Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/8a04e0e287f0cb2e80f3979d535c093f5cfd60d9.roa
File:                     8a04e0e287f0cb2e80f3979d535c093f5cfd60d9.roa (raw, json)
Hash identifier:          WXYXXzujqBN9Mg+JclsCOV/oSV3xpa7sfmAfA8WMNxI=
Subject key identifier:   F7:4F:40:3D:3B:0E:00:BF:49:75:20:F4:3D:0F:0E:DC:9B:C3:85:FF
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       25217B
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/8a04e0e287f0cb2e80f3979d535c093f5cfd60d9.roa
Signing time:             Fri 21 Jul 2023 20:57:34 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     263230
IP address blocks:        200.41.34.0/23 maxlen: 24
                          200.41.36.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2433403 (0x25217b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=8a04e0e287f0cb2e80f3979d535c093f5cfd60d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6b:f5:7f:fa:72:b8:1c:32:fe:0a:0d:e3:59:
                    17:3f:35:76:56:ce:5c:a1:06:4a:40:0a:bd:fc:c2:
                    7a:11:e4:3d:db:a4:52:b0:0f:ff:70:62:f1:0d:1a:
                    30:5a:3c:aa:fa:55:55:54:37:fb:40:f9:49:4e:7e:
                    a9:ab:ad:77:34:8f:30:c2:2c:32:0c:45:cf:6d:e2:
                    2d:57:35:3e:0b:ac:1b:78:70:a2:46:e9:68:b0:bf:
                    26:df:8d:3b:01:65:79:26:bf:fc:e5:1f:cb:08:d8:
                    ba:17:50:65:c9:86:28:9b:ef:a8:32:c1:f2:d2:13:
                    27:70:ab:a7:7b:c6:9d:c5:3e:b8:04:f5:ae:14:b1:
                    41:4f:e2:f5:1a:b1:be:6e:ad:69:35:2f:22:d0:c5:
                    76:e2:4e:e6:f6:21:ae:56:88:a4:3c:40:a5:60:dd:
                    87:1a:e6:42:ee:45:84:c1:96:cc:c3:a6:6e:e5:86:
                    20:40:dc:2b:2d:7a:33:1d:b4:c7:5c:b1:8b:3c:14:
                    c1:60:f2:6c:75:5b:03:9e:93:88:93:3f:91:18:89:
                    04:0c:42:05:04:d6:a3:73:2d:7d:88:ab:c8:41:59:
                    9b:70:28:35:6e:70:95:7e:62:c2:61:cc:14:b7:b3:
                    a6:67:63:5c:72:3d:f7:f9:4b:ad:94:23:3d:a8:31:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4F:40:3D:3B:0E:00:BF:49:75:20:F4:3D:0F:0E:DC:9B:C3:85:FF
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/8a04e0e287f0cb2e80f3979d535c093f5cfd60d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.34.0-200.41.37.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:74:1b:e8:28:0a:8d:6e:06:5b:b3:f9:0e:e1:fb:1c:2a:b2:
         62:3e:b1:ad:27:0d:30:1c:53:3c:69:5a:e7:5c:74:cd:c6:07:
         c5:66:49:d0:89:04:c4:c5:77:8d:3b:ca:7a:31:48:e3:f9:3b:
         1b:b9:bb:de:9f:af:f1:21:77:b1:25:ce:dc:33:1d:28:be:94:
         0f:ba:2c:cc:f2:cb:1b:ac:49:4c:02:2f:f9:06:33:a0:21:b4:
         78:bd:fd:e6:ae:7c:a4:b0:62:dd:3b:37:d5:45:29:75:a0:90:
         5c:04:29:6f:57:26:4d:ca:16:9f:b6:0f:cb:6a:6f:99:10:e5:
         0c:19:09:2f:3b:66:34:b4:8a:65:ec:9c:90:59:63:51:2d:83:
         6b:ef:66:a4:9f:8f:15:b4:86:75:1d:e4:28:e2:3c:2e:11:d6:
         e2:bb:e0:28:d2:fe:c5:eb:08:37:b2:32:ea:7c:08:ae:6d:96:
         cd:05:84:c9:dd:e0:16:ae:87:c1:8e:4a:16:38:7e:5f:34:07:
         4a:c6:bc:b4:dd:26:09:8b:1a:0e:7a:d1:04:ef:b6:b5:e1:4b:
         4f:81:b9:14:8f:a1:8a:51:0a:51:eb:11:d7:9a:0d:f3:72:9c:
         99:d9:75:0f:f9:4d:0d:ac:da:ce:c7:50:df:ab:91:40:f3:07:
         19:92:a9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org