Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/6967ad70b95edbe6dc5458bcdaefecacf87d082d.roa
File:                     6967ad70b95edbe6dc5458bcdaefecacf87d082d.roa (raw, json)
Hash identifier:          AnvwwhU6t/hDrzfuoG41+ub7hIQDNLopTRiLuuPzwvw=
Subject key identifier:   97:2B:4D:31:8C:A6:0C:48:51:3F:8A:52:24:17:4C:24:D8:ED:24:52
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       249843
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/6967ad70b95edbe6dc5458bcdaefecacf87d082d.roa
Signing time:             Fri 21 Jul 2023 20:55:36 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     13591
IP address blocks:        200.32.65.0/24 maxlen: 24
                          200.32.66.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398275 (0x249843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=6967ad70b95edbe6dc5458bcdaefecacf87d082d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3c:79:40:6c:04:29:f0:45:6e:b0:a6:35:eb:
                    f8:70:65:90:3d:cd:15:81:61:1c:7e:03:7f:c3:bb:
                    86:2e:cd:83:6a:75:9c:37:12:eb:2b:07:00:61:e7:
                    4d:5e:3d:de:e3:f2:44:47:79:83:94:e7:2b:89:9f:
                    97:d7:26:d2:7a:66:0f:29:27:77:d5:0c:ac:f7:22:
                    02:37:9e:20:c9:d1:90:ba:03:47:6c:a8:d9:b7:ec:
                    09:1a:b5:a2:97:f6:8d:c8:63:0d:27:af:d0:80:88:
                    91:d6:73:f4:59:35:d6:ae:2c:72:c3:14:5c:5e:08:
                    af:d8:6a:00:64:2a:9a:e2:28:e5:5a:c3:ab:6c:e6:
                    d6:cb:57:6c:d9:38:7e:50:03:e6:08:39:11:34:59:
                    65:6a:31:c0:50:93:f7:f1:91:4a:d0:15:b6:0c:cf:
                    a7:6f:78:80:6a:f3:f8:64:53:7a:db:3a:da:f4:1f:
                    67:d1:b6:2e:a1:e4:fc:69:2f:a6:7c:8a:67:66:ca:
                    a5:82:01:98:16:d4:d6:54:3d:16:d2:48:65:91:f8:
                    cf:c1:20:71:ac:30:11:b1:1c:c4:b2:1b:9d:c6:74:
                    f2:9f:7b:9e:0b:61:d8:de:01:e4:cf:d9:e4:ca:bb:
                    74:2a:0b:79:7b:f2:9c:4a:08:0a:38:03:24:f5:4d:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2B:4D:31:8C:A6:0C:48:51:3F:8A:52:24:17:4C:24:D8:ED:24:52
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/6967ad70b95edbe6dc5458bcdaefecacf87d082d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.65.0-200.32.67.255

    Signature Algorithm: sha256WithRSAEncryption
         06:23:27:69:91:53:f3:d9:94:6a:bb:6d:6d:cb:5f:60:dc:8b:
         0d:0c:ab:78:97:e1:30:4a:e1:9f:4c:c7:8b:10:a9:7a:a9:c5:
         e1:91:cc:21:e9:a7:1a:43:2d:01:05:23:fc:34:88:d3:60:b1:
         30:c5:5a:0a:8e:ca:2d:30:fe:07:20:6a:10:49:fe:bd:62:4d:
         e1:1c:6a:93:2e:ed:5a:1f:c6:c2:b8:a4:a1:5c:53:5b:82:2b:
         de:23:c1:21:a9:ea:1f:c4:ab:ec:de:17:1d:6e:ed:32:5a:b2:
         de:0e:ca:e1:46:da:d2:8a:2e:4c:b2:ba:c9:9d:f2:73:69:f0:
         3e:37:fd:04:99:ac:bf:71:32:70:d6:de:c3:17:a6:52:fb:7b:
         0e:52:16:43:a6:38:8a:d0:7c:cb:6a:8a:9c:a0:13:76:76:4d:
         9e:d4:3c:12:9d:62:4a:a7:2f:40:f1:6a:90:a6:ed:49:a4:c5:
         76:27:19:37:80:da:bd:5f:22:3f:53:63:15:d3:4c:fb:54:5c:
         b8:9a:ad:a6:ad:5e:4c:99:73:f0:26:22:68:23:32:b3:b3:f0:
         2d:22:39:47:a2:0c:28:41:af:01:42:f9:fb:40:2b:57:48:e8:
         68:42:74:11:4e:ad:15:34:8a:63:82:1b:44:e6:7b:6a:a8:57:
         3e:da:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org