Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/e3b79e71ab750354ccd834dace770bd5afbf65da.roa
File:                     e3b79e71ab750354ccd834dace770bd5afbf65da.roa (raw, json)
Hash identifier:          FvMdXMzEfo30E/CJ5ONLITnUaBe85Wirwt44YOTY/m4=
Subject key identifier:   FC:35:46:92:88:68:09:E7:75:A3:9F:BD:FB:F1:44:E6:4B:86:42:22
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       254EE0
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/e3b79e71ab750354ccd834dace770bd5afbf65da.roa
Signing time:             Wed 26 Jul 2023 17:42:10 +0000
ROA not before:           Tue 25 Jul 2023 17:42:10 +0000
ROA not after:            Sat 26 Jul 2025 17:42:10 +0000
asID:                     271904
IP address blocks:        190.216.226.0/24 maxlen: 24
                          190.216.227.0/24 maxlen: 24
                          190.216.237.0/24 maxlen: 24
                          190.216.250.0/24 maxlen: 24
                          201.234.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445024 (0x254ee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 25 17:42:10 2023 GMT
            Not After : Jul 26 17:42:10 2025 GMT
        Subject: CN=e3b79e71ab750354ccd834dace770bd5afbf65da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:13:ca:16:be:2d:0a:b5:fc:f5:e3:85:4a:57:
                    86:48:cc:14:00:c4:5e:9c:de:05:93:4f:f4:7c:29:
                    e1:05:68:61:c5:1d:8d:f4:be:3f:6a:f7:35:cc:25:
                    36:ea:19:47:80:7f:04:b3:d7:b6:0f:7f:e0:41:9b:
                    72:9c:1b:4d:97:70:1c:f5:62:30:99:e2:c8:24:fb:
                    83:53:75:1d:f3:2e:4b:1e:7a:e0:6b:23:d9:eb:28:
                    86:96:41:c8:58:d2:fd:a5:e3:ff:d6:39:b9:c5:d9:
                    f8:43:68:76:74:04:ac:e7:94:ed:6e:ef:fa:03:fc:
                    78:6d:24:b9:bb:9d:aa:ca:3c:ba:e1:cc:53:4a:1a:
                    64:36:f4:57:0e:72:7d:f5:07:ed:92:06:de:60:da:
                    d7:94:7b:f0:e4:76:ef:07:4e:11:29:a4:dc:19:94:
                    2c:5a:58:50:3d:62:65:7c:3a:50:54:e3:f3:0a:35:
                    ba:1b:85:32:29:3a:94:60:55:d7:98:bc:3c:e0:1a:
                    c6:0c:bc:45:88:59:95:5c:69:d3:e8:c5:8d:8a:ac:
                    29:c3:6a:a8:ce:fb:25:00:3f:6a:7a:43:95:e0:c1:
                    1a:4c:69:84:9c:33:43:99:49:16:1b:14:94:bf:3f:
                    ae:bd:ae:29:c9:3b:c5:27:a6:1f:4b:31:f3:a9:da:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:35:46:92:88:68:09:E7:75:A3:9F:BD:FB:F1:44:E6:4B:86:42:22
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/e3b79e71ab750354ccd834dace770bd5afbf65da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.226.0/23
                  190.216.237.0/24
                  190.216.250.0/24
                  201.234.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:71:6a:f0:09:a2:33:16:da:39:9c:2d:a9:23:5b:be:fc:
         bd:3f:0e:35:7b:46:8b:56:4f:6c:53:e1:6c:93:38:8b:1a:df:
         d3:80:e9:59:65:38:34:12:bb:5d:4d:b5:a0:36:26:4a:0d:6a:
         c5:7b:72:d4:2c:0a:cd:6e:f5:68:f0:b4:86:6d:83:e0:25:b6:
         93:87:c2:3f:0a:5e:e3:cf:1b:b5:fe:71:51:57:4a:0d:de:cb:
         5c:6a:c0:20:5f:97:06:fb:ac:c0:3a:e3:85:25:12:c5:60:0e:
         cc:45:5e:d5:2b:71:e8:c7:d9:26:93:b9:ec:67:54:8c:23:51:
         e5:78:99:65:89:73:95:dc:31:88:b2:7f:db:a5:36:66:ef:cf:
         cd:73:c9:88:eb:cd:24:0a:57:de:f4:ff:d8:c0:bb:a3:14:18:
         6f:33:0a:04:7c:b5:d2:d2:27:54:86:91:92:b6:1d:fd:c6:98:
         73:d8:fe:8e:f2:90:32:20:c0:56:2e:6d:ed:8e:0c:24:17:63:
         d2:82:57:55:53:8e:d1:c4:e1:dd:2c:bc:c9:24:d8:ce:a9:3a:
         ec:43:b8:57:d7:dd:f0:ba:5c:98:3a:af:82:1b:a3:0d:f4:aa:
         04:60:0f:cb:e9:e1:b7:d8:16:09:d1:0a:ea:33:e6:67:ad:ad:
         4a:d4:17:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org