:18:01:56:fe:
         d7:65:0c:1e:03:5a:b0:d6:14:66:69:30:4a:3f:e0:b5:1d:35:
         d5:f2:a0:26:ab:48:4a:28:00:50:7a:dc:e9:a8:4e:4b:9d:0d:
         8c:ca:45:24:5e:89:4a:93:79:51:b0:cf:0f:48:58:ad:6f:22:
         17:66:e1:4a:8e:6c:83:1d:e7:24:84:e7:dd:b3:48:31:8c:85:
         41:de:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org