Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9df58ee1b28223dbdb40d87401c98fca8b6976c3.roa
File:                     9df58ee1b28223dbdb40d87401c98fca8b6976c3.roa (raw, json)
Hash identifier:          VdRVAg4koCEUyV3MAo/7pZh/1KQ6r+3EYgEeoSxJBbM=
Subject key identifier:   0F:BB:70:EA:84:D7:6C:43:17:19:49:6F:0E:B1:7A:68:20:6D:8F:F8
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       24EEBE
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9df58ee1b28223dbdb40d87401c98fca8b6976c3.roa
Signing time:             Fri 21 Jul 2023 20:56:30 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     22698
IP address blocks:        201.234.187.0/24 maxlen: 24
                          201.234.188.0/24 maxlen: 24
                          200.31.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420414 (0x24eebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=9df58ee1b28223dbdb40d87401c98fca8b6976c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:98:38:a9:2c:ff:b1:1c:b8:d6:00:36:27:
                    a8:6d:8f:26:44:ed:27:7c:8f:09:4a:65:27:70:62:
                    01:99:7d:df:1d:b3:df:9c:44:8f:9d:52:14:60:87:
                    a9:81:bc:89:24:0d:ba:2d:1c:df:be:55:db:88:8c:
                    3e:33:0e:8b:1a:3e:de:04:c2:63:67:54:b4:cd:e5:
                    46:a5:0f:e7:07:f4:09:20:de:09:20:b1:74:65:b5:
                    7b:3b:16:f2:11:c2:ac:ca:32:b2:da:07:98:6b:47:
                    91:d2:74:05:ee:66:2f:7b:68:33:76:e5:a5:85:39:
                    9f:ca:a3:c4:e7:ae:5f:c5:95:16:a2:f8:b9:72:78:
                    f1:19:1b:82:30:06:c4:8c:1a:62:68:26:c5:37:2d:
                    7d:d1:c1:0b:12:31:d8:bd:24:fa:16:4c:2d:40:1f:
                    2b:2f:26:2c:38:d7:55:bd:06:09:25:3c:17:71:3b:
                    cc:cf:7c:d9:79:e5:c6:2f:35:ce:07:85:77:4e:5c:
                    db:9c:82:0c:f2:3a:f9:6a:73:95:a2:80:8e:65:69:
                    66:51:28:25:10:bc:d0:6e:e5:8b:e0:11:ce:85:a3:
                    30:20:83:7a:f9:9a:c1:54:78:85:6c:40:8f:6a:b4:
                    e2:40:91:df:66:34:e4:56:55:97:e1:40:74:a9:17:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:70:EA:84:D7:6C:43:17:19:49:6F:0E:B1:7A:68:20:6D:8F:F8
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9df58ee1b28223dbdb40d87401c98fca8b6976c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.18.0/24
                  201.234.187.0-201.234.188.255

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:4f:00:0e:37:94:25:22:12:70:58:ae:10:58:a1:9c:97:
         19:5b:de:a9:19:f8:46:ab:f9:00:12:92:ca:fb:f2:36:b7:b2:
         05:18:28:12:58:c0:36:41:f9:0d:74:6d:40:92:0e:6e:50:8b:
         f7:77:76:7a:93:0e:76:56:98:ef:b8:11:af:d5:5f:ce:40:c8:
         db:58:a0:24:d1:a6:b7:cb:15:31:40:70:d7:36:68:9b:6e:9b:
         ff:bd:86:21:8c:25:b8:c3:5f:34:28:51:6b:f3:3f:54:23:96:
         4b:b3:a4:b8:e6:4e:a6:10:bd:fc:0a:c4:43:ac:5d:e1:18:72:
         5a:7f:46:4c:3b:8e:c1:29:dd:86:31:d4:b7:e2:d7:1d:a4:98:
         31:6e:60:64:dd:35:70:eb:3e:d2:6d:f0:d4:31:3d:2f:85:70:
         18:48:53:c8:47:87:b0:10:48:8f:19:f5:33:9d:9a:77:1c:89:
         aa:9e:de:ac:ed:0e:99:96:8a:49:a0:48:df:90:f3:22:26:d5:
         c3:f4:98:09:49:69:d7:cd:9e:d9:f5:3e:02:f9:79:00:bd:0c:
         31:b0:84:6c:8e:93:e2:10:98:c8:54:6a:b1:1f:5f:9b:64:7d:
         3c:8d:07:0c:c1:de:48:55:25:e8:7b:bd:ee:c7:9a:2e:65:92:
         19:11:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org