Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9b73a8c36f0717ae9403d3c9e8a07d365618739f.roa
File:                     9b73a8c36f0717ae9403d3c9e8a07d365618739f.roa (raw, json)
Hash identifier:          4qT/9aRX5aXwdPtehxDRBakkDlE4HgAziLF+t03d120=
Subject key identifier:   48:6E:3D:4A:D6:07:76:1D:94:52:8A:1B:B6:ED:24:42:24:C3:2F:B1
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E683E
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9b73a8c36f0717ae9403d3c9e8a07d365618739f.roa
Signing time:             Wed 24 Mar 2021 14:30:56 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     52263
IP address blocks:        190.217.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944190 (0xe683e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=9b73a8c36f0717ae9403d3c9e8a07d365618739f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:4a:01:38:9a:ff:da:d3:84:f4:ee:75:cb:
                    0b:49:1f:c2:74:bd:ee:4a:25:4a:76:1a:a4:e5:9f:
                    77:c3:6f:af:d6:49:4a:6c:3e:37:00:47:6a:39:91:
                    fd:ad:46:bd:90:44:75:1e:0d:c8:dd:d3:5e:0f:a2:
                    d6:14:a1:b8:1a:54:21:45:48:22:cc:97:5d:0b:d7:
                    d5:e5:a8:e5:b9:c8:dd:66:7e:0a:ed:83:97:c4:74:
                    30:24:b4:99:d8:57:8d:5e:8e:47:88:d9:8c:fb:a8:
                    e7:62:2b:cb:2c:6f:db:e6:ca:7a:44:45:e1:0b:a4:
                    5c:ab:aa:fe:26:50:80:73:58:ae:99:64:6a:60:d8:
                    78:61:06:9f:ec:f9:67:ce:7b:10:15:29:54:50:4f:
                    26:86:23:12:52:0f:00:51:5a:23:5f:68:94:6b:58:
                    d8:56:c8:c6:c2:07:bd:4f:9c:c0:51:d4:c5:d1:69:
                    9f:22:44:f8:c2:e0:5c:ff:a2:81:9d:9f:e6:30:c6:
                    05:c3:41:6f:d7:09:54:1f:6b:56:43:26:8e:d7:24:
                    a5:43:5c:e2:77:a2:51:04:2b:e1:a9:09:18:3c:8f:
                    78:09:69:2d:4b:b5:88:4e:1c:ed:a3:15:ef:9b:c6:
                    8d:30:42:66:d0:7c:55:56:02:27:cd:9c:fe:fd:ce:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6E:3D:4A:D6:07:76:1D:94:52:8A:1B:B6:ED:24:42:24:C3:2F:B1
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9b73a8c36f0717ae9403d3c9e8a07d365618739f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:c2:ae:ef:64:8f:31:63:4d:e0:cf:6b:a4:05:2b:c8:50:
         a4:ea:48:5a:47:d0:d6:04:8e:1f:7d:50:84:84:06:a5:19:6a:
         4c:70:0b:2e:99:fc:94:f8:eb:99:d8:0b:18:70:bf:6f:af:fe:
         f0:57:2e:22:c5:56:46:31:e8:54:33:09:67:20:4e:da:c7:10:
         34:9e:fd:96:30:f0:0a:fb:f3:d8:b8:23:39:e1:a7:7b:d6:63:
         c7:8c:d0:46:f4:71:88:86:44:e7:ba:a5:e5:9b:63:a0:38:0b:
         81:b9:9a:9b:1d:98:3f:8e:2b:05:b7:1f:5d:a8:11:6f:19:c7:
         cb:a0:23:db:c6:5d:72:ed:1b:db:9e:4f:ea:9f:b4:d4:d1:21:
         58:96:1f:87:b0:d5:f3:ac:9a:51:6f:5b:80:4b:7f:a5:ab:73:
         2e:81:75:dd:6c:08:52:95:84:e6:77:f9:de:0d:04:31:8e:3d:
         2b:a6:12:c0:34:32:66:44:f0:37:2c:4f:2a:7f:8b:a0:cc:d4:
         f0:17:52:9e:34:1c:47:df:73:d4:51:d0:da:e8:08:aa:ae:82:
         8a:a6:5a:24:1a:24:de:aa:9e:09:eb:7b:f5:8c:45:b3:67:9d:
         55:d6:5e:70:d6:3b:93:17:22:72:c9:d9:0e:ed:bc:87:79:8a:
         67:c3:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org