Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/d0afea22f2a4af42cf517cd1745536006b5c8f06.roa
File:                     d0afea22f2a4af42cf517cd1745536006b5c8f06.roa (raw, json)
Hash identifier:          91DSg2IqaMwphKJ0WTTY95pOgq/ltcs6v5PXtB5ZRtM=
Subject key identifier:   4C:1E:C9:01:6A:89:8F:97:6D:AD:44:5C:DA:BF:61:09:8E:B1:A6:B1
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       246816
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/d0afea22f2a4af42cf517cd1745536006b5c8f06.roa
Signing time:             Fri 21 Jul 2023 20:55:23 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     269832
IP address blocks:        190.217.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2385942 (0x246816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=d0afea22f2a4af42cf517cd1745536006b5c8f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:aa:19:48:46:19:5b:b4:5b:e0:6e:86:ac:
                    c4:5d:35:b5:2e:07:07:e2:f5:36:43:da:ea:90:13:
                    51:49:75:71:fb:d3:56:7d:f4:fd:0b:9a:75:e8:43:
                    8e:43:77:e5:75:cd:98:a4:1f:62:23:c3:05:d8:4f:
                    96:be:c9:11:43:c8:cc:55:e9:76:1e:ed:e0:3c:10:
                    92:9f:3f:ce:78:c4:85:23:4a:5c:88:5f:d1:91:b8:
                    97:73:5d:97:38:d3:d0:6d:9f:43:87:38:c8:56:68:
                    f4:22:3a:d2:40:1c:c0:a2:86:81:a2:f9:6b:4d:6d:
                    b5:28:0b:d0:16:4d:42:d8:fe:43:fa:99:b4:a1:f0:
                    1f:89:bf:ff:b4:d1:3f:9d:19:3e:0b:3c:e3:63:ca:
                    26:b0:8e:f0:84:bf:aa:5d:3b:27:6a:33:d6:34:3f:
                    ff:ca:96:c3:bb:02:10:cc:8e:59:4d:83:f4:37:ca:
                    1f:4a:18:92:cf:05:40:f2:31:ce:9d:1e:73:94:a4:
                    90:d5:ca:a6:40:9a:b9:4d:11:44:a3:5d:87:82:7d:
                    53:a0:73:12:46:c5:38:30:73:7c:32:38:46:98:88:
                    2b:b2:3d:d8:e3:ad:3f:e4:4c:23:34:f0:a0:c7:b7:
                    47:af:d5:36:ba:b5:43:04:28:82:3b:e1:20:ce:b0:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1E:C9:01:6A:89:8F:97:6D:AD:44:5C:DA:BF:61:09:8E:B1:A6:B1
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/d0afea22f2a4af42cf517cd1745536006b5c8f06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ef:b3:6a:a2:2f:5b:85:04:eb:fd:bf:f9:f5:11:5c:4e:27:
         b6:18:b7:55:92:b7:55:a6:6c:11:1c:84:1f:92:e8:77:6f:bd:
         0f:16:56:ab:ad:e4:4e:68:1a:12:15:5c:e2:97:b9:05:e2:16:
         05:bf:a3:dd:55:98:cf:d6:d9:1f:af:95:41:66:be:6a:8e:20:
         e3:39:1d:05:91:87:c2:5c:a6:fa:84:a8:89:b5:a2:a6:28:62:
         bd:a6:30:03:c1:ae:90:f7:43:6f:0d:27:1e:bd:b5:ec:45:a7:
         c0:dd:65:f2:11:08:cb:25:75:e9:91:47:e7:ff:e4:bc:a3:e3:
         75:73:b5:6c:5d:c6:95:4d:93:9e:d5:19:9f:42:25:a1:65:b9:
         a0:c9:9a:27:3e:ad:14:43:55:08:f7:2e:a2:72:24:ae:03:9e:
         68:34:e8:ee:02:8a:f7:81:30:0e:e6:5e:5f:a8:74:84:7c:e6:
         64:8e:11:38:d6:b6:71:f8:25:d8:12:c0:e8:c1:b4:d2:47:82:
         f9:f0:08:a7:7c:0b:4f:f4:53:f4:86:2d:1c:55:bf:5c:50:59:
         ac:dd:43:95:aa:73:60:d9:e2:34:08:58:fa:8f:8f:4d:88:df:
         ff:fe:a9:bb:bb:45:97:d5:7e:17:c5:4d:c6:2f:64:b7:08:3f:
         8a:71:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org