Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a30c1d8d75c7a24a3d94109297fbd682cec05873.roa
File:                     a30c1d8d75c7a24a3d94109297fbd682cec05873.roa (raw, json)
Hash identifier:          YJesQBxHdG9J2VIaPPyp2Fy4PWb0zWhsINMofzBgIi0=
Subject key identifier:   3F:9E:D6:2D:A5:1C:F1:5B:32:EA:23:24:B8:C7:F3:8A:59:DB:57:8C
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       24B05D
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a30c1d8d75c7a24a3d94109297fbd682cec05873.roa
Signing time:             Fri 21 Jul 2023 20:55:45 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     52263
IP address blocks:        190.217.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404445 (0x24b05d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=a30c1d8d75c7a24a3d94109297fbd682cec05873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1e:7c:0a:4d:16:58:ff:30:d4:fc:66:5f:a6:
                    c3:85:fa:74:60:0f:75:e4:e1:58:bb:ff:f3:11:08:
                    48:8c:38:41:68:cf:82:92:79:c4:30:a7:0f:e2:4e:
                    e9:6c:36:c1:ee:18:12:10:66:2c:65:04:73:61:a6:
                    7c:a6:f1:70:ea:f1:9a:69:9e:dd:15:99:0d:e8:69:
                    17:1f:8a:c8:da:2f:37:07:10:c6:48:eb:1f:95:4a:
                    1d:b8:bd:f4:78:c4:98:95:4c:80:2f:0c:64:fe:a5:
                    72:fd:f4:4b:03:01:9f:2c:08:9b:53:fd:13:d6:31:
                    b1:34:2e:a3:ce:0c:d6:9e:07:ba:e3:75:72:04:87:
                    f8:55:3e:83:3e:7f:80:e2:96:78:b8:4d:1d:72:9d:
                    42:71:b8:f1:3c:0b:43:35:c2:a9:48:e4:29:36:cf:
                    78:62:4e:73:4c:81:d9:7f:60:32:11:64:8f:be:52:
                    c1:73:51:a7:63:a1:b9:80:46:81:f9:e1:fb:2f:e6:
                    40:3e:4e:67:f4:a6:53:d8:7b:a6:f8:5b:51:1c:fc:
                    20:f9:79:3f:2f:3e:95:4d:30:48:e3:08:f3:1b:b5:
                    fd:2f:18:a9:1c:fa:7e:a9:df:97:a2:0d:4a:e7:ae:
                    15:26:a3:07:ec:c1:89:f3:e8:f3:ea:bf:32:48:ff:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9E:D6:2D:A5:1C:F1:5B:32:EA:23:24:B8:C7:F3:8A:59:DB:57:8C
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a30c1d8d75c7a24a3d94109297fbd682cec05873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:d8:a6:cd:f3:5b:58:03:0d:f9:d0:42:2c:89:f6:22:ed:
         b3:d9:23:e9:29:d1:a5:e1:50:68:dc:15:4c:f8:87:6f:e1:91:
         44:1e:7c:33:ce:aa:74:59:91:48:58:1c:41:2a:b9:33:5c:0a:
         e7:d2:75:d0:b4:96:4d:88:8c:47:bc:46:68:26:3a:1a:58:0c:
         13:7c:30:e5:84:9e:eb:29:9e:2f:28:83:79:2c:90:31:fe:bd:
         22:a1:fa:28:e3:1a:14:13:75:be:c9:f8:f3:4e:14:b0:3c:c0:
         09:14:ea:1d:21:48:8f:09:6c:3c:2a:95:a3:a1:55:a5:77:01:
         a6:d2:98:48:a1:8d:57:0b:0c:36:c4:50:ae:8d:13:e3:3d:d4:
         e9:5d:19:29:28:4e:1a:6f:92:b6:f4:08:0f:1d:3b:31:2f:3a:
         08:53:50:4a:b2:75:09:10:83:c3:07:05:4e:33:29:99:0d:eb:
         89:3e:be:bb:8c:e2:5a:e9:eb:79:ec:22:ad:45:4c:7c:f2:f9:
         0e:17:aa:a7:12:1a:8a:b8:08:0a:d4:55:82:8b:1a:0a:4e:e8:
         32:40:37:18:ab:f2:df:ca:35:9d:dc:78:56:d3:8e:df:de:99:
         5c:c2:63:97:89:ca:b0:a0:9f:92:2a:cf:4f:6f:6f:d6:ba:31:
         d4:3b:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org