Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/849fabcba54323a11219c1d1f4cf2b79433f91e4.roa
File:                     849fabcba54323a11219c1d1f4cf2b79433f91e4.roa (raw, json)
Hash identifier:          oWseW1JPu3NKa3o2TqJgrm/GdkLmXulOxG1mEdy38as=
Subject key identifier:   82:BA:56:0A:06:D4:A2:21:54:EF:39:1F:F0:05:E4:DD:B1:50:78:A5
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       283241
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/849fabcba54323a11219c1d1f4cf2b79433f91e4.roa
Signing time:             Wed 08 Nov 2023 04:16:29 +0000
ROA not before:           Wed 08 Nov 2023 04:16:29 +0000
ROA not after:            Sat 08 Nov 2025 04:16:29 +0000
asID:                     273120
IP address blocks:        190.217.20.96/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2634305 (0x283241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Nov  8 04:16:29 2023 GMT
            Not After : Nov  8 04:16:29 2025 GMT
        Subject: CN=849fabcba54323a11219c1d1f4cf2b79433f91e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:c1:d3:49:e8:a8:0f:77:cd:71:34:24:86:
                    19:8d:61:1f:1a:28:86:e2:52:ca:aa:06:56:e9:b3:
                    aa:7e:a5:90:99:f0:39:64:e4:36:0b:90:d9:04:60:
                    97:1f:fb:a8:aa:e6:c2:b7:e4:d3:36:79:a0:87:1d:
                    66:0d:2c:dd:70:99:43:ce:70:9d:da:ab:89:18:0c:
                    5f:10:db:4b:a4:1b:e5:38:f5:d0:c0:84:a9:97:6c:
                    61:a8:d5:65:97:32:0d:8d:13:e1:0a:c4:fe:25:35:
                    ae:b1:14:00:8c:49:69:de:6e:38:89:54:48:9a:60:
                    f5:02:8e:d6:5c:ad:ee:7f:50:48:f0:52:be:06:87:
                    5e:f5:b0:8b:9c:0c:c9:c8:51:2a:7c:39:7d:b6:ff:
                    fd:31:54:ac:04:d8:61:1a:e6:05:b6:7e:9b:af:07:
                    1c:ea:1c:dc:92:71:e0:e2:5e:24:a7:1d:7c:0e:1f:
                    92:a4:1b:45:60:bb:89:f9:f2:93:c3:a5:67:62:13:
                    dd:25:8c:a2:35:fc:00:dc:24:bc:0b:f6:ac:62:b4:
                    fe:0f:c0:d8:0a:9a:0c:5e:db:2e:b7:6b:da:a7:95:
                    19:0d:a2:1b:77:e2:6f:a0:6a:3c:80:17:a0:0a:79:
                    c0:49:90:1e:21:c1:11:24:52:1c:fa:43:f2:ae:a3:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BA:56:0A:06:D4:A2:21:54:EF:39:1F:F0:05:E4:DD:B1:50:78:A5
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/849fabcba54323a11219c1d1f4cf2b79433f91e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.20.96/28

    Signature Algorithm: sha256WithRSAEncryption
         03:68:21:da:02:a1:14:c6:0b:5c:f5:08:a3:ca:0c:09:eb:61:
         15:ff:78:3f:d2:ff:57:e5:57:5a:d3:5f:1d:e6:fa:20:c2:93:
         39:f0:3b:56:e2:a0:8e:fc:b0:9e:25:4a:f4:0f:4e:68:e0:8d:
         d3:3a:da:fe:c3:2e:08:65:40:71:b8:d9:19:ee:eb:7f:fc:86:
         51:6e:49:ed:21:c8:13:a2:46:b1:e8:7a:bc:52:8f:14:c8:c8:
         54:31:90:14:66:4d:c5:ed:32:64:18:53:65:d8:1d:f7:fb:c7:
         0b:3b:2f:dc:2d:8e:71:28:7f:bd:32:fc:c7:2d:75:a2:d1:c8:
         81:9c:06:35:df:4f:81:08:66:2b:ae:8f:67:1b:f8:33:eb:29:
         04:92:fa:0d:7d:de:99:84:48:5e:4d:fd:c7:16:ea:be:61:60:
         df:54:b8:24:15:d2:cd:1d:bf:9f:f3:e7:d3:70:f5:a7:f2:3b:
         b6:00:b8:64:06:db:15:6c:0c:e3:21:d8:36:52:83:49:2e:33:
         cf:8e:1f:90:3a:83:b2:3b:f2:e6:6f:18:04:43:cb:8d:7c:78:
         86:25:eb:6d:9a:d3:3b:d9:6c:13:10:62:e0:00:e5:51:c1:54:
         4e:81:f1:ab:c5:18:e0:a5:ab:5f:cd:1b:3c:8f:8c:cf:0e:46:
         67:a4:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org