Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/8f26ac2bae08992f870ea36ff0313a93eca894ad.roa
File:                     8f26ac2bae08992f870ea36ff0313a93eca894ad.roa (raw, json)
Hash identifier:          ul/zZ1K8VLyEM06eFPbrVXnukdKQxONP3tAJLyBuRjc=
Subject key identifier:   6F:48:BB:0B:87:CD:B4:E1:FC:D5:0C:B0:C2:8F:44:AE:24:FD:2D:30
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       249427
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/8f26ac2bae08992f870ea36ff0313a93eca894ad.roa
Signing time:             Fri 21 Jul 2023 20:55:34 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     266769
IP address blocks:        200.55.16.4/30 maxlen: 30
                          190.216.7.240/28 maxlen: 28
                          201.234.150.16/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397223 (0x249427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=8f26ac2bae08992f870ea36ff0313a93eca894ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:2d:59:bc:90:a7:3f:e7:69:06:46:15:8a:
                    0a:88:66:8f:9b:f0:cd:c3:5c:2c:34:1b:95:98:8d:
                    e7:3c:81:ae:84:28:14:ab:b5:d5:e2:8c:19:32:95:
                    b5:3f:c8:bb:81:f3:f3:8d:ed:2b:3a:7e:e0:b2:d8:
                    90:77:35:78:74:e7:d9:67:dd:e8:39:90:7c:d5:9b:
                    fb:e1:98:67:02:7b:d2:40:ca:fa:54:fe:93:c6:bb:
                    68:c9:b2:be:e6:98:97:c8:a7:c1:80:d7:a9:20:5b:
                    50:b7:0e:cc:30:f7:eb:5e:da:28:83:ca:c0:16:e4:
                    7b:3d:a3:03:3b:78:33:91:2d:ba:d6:a7:02:28:c1:
                    be:5f:d5:b2:a7:e8:8b:53:a7:23:79:f1:aa:74:57:
                    f3:65:35:b8:20:91:c1:f3:ee:b2:ec:58:e8:86:01:
                    c5:fe:b7:68:89:ee:ba:9e:ee:2c:60:39:ab:51:bd:
                    eb:b7:dd:9d:c2:49:24:92:36:73:35:6e:09:c4:ca:
                    74:06:47:3e:74:76:09:30:71:02:f8:f0:9f:a4:62:
                    ae:47:24:a3:15:d4:53:0e:7a:fb:61:0c:b7:7e:cd:
                    e9:68:12:d9:69:a2:23:c8:35:b3:c9:e3:df:b7:3f:
                    f2:ac:30:06:f4:85:dc:aa:fb:e4:7d:f4:86:24:0e:
                    ca:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:BB:0B:87:CD:B4:E1:FC:D5:0C:B0:C2:8F:44:AE:24:FD:2D:30
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/8f26ac2bae08992f870ea36ff0313a93eca894ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.7.240/28
                  200.55.16.4/30
                  201.234.150.16/28

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:a4:0b:2f:03:74:fe:9f:d1:cd:0c:b2:3a:16:ab:49:11:
         17:d4:b1:90:e2:ef:9b:bd:f1:99:52:0f:e3:7c:2f:a2:5f:bd:
         cb:f6:26:d6:dd:a4:75:fd:50:b5:9e:06:3e:7d:9a:30:03:7c:
         ca:40:a0:4a:3f:b2:f1:ca:09:be:00:34:0f:95:e8:f7:39:f6:
         aa:95:f5:6f:31:27:5a:6b:c2:6a:4f:72:1e:6d:8f:4f:a6:66:
         80:5e:9f:c7:79:7d:18:07:c5:db:93:77:1b:5e:01:a9:58:a3:
         2c:9e:9c:4c:cc:ee:8f:78:51:92:b7:3a:3c:7f:05:5e:02:36:
         2c:67:34:38:72:44:24:ce:c7:e3:2c:1b:89:bf:56:71:89:f8:
         13:36:70:79:16:0e:d5:02:4a:48:13:9b:4b:4c:cd:cf:3d:80:
         05:fb:20:d1:cf:3b:97:d8:15:33:c3:91:4f:43:86:31:0a:35:
         8b:b4:b3:26:95:02:80:1d:b4:22:6a:4f:a8:21:0a:33:26:9a:
         09:78:73:1b:2e:86:6e:5c:48:86:3a:3d:df:0d:e5:11:cf:c8:
         6b:db:38:06:49:81:d9:39:12:13:6f:ef:3d:38:8e:ca:e0:f5:
         00:69:cf:94:78:07:4f:0b:bf:ff:84:71:5b:c4:d1:ae:44:cd:
         c2:13:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org