Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/70ded53e55e3c6f179becec0c9a21148c301d8a2.roa
File:                     70ded53e55e3c6f179becec0c9a21148c301d8a2.roa (raw, json)
Hash identifier:          NSzR13mWgzUsKVzRlvD9FrNSdOs1QuHUGdHOIh8i7mY=
Subject key identifier:   28:5F:05:74:D2:06:5C:84:A6:F8:CC:5C:67:CC:4D:5F:E6:E7:6E:A5
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       2266BE
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/70ded53e55e3c6f179becec0c9a21148c301d8a2.roa
Signing time:             Thu 01 Jun 2023 14:47:32 +0000
ROA not before:           Wed 31 May 2023 14:47:32 +0000
ROA not after:            Sun 01 Jun 2025 14:47:32 +0000
asID:                     266769
IP address blocks:        190.216.7.240/28 maxlen: 28
                          200.55.16.4/30 maxlen: 30
                          201.234.150.16/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2254526 (0x2266be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: May 31 14:47:32 2023 GMT
            Not After : Jun  1 14:47:32 2025 GMT
        Subject: CN=70ded53e55e3c6f179becec0c9a21148c301d8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:28:b8:1b:a1:a9:ea:16:3b:2f:7e:27:e2:
                    42:8c:19:fc:34:1e:d7:d9:f8:1d:16:f4:57:a7:34:
                    68:4b:fc:a6:ea:4b:fd:ce:51:1f:35:68:38:00:9f:
                    ec:53:2e:01:2a:f8:f2:c8:36:bf:d6:fc:ee:c9:d3:
                    8a:a7:42:04:cc:38:0e:87:3f:0e:8c:91:40:b1:b0:
                    85:61:9a:e6:cb:3c:d5:06:dc:19:9c:e4:67:18:98:
                    61:56:0d:f4:b1:63:fd:e8:8b:78:55:90:f8:7c:f4:
                    ae:7c:21:f2:9e:ec:46:5c:01:4e:00:e6:f3:a0:7c:
                    07:73:19:58:ff:16:81:e2:8c:6c:3c:41:ad:62:63:
                    27:1c:6e:35:7b:84:55:71:cb:53:03:00:3e:b9:60:
                    ed:33:a8:7a:30:14:7a:38:67:c1:ff:eb:00:8a:7f:
                    c9:b0:c9:39:35:a7:c9:4f:61:87:fe:66:e2:72:7f:
                    44:f1:87:60:12:c5:5c:43:18:d5:fd:b0:a4:f8:82:
                    34:f0:23:c3:89:93:dc:d0:80:b1:9e:1c:56:e3:60:
                    e6:b2:33:26:ca:82:61:e1:cb:3e:6e:f8:0e:c1:0f:
                    6a:3b:50:6f:d9:7c:7f:3c:ee:71:e9:44:96:9f:d2:
                    5a:36:4f:e3:8b:db:be:d1:68:55:46:ec:99:83:54:
                    cb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5F:05:74:D2:06:5C:84:A6:F8:CC:5C:67:CC:4D:5F:E6:E7:6E:A5
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/70ded53e55e3c6f179becec0c9a21148c301d8a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.7.240/28
                  200.55.16.4/30
                  201.234.150.16/28

    Signature Algorithm: sha256WithRSAEncryption
         6c:8e:5d:8e:76:cd:57:c1:17:fe:07:f2:d4:30:fc:14:2b:dd:
         d8:eb:bd:d3:76:95:91:4b:43:6f:48:bb:69:89:82:f5:c4:0f:
         89:26:29:55:3d:b2:6d:d1:a9:a9:8d:21:9a:15:41:e9:a8:b4:
         e5:e4:6a:ba:9b:0e:66:51:3f:d3:12:5a:50:d9:81:c8:1d:4d:
         2c:10:f9:c9:28:59:56:f2:9f:c1:c0:af:c9:68:cc:db:cb:a4:
         b7:34:72:e1:3e:7c:50:32:0d:b1:e9:57:6a:19:4d:24:f4:0e:
         9a:3b:50:45:45:e7:54:fe:ee:0f:2d:fd:46:53:8f:a9:8e:99:
         d6:71:98:16:a3:1c:e1:be:45:8d:2f:24:1c:d3:9f:35:cb:a1:
         e0:12:49:47:35:19:4c:67:3a:97:39:3e:6c:0b:cc:e1:b6:da:
         d0:c0:93:d6:5b:56:04:97:f2:fd:8f:93:5b:c7:7e:96:64:c0:
         d0:60:cb:62:2d:72:2c:2b:e9:77:06:bc:3a:3c:41:8c:4c:6a:
         4d:c5:7a:8b:94:ec:d9:e7:ca:0b:6b:1a:dc:57:07:de:f2:52:
         51:c6:64:ba:8e:ea:6b:98:19:e9:65:bf:36:cb:7b:52:0c:ef:
         40:48:7a:67:58:2e:29:68:c3:e3:f5:1a:b6:9f:8f:3a:b9:6e:
         1e:08:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org