Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/da878371f073ab97d886bd64eb9490423191b86c.roa
File:                     da878371f073ab97d886bd64eb9490423191b86c.roa (raw, json)
Hash identifier:          BLEbLdf3a6vrwRJyJtT76W/WF6NNQoS5GK6wSXCto3I=
Subject key identifier:   45:8D:5B:79:1C:B9:12:43:8A:79:48:8C:B7:62:0B:53:F5:CB:E2:AF
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E1F80
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/da878371f073ab97d886bd64eb9490423191b86c.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     28097
IP address blocks:        190.216.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925568 (0xe1f80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=da878371f073ab97d886bd64eb9490423191b86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:9c:a3:99:92:c4:e9:51:45:71:21:69:ef:
                    c8:6c:2a:6f:c2:88:4b:dd:80:9e:38:a2:c8:f3:e3:
                    68:27:fa:24:11:5c:b5:d9:70:59:70:0d:85:24:88:
                    aa:5a:99:98:a1:6d:6c:14:b5:97:96:39:39:c7:de:
                    7d:59:5c:a3:31:42:46:38:2d:b4:43:7b:a4:78:f3:
                    88:bc:37:a8:20:8e:a6:c7:8f:a4:db:9b:27:0e:f6:
                    0c:79:b7:91:9a:20:e0:d0:3a:09:85:98:48:40:14:
                    42:83:6d:93:f9:0e:d8:88:07:e0:e5:12:eb:53:37:
                    88:85:b6:21:58:cf:7c:51:f9:75:88:a4:32:4f:86:
                    a5:b9:d8:b1:36:10:e3:30:0c:22:f4:08:e3:a8:8b:
                    31:c4:2f:5a:61:dc:ce:b9:ee:0e:f2:29:25:d3:3e:
                    18:82:c4:82:fe:dd:d0:ac:96:2f:9c:99:2a:e6:30:
                    83:22:23:9c:6c:0d:b8:20:b4:68:8b:fe:d5:d5:1b:
                    35:5c:28:e4:1a:1a:da:43:47:c1:72:0f:36:c7:fc:
                    2f:dc:f9:17:91:d7:09:51:99:bd:0c:65:99:b8:2a:
                    52:a1:15:06:ee:0d:24:82:b2:51:ed:2c:c6:03:46:
                    2b:39:96:fe:c0:ed:41:cf:3b:31:56:01:91:d7:e6:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8D:5B:79:1C:B9:12:43:8A:79:48:8C:B7:62:0B:53:F5:CB:E2:AF
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/da878371f073ab97d886bd64eb9490423191b86c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:78:71:ad:19:bd:78:d8:6a:e2:7a:7d:83:10:9a:23:ee:bb:
         ae:79:77:3e:ee:d2:20:be:db:5c:e8:84:62:76:41:43:5c:06:
         d5:50:a7:2b:2d:0c:80:d3:29:fb:13:54:ee:a5:82:f3:02:82:
         ac:91:67:7b:54:69:aa:8e:86:8c:93:74:9a:41:94:b7:c8:0b:
         19:59:c8:17:d0:fe:9e:be:89:7b:d0:fc:eb:31:a9:aa:cd:80:
         84:24:20:30:e6:75:38:f1:b4:c0:a4:a0:5c:b2:41:3e:44:03:
         ab:97:22:d8:ee:37:6f:d8:45:df:4f:f0:1c:04:70:49:96:fc:
         9c:8f:8f:f1:70:dc:cb:6b:d9:8c:9c:60:2d:62:a1:07:dd:1e:
         28:9d:54:d1:a9:7b:18:cd:c6:40:7a:2e:56:ba:4c:9b:ac:6f:
         33:90:6c:e9:34:08:7b:4d:7b:11:54:b1:8a:1a:2b:73:88:7f:
         7a:f1:65:2f:15:07:57:7f:fe:2f:d7:2f:f2:ce:ab:c4:f2:ea:
         7a:c7:5d:9d:80:0d:a8:b2:11:5a:db:13:7d:67:af:81:b5:9d:
         af:2a:1e:cb:aa:59:b4:51:f4:b3:10:89:b9:34:22:6d:60:7a:
         c1:77:de:8e:f1:8b:a1:84:4e:fd:41:cf:4a:32:1f:55:d6:22:
         4e:03:95:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org