Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/cd713901c3a6c4ca12bab595b1f82defc551ab8b.roa
File:                     cd713901c3a6c4ca12bab595b1f82defc551ab8b.roa (raw, json)
Hash identifier:          LVsLP99Ls6ZMbtpl9K1A+8qFIehbvysfjmhMexFRCcg=
Subject key identifier:   A3:03:5D:52:9E:3C:6D:BD:35:3B:6A:D1:A2:52:EB:68:BE:8F:04:6D
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       248A4F
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/cd713901c3a6c4ca12bab595b1f82defc551ab8b.roa
Signing time:             Fri 21 Jul 2023 20:55:30 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     3356
IP address blocks:        200.41.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2394703 (0x248a4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=cd713901c3a6c4ca12bab595b1f82defc551ab8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:b2:ee:6f:aa:25:10:e9:c9:91:35:91:7d:
                    6c:b3:4a:63:ad:b4:99:1f:1a:57:28:ae:13:62:6e:
                    7e:1e:84:dd:7a:01:fe:c0:77:ca:75:c9:9a:97:44:
                    65:91:be:0b:3d:41:1c:d6:ae:3f:48:ec:f8:2a:46:
                    15:bd:aa:38:d4:8d:0e:b6:c6:15:13:4a:70:bd:eb:
                    ad:e5:1c:57:7a:c3:11:78:5d:b9:27:26:f7:07:72:
                    42:cc:17:17:f0:c1:95:8d:ff:09:ca:0b:72:4d:5b:
                    9d:fd:ce:0f:c7:fa:e1:09:7c:28:5b:d6:81:6e:d7:
                    dc:32:e9:b8:86:94:62:38:3d:0f:a7:78:d0:ec:f3:
                    9a:31:46:90:18:2f:28:ef:f4:61:e1:7f:4c:88:4d:
                    8f:14:b8:fe:eb:05:82:73:78:55:67:50:fe:ca:9d:
                    8a:a2:15:a0:b1:d9:2c:af:1e:de:10:3e:2b:8e:09:
                    f3:b8:3c:46:f8:25:14:78:62:3f:a4:35:87:e2:e2:
                    bf:56:73:a6:a1:a1:c8:80:d9:a8:e3:bb:7b:b7:78:
                    0c:4d:ba:f9:95:95:4c:31:7d:e2:69:ac:9e:d7:8b:
                    8a:76:cb:2a:e1:23:05:a4:e2:d6:b8:e5:da:9d:38:
                    bd:53:c8:31:0d:fe:59:ce:cb:e7:6f:97:b1:2d:1c:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:5D:52:9E:3C:6D:BD:35:3B:6A:D1:A2:52:EB:68:BE:8F:04:6D
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/cd713901c3a6c4ca12bab595b1f82defc551ab8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:95:23:11:3a:5e:05:ab:97:9b:97:9d:d0:16:3c:89:fa:29:
         4d:c0:c7:aa:18:41:e4:db:f7:47:f4:02:01:71:db:16:15:57:
         9f:07:d7:b0:0b:e3:25:e5:2c:07:8a:12:c3:ba:0d:44:96:59:
         81:c0:d2:72:2e:4b:af:4b:77:c0:43:39:03:0e:d1:95:17:62:
         b9:b3:e9:78:3c:bf:6a:68:60:fb:68:18:66:07:39:1f:02:c6:
         ba:cf:a4:2c:ad:bf:db:9f:08:3c:7e:7a:40:f1:0c:00:81:65:
         4e:ba:b3:8c:a4:53:6d:1a:9c:80:d0:7f:d0:1a:4a:63:bd:39:
         a0:62:9a:a3:c0:3c:0d:5b:b6:ac:bc:51:61:5d:aa:d7:19:67:
         4f:de:91:6c:33:60:14:13:4c:08:f3:86:2d:34:76:33:ff:ab:
         12:27:c7:29:6a:44:89:3a:4e:db:bb:a2:49:f0:af:34:67:13:
         d1:85:b5:22:9e:5f:e2:6b:f7:3c:ee:55:a9:52:e1:40:14:03:
         e3:9d:6c:d9:fd:4c:92:ad:02:a6:43:34:74:bd:65:4e:7a:f8:
         93:ae:f8:07:97:09:cd:77:ba:94:83:27:4b:e8:02:e0:0b:e3:
         26:b7:7f:dd:66:96:57:3e:ce:00:6c:59:a4:da:5b:16:5d:57:
         0d:63:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org