Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/65e62115a2e60a2e06e12dbd3007b74fe8368ee0.roa
File:                     65e62115a2e60a2e06e12dbd3007b74fe8368ee0.roa (raw, json)
Hash identifier:          5bEdFqBTDLFQ++GLHdytm34u2APmUab9pqk5RacDgQA=
Subject key identifier:   10:76:3D:F1:F2:D6:25:80:99:98:D0:77:AC:08:ED:CF:03:26:FA:F6
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       250689
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/65e62115a2e60a2e06e12dbd3007b74fe8368ee0.roa
Signing time:             Fri 21 Jul 2023 20:56:43 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     28012
IP address blocks:        190.216.248.0/24 maxlen: 24
                          190.217.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426505 (0x250689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=65e62115a2e60a2e06e12dbd3007b74fe8368ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:e6:c8:5c:85:18:50:a6:e2:0a:b9:45:a0:
                    3c:16:6d:18:03:a4:5f:d2:18:02:4e:57:50:ba:17:
                    14:de:08:bc:3b:e6:a3:d3:96:42:28:12:5c:4d:4d:
                    71:9c:7c:49:72:9b:3e:86:8e:23:d5:fc:8d:c7:6e:
                    e5:02:2c:91:3a:e5:d5:e3:28:89:e9:d3:fb:72:9a:
                    2c:6a:25:5a:e0:4b:cb:85:3b:17:62:71:e0:72:4b:
                    75:f2:ab:f7:1b:ec:3a:ab:18:94:8b:f0:66:f2:5f:
                    11:3b:07:5d:05:4d:bd:2e:ca:1d:73:9c:85:e7:cb:
                    cf:11:48:c0:54:db:e2:33:74:72:93:32:98:7d:b2:
                    80:02:90:e7:31:23:f2:d3:dd:ef:e5:e6:a9:f5:5e:
                    83:54:38:e0:27:aa:41:41:1f:f7:6d:b5:fe:94:ba:
                    22:da:e0:d8:a0:ed:12:d2:b9:26:99:64:13:71:c5:
                    c8:38:c9:e0:47:3f:c2:11:72:ff:9e:c7:dd:0a:7c:
                    af:6e:51:61:3a:09:71:4b:d9:98:00:d2:9c:24:5d:
                    0e:38:fd:43:54:da:f2:a6:26:ca:f8:0b:94:4c:70:
                    c0:46:7f:c3:63:05:d7:98:e0:5a:c3:2f:6d:11:75:
                    6e:16:96:39:bd:95:ec:ea:ee:ca:62:42:8a:ff:c9:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:76:3D:F1:F2:D6:25:80:99:98:D0:77:AC:08:ED:CF:03:26:FA:F6
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/65e62115a2e60a2e06e12dbd3007b74fe8368ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.248.0/24
                  190.217.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:48:6e:1d:40:39:d0:11:7a:f9:48:9d:c3:9a:a3:1a:61:21:
         22:01:db:0d:b8:b5:2c:9e:50:31:c6:c0:e9:e6:6a:5c:18:b2:
         1c:90:fb:ef:d0:d9:cc:be:e5:25:53:87:69:ed:ff:23:2d:71:
         58:ee:e8:58:30:5e:6d:bd:dc:89:9a:c0:0e:57:f0:2c:96:1e:
         32:3c:17:ee:5d:35:0e:da:f8:75:9b:f3:b8:ff:f6:89:3f:32:
         df:c0:94:b1:a7:d2:0d:7e:c3:1d:d8:5a:da:10:ea:9e:17:d2:
         88:3b:c6:5c:6b:a5:e1:00:34:56:5a:38:f0:4d:72:5a:51:20:
         7d:6d:55:b2:94:2f:7e:7d:3c:22:54:8f:9e:a0:16:79:11:12:
         c9:21:78:0a:b9:9d:12:96:7d:07:d9:64:4d:57:2c:ea:ee:7b:
         cb:c1:49:2f:1b:d5:eb:e6:8a:fb:b7:b8:e0:2c:8c:8b:f3:34:
         ca:2a:8b:aa:b4:38:a9:f5:c1:93:db:a0:83:3c:e8:eb:d3:64:
         5a:3b:b7:05:f9:dc:60:1d:30:2b:8d:03:b9:29:b3:f7:bb:b3:
         8a:3e:7e:49:80:3d:02:fe:fa:47:a0:92:56:07:9a:91:36:d4:
         93:32:b4:9c:32:8c:8a:3e:53:90:58:be:f6:34:59:d9:6c:25:
         5f:41:a9:47
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJQaJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjMwNzIw
MjA1NDU3WhcNMjUwNzIxMjA1NDU3WjAzMTEwLwYDVQQDEyg2NWU2MjExNWEyZTYw
YTJlMDZlMTJkYmQzMDA3Yjc0ZmU4MzY4ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx/rmyFyFGFCm4gq5RaA8Fm0YA6Rf0hgCTldQuhcU3gi8O+aj
05ZCKBJcTU1xnHxJcps+ho4j1fyNx27lAiyROuXV4yiJ6dP7cposaiVa4EvLhTsX
YnHgckt18qv3G+w6qxiUi/Bm8l8ROwddBU29Lsodc5yF58vPEUjAVNviM3RykzKY
fbKAApDnMSPy093v5eap9V6DVDjgJ6pBQR/3bbX+lLoi2uDYoO0S0rkmmWQTccXI
OMngRz/CEXL/nsfdCnyvblFhOglxS9mYANKcJF0OOP1DVNrypibK+AuUTHDARn/D
YwXXmOBawy9tEXVuFpY5vZXs6u7KYkKK/8nLNwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFBB2PfHy1iWAmZjQd6wI7c8DJvr2MB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwLzY1ZTYyMTE1YTJlNjBhMmUwNmUxMmRiZDMwMDdiNzRmZTgzNjhlZTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL7Y+AMEAL7ZAjANBgkqhkiG9w0BAQsFAAOCAQEAhEhuHUA5
0BF6+Uidw5qjGmEhIgHbDbi1LJ5QMcbA6eZqXBiyHJD779DZzL7lJVOHae3/Iy1x
WO7oWDBebb3ciZrADlfwLJYeMjwX7l01Dtr4dZvzuP/2iT8y38CUsafSDX7DHdha
2hDqnhfSiDvGXGul4QA0Vlo48E1yWlEgfW1VspQvfn08IlSPnqAWeRESySF4Crmd
EpZ9B9lkTVcs6u57y8FJLxvV6+aK+7e44CyMi/M0yiqLqrQ4qfXBk9uggzzo69Nk
Wju3BfncYB0wK40DuSmz97uzij5+SYA9Av76R6CSVgeakTbUkzK0nDKMij5TkFi+
9jRZ2WwlX0GpRw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org