Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9e8d5e02489b610421aa74c7e180a9b6ffd3a213.roa
File:                     9e8d5e02489b610421aa74c7e180a9b6ffd3a213.roa (raw, json)
Hash identifier:          +ga57l46JnO/OpLv5pIrmXeOIKjDEpznUAEKf6C/Ozc=
Subject key identifier:   18:88:D8:16:2A:61:27:2D:6F:06:2E:36:8B:92:A5:D9:6A:B5:6E:FF
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       250F01
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9e8d5e02489b610421aa74c7e180a9b6ffd3a213.roa
Signing time:             Fri 21 Jul 2023 20:56:51 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     27951
IP address blocks:        190.217.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2428673 (0x250f01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=9e8d5e02489b610421aa74c7e180a9b6ffd3a213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:93:1d:dc:d3:26:99:bd:3e:25:d3:13:a7:
                    fb:a8:d6:ef:73:02:ab:0b:6b:ae:67:40:c3:95:14:
                    14:4e:a6:a9:b3:20:52:9d:9c:3e:48:2c:b3:35:fb:
                    31:04:25:a9:3b:f8:d3:d3:51:92:48:74:1a:33:e3:
                    7a:d5:8a:a4:1a:37:53:3b:60:4d:22:02:18:70:36:
                    d0:fd:05:a7:58:e6:3f:70:fe:42:33:34:a2:6a:6a:
                    df:59:6d:8b:d7:76:d8:25:4c:26:bf:40:06:c3:7f:
                    b1:bd:7c:51:55:ee:3b:b4:bd:04:cc:96:5e:f6:dc:
                    80:68:38:57:6e:d1:f6:97:a8:c2:52:72:77:32:3a:
                    90:08:62:49:3f:53:05:db:8d:3a:9e:a2:60:d0:bb:
                    71:1e:10:f3:f5:f5:fa:41:b4:ae:cf:c2:0f:da:6c:
                    be:ee:7c:0d:86:08:9a:c8:59:cd:59:09:05:32:0f:
                    6f:cd:1a:0b:d2:81:6f:f7:15:50:61:91:c4:4a:17:
                    45:42:3a:3d:f6:cf:de:2f:75:78:bd:8d:1f:7c:ad:
                    d3:2a:1c:11:0a:d6:f4:c3:3e:39:7e:fd:24:f9:69:
                    2c:f1:20:9f:37:83:9b:2c:48:73:8d:c7:12:47:b7:
                    0c:74:58:25:2f:c7:0a:c2:22:e9:d4:36:2b:0e:e3:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:88:D8:16:2A:61:27:2D:6F:06:2E:36:8B:92:A5:D9:6A:B5:6E:FF
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9e8d5e02489b610421aa74c7e180a9b6ffd3a213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:64:e9:15:8f:f7:d4:22:1f:c4:9e:5b:e6:93:cd:48:11:
         3e:04:f0:b0:93:a3:a2:60:71:0e:6e:e0:b9:8b:67:47:a6:e1:
         ce:b0:6f:67:4c:d2:4c:12:7f:09:5a:8e:30:09:11:64:b4:19:
         0f:d9:96:10:9d:12:8b:6e:ab:69:7a:56:bf:72:97:75:3f:53:
         69:da:46:4e:0d:d9:17:9f:52:22:39:fd:f4:bc:4b:86:87:32:
         e8:2d:b4:ef:3c:9c:3a:a7:c9:5a:3b:0f:f0:63:1f:ca:b6:bb:
         ff:ce:c4:39:ff:1e:ff:53:6e:bf:9d:42:3b:2a:7a:fc:02:41:
         e4:c8:db:b0:7b:25:43:df:f8:14:41:7d:48:6c:0e:3c:33:af:
         f0:b0:46:33:68:a8:73:5d:94:24:da:dd:84:5c:22:69:3f:d3:
         98:cb:c0:be:1e:de:43:79:fd:60:f8:b6:47:23:42:11:44:9a:
         83:f6:ac:63:0d:ec:28:31:19:d8:9d:59:c2:54:55:11:26:03:
         a4:b1:0b:8e:61:86:30:55:ef:87:cd:9b:32:dc:ac:88:f0:ac:
         e5:4d:b0:47:ec:01:93:27:d3:82:fa:b2:8d:56:5b:70:30:4e:
         ad:18:6c:fd:80:71:a2:a4:ba:35:fd:2f:38:67:3f:32:3d:69:
         c4:62:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org