Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/7399b0b10a1e9888e17c5dc27299cc05721f1db3.roa
File:                     7399b0b10a1e9888e17c5dc27299cc05721f1db3.roa (raw, json)
Hash identifier:          pm7GHCKwa+aeDqlDlfpcFNvfAfDXx5/RmHNeZCE4DUI=
Subject key identifier:   6E:CE:05:D0:F4:49:60:03:3A:55:DC:B0:EE:8A:D4:3E:02:FB:AA:6A
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       24E4AD
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/7399b0b10a1e9888e17c5dc27299cc05721f1db3.roa
Signing time:             Fri 21 Jul 2023 20:56:27 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     52263
IP address blocks:        190.217.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417837 (0x24e4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=7399b0b10a1e9888e17c5dc27299cc05721f1db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:16:81:8e:6b:f4:37:06:ec:97:8c:fd:08:78:
                    63:fe:d4:70:56:a9:a5:e5:ab:66:2c:22:77:e4:99:
                    4f:89:a8:b7:c3:6a:d5:ac:69:0d:15:77:03:8d:30:
                    7f:4d:1e:ca:91:89:5e:85:a0:87:94:92:5f:88:c0:
                    6b:3f:7a:56:98:d0:a6:2c:f7:06:27:21:bf:17:9c:
                    a7:a5:7d:82:f5:d1:b4:c5:c4:71:47:c2:fc:ef:5c:
                    9c:ce:49:31:0a:f8:f4:7e:fe:20:1d:55:ae:a7:14:
                    e9:08:26:50:80:3d:c6:3d:6f:a6:2e:a6:8c:a5:ec:
                    59:1c:01:ac:a4:cd:cb:06:fc:7d:43:fd:bd:da:86:
                    49:36:e1:b8:5c:2a:6e:2d:da:b4:78:2e:81:67:2b:
                    40:f5:b1:2a:ed:2b:dd:62:dc:08:61:b7:3d:4f:d4:
                    0e:25:73:c6:8c:5e:d7:81:06:3d:13:d6:2c:29:1e:
                    95:f3:37:7e:e4:a3:a5:d5:29:69:3e:7e:c6:2f:76:
                    69:93:c8:29:1f:af:73:18:ab:4d:61:b0:26:34:ae:
                    cb:97:bb:e3:45:64:2f:2f:fb:0c:e7:b7:0d:0d:9e:
                    fe:86:8b:da:80:09:cc:c6:af:0c:98:9c:27:e6:3c:
                    58:10:3f:a7:1e:15:d3:b2:00:07:a1:5d:16:f5:e0:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CE:05:D0:F4:49:60:03:3A:55:DC:B0:EE:8A:D4:3E:02:FB:AA:6A
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/7399b0b10a1e9888e17c5dc27299cc05721f1db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:87:00:0f:f8:ba:64:24:55:ca:05:67:c8:ad:a4:a5:f9:
         32:95:9e:54:56:be:8b:c1:f8:53:fe:7b:60:af:e9:7e:b1:e3:
         d6:0e:bc:fd:f2:03:ef:53:89:6e:07:0f:f5:b7:61:f7:35:ae:
         3d:63:34:6b:be:60:a0:2a:6f:b2:66:ac:6b:88:d5:7c:ee:44:
         57:90:c6:62:02:6c:59:4a:57:46:12:a8:4d:df:3f:32:07:e1:
         b7:78:e9:07:93:3d:7e:98:32:99:e1:0e:e0:ab:36:23:6d:1c:
         49:2a:fa:7a:24:f9:64:13:e2:12:19:65:92:bf:f9:2b:94:d9:
         7a:89:7a:7b:70:86:bc:27:e8:13:fd:30:ae:39:52:de:b5:d5:
         3c:7b:57:21:8e:f9:84:ee:b1:24:24:92:41:97:0b:0f:30:38:
         80:e7:1e:53:e4:72:8f:52:10:5c:11:85:47:a2:66:16:24:75:
         57:b2:a3:05:d1:39:80:83:0a:ca:1f:49:c4:40:31:d1:a6:6a:
         77:b6:d4:60:8a:0d:af:5e:2c:e1:4f:1b:b6:62:6b:75:5c:6e:
         73:19:36:a6:9e:32:70:a7:d4:9b:ff:5b:c1:12:0c:f0:6a:41:
         b9:92:94:5a:66:08:4e:9a:1c:62:0b:70:32:2a:5a:a4:b2:3b:
         85:d6:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org