Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9dad282d4f1cfd85716bf9e783594b53a3619c83.roa
File:                     9dad282d4f1cfd85716bf9e783594b53a3619c83.roa (raw, json)
Hash identifier:          m40K+G81dmW4wqPosURgJhXdF6GVJy9aZ6is5vThkVs=
Subject key identifier:   06:BD:55:F4:97:20:A3:AD:E1:BA:D5:E9:12:16:0A:28:76:E6:20:B3
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       246ED1
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9dad282d4f1cfd85716bf9e783594b53a3619c83.roa
Signing time:             Fri 21 Jul 2023 20:55:25 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     32590
IP address blocks:        190.217.33.0/24 maxlen: 24
                          190.216.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387665 (0x246ed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=9dad282d4f1cfd85716bf9e783594b53a3619c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:8f:cc:51:62:10:89:95:64:a3:f2:3e:1a:
                    1e:95:e2:a4:96:ab:56:52:88:47:1d:fe:2b:61:04:
                    59:ec:a7:4e:49:c7:b0:fc:cb:64:a4:f4:62:0d:66:
                    e1:46:cd:4d:aa:bf:3a:fd:12:3d:8c:11:2d:90:b4:
                    2e:6b:08:6b:50:7d:07:ac:6d:65:39:06:70:0d:29:
                    8c:60:b5:08:86:c7:12:42:00:8a:56:50:aa:f5:b4:
                    c6:64:9c:c9:f9:a9:ac:03:9c:9f:84:bd:37:4d:50:
                    8d:3b:55:71:37:56:e3:4e:f5:e3:ca:e0:00:e4:e6:
                    f3:f3:6b:3e:be:81:5a:7d:d9:60:ec:00:4f:10:54:
                    10:e8:c5:f4:ee:62:b7:c4:77:a5:8d:7e:f9:78:93:
                    8b:56:c9:6f:41:b4:49:b4:42:00:d7:c4:5d:83:06:
                    1c:94:34:ed:21:37:40:2a:6d:00:7e:2f:63:3e:ba:
                    69:55:20:fd:d7:7e:ea:05:2a:2e:6b:a2:e2:94:dd:
                    96:3b:7c:7b:8c:65:a2:00:ac:4b:5d:92:4f:60:cd:
                    82:61:b8:bb:fb:e5:39:df:84:8e:e7:55:88:84:26:
                    01:01:6b:62:8b:d8:44:b9:d3:b2:5a:9e:5a:47:b8:
                    02:bc:0d:2a:aa:a9:86:90:80:ef:36:84:06:af:86:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BD:55:F4:97:20:A3:AD:E1:BA:D5:E9:12:16:0A:28:76:E6:20:B3
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9dad282d4f1cfd85716bf9e783594b53a3619c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.121.0/24
                  190.217.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:58:78:1d:14:23:ad:b4:7c:c1:54:30:0c:50:34:71:d9:
         bf:cb:6e:89:3a:eb:37:ea:4a:6b:08:2b:09:6e:d5:92:68:35:
         02:85:63:99:04:cc:ab:c3:57:95:4d:83:01:cd:2d:b7:02:18:
         c3:21:89:2d:ce:9e:35:dd:77:b2:18:fe:f2:45:a0:6c:c1:92:
         c9:e9:38:e4:14:f8:d5:87:40:8c:11:7a:6c:a3:2a:26:06:c9:
         34:86:b2:4f:40:f7:c9:0d:f6:58:c5:9e:c7:1b:a9:bc:1d:f1:
         e8:a5:7c:49:41:9e:47:20:b2:80:ff:53:f5:7c:71:a8:00:a8:
         f4:56:ce:77:0e:5f:44:85:46:0e:6f:56:83:f6:3a:08:57:3f:
         26:2b:af:89:5c:e1:1c:5f:58:a4:3b:a7:7c:8f:2f:17:b0:68:
         06:0a:53:23:db:6d:ac:7f:3f:79:d6:6b:10:99:8f:63:02:60:
         31:3d:17:d7:15:d8:c2:b9:ec:d0:49:04:fe:0a:aa:37:24:05:
         67:78:8e:bf:42:f3:66:c6:73:d8:b2:bf:96:25:13:cf:5a:e7:
         6c:0d:47:01:c3:fb:5c:54:08:9b:74:cc:b7:a0:86:de:cf:3a:
         c9:cd:8e:2c:68:12:f6:12:44:18:1c:48:b5:0b:bb:97:ec:82:
         40:f0:26:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org