Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/8e408758138f46ee51b9783b24b37f410f6ebee7.roa
File:                     8e408758138f46ee51b9783b24b37f410f6ebee7.roa (raw, json)
Hash identifier:          XqjRjh7RKuSv0qD9wno6YcfdqeJ96UvXhXTkUvbqzt8=
Subject key identifier:   D8:73:D2:71:1B:F0:04:B1:9A:F1:B1:C7:E5:9B:EB:62:33:67:1D:22
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       24CBFA
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/8e408758138f46ee51b9783b24b37f410f6ebee7.roa
Signing time:             Fri 21 Jul 2023 20:55:56 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     27872
IP address blocks:        201.234.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2411514 (0x24cbfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=8e408758138f46ee51b9783b24b37f410f6ebee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:b1:b1:99:9c:2c:2e:6b:70:75:a0:7c:9b:
                    2c:62:13:f6:6f:99:a3:e1:66:73:c7:c0:df:0c:2e:
                    19:ee:e9:0c:f6:86:22:b6:66:de:8e:5c:4b:9b:e8:
                    b5:b4:de:3d:ac:16:e9:85:30:5e:fb:20:fc:a1:83:
                    db:fa:4e:65:14:51:d6:8b:d9:28:bb:fc:d1:37:06:
                    e8:bc:79:2a:69:8f:4d:3a:63:94:dc:3d:fd:ba:5c:
                    b7:db:20:38:e8:5e:c2:60:5d:ba:6b:df:db:b1:b9:
                    39:8f:02:65:60:44:e5:69:70:db:3b:50:8a:db:16:
                    41:4f:c1:77:43:47:bc:1a:05:84:80:41:92:52:83:
                    07:e0:b9:01:a7:1b:3c:fe:6e:fb:b0:2e:34:a2:67:
                    17:5e:26:0d:11:1b:83:7a:5f:a6:29:a4:0b:b5:46:
                    f1:88:dc:35:de:a2:7f:2f:b9:81:b6:b7:1b:ef:97:
                    8e:a2:bb:32:11:27:03:d4:ed:c1:90:72:d5:ac:22:
                    fb:11:e0:0f:0c:82:9e:bb:85:ce:5e:e5:5a:81:1a:
                    91:34:28:bf:0e:0b:d1:c6:55:da:95:05:a3:4d:37:
                    bd:69:7c:01:72:c4:2a:18:08:a4:53:c0:a2:6c:0b:
                    92:31:4e:7a:cc:74:78:28:e5:3d:e7:db:d4:74:27:
                    5a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:73:D2:71:1B:F0:04:B1:9A:F1:B1:C7:E5:9B:EB:62:33:67:1D:22
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/8e408758138f46ee51b9783b24b37f410f6ebee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:63:3b:ee:9b:4a:ca:fc:1e:a4:75:fc:1c:a3:86:81:e0:6f:
         31:e6:76:f0:c0:6d:1c:56:67:e1:2d:21:53:84:4b:be:7d:95:
         05:b8:8f:3a:34:59:b3:41:b5:ee:b1:43:db:28:94:74:1b:c2:
         e7:35:6a:08:db:55:69:ad:d6:9f:65:a6:73:08:0d:5a:f1:df:
         84:01:fc:ef:a4:60:0d:11:5d:e0:0d:22:76:4b:cd:06:ad:4b:
         0e:0e:77:d9:57:3c:7f:d2:c7:ab:b2:1e:f0:87:7f:26:0b:d8:
         de:23:5f:53:a0:59:06:e1:cb:64:5b:8f:4a:bc:fe:b9:37:1d:
         5c:42:3a:ba:7e:d5:96:a6:0b:30:52:9f:ae:c9:de:34:ca:10:
         9c:fa:71:5c:4e:99:f4:f9:50:2a:c7:7f:15:cf:05:0e:6f:62:
         f4:c4:1c:ff:b0:90:fd:7e:11:55:10:d7:fc:59:86:42:d6:43:
         ad:8d:0c:3e:19:2c:84:aa:ac:81:a8:91:0d:62:5e:74:87:eb:
         74:30:2c:29:a3:f1:8f:27:84:af:84:8c:54:ba:5c:ac:a9:0e:
         0f:d0:37:ed:56:6f:6d:e6:c8:fb:04:63:8b:d2:66:b2:e7:62:
         0f:05:aa:58:6c:dc:4c:c7:58:f4:de:96:fe:54:ef:0c:81:2b:
         d0:4d:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org