Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f06659f2e9ef1511372983223c877a6fa20decbd.roa
File:                     f06659f2e9ef1511372983223c877a6fa20decbd.roa (raw, json)
Hash identifier:          /ZmBvp2pLE3VnpocyZdad01UqJlYuAgE1JVUQO29tl4=
Subject key identifier:   95:57:5F:5B:EB:28:73:8B:B0:15:43:E9:85:3F:6C:D2:51:B6:C5:6E
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       25137A
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f06659f2e9ef1511372983223c877a6fa20decbd.roa
Signing time:             Fri 21 Jul 2023 20:56:56 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     262187
IP address blocks:        190.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429818 (0x25137a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=f06659f2e9ef1511372983223c877a6fa20decbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:e7:73:04:a5:ee:ab:e4:17:00:5e:0d:8f:
                    6c:d5:29:b0:21:78:f9:73:2c:5c:ba:bc:ee:1d:13:
                    02:a2:34:c9:c4:46:e4:7f:bc:c0:9b:cf:71:2e:7f:
                    f1:b3:b0:21:d1:50:76:ba:f5:c5:c4:47:6c:2b:67:
                    c9:4c:97:ad:55:2e:ec:e0:80:d4:13:5a:84:3f:1b:
                    14:a2:4b:cf:ec:0d:3a:93:bd:32:69:da:e0:8a:fd:
                    99:cb:50:0c:25:bc:78:ae:b0:92:fd:78:88:c4:c0:
                    c5:a3:ef:60:c1:84:78:90:4c:43:48:ec:cf:e6:6e:
                    44:6e:f9:13:69:15:88:a2:3c:95:36:ad:65:c4:70:
                    40:8b:30:dd:7e:f8:9d:ee:f5:03:e5:34:de:44:16:
                    0a:c5:7e:91:63:19:5d:01:49:24:34:c4:25:7b:5a:
                    5e:c2:24:42:31:d7:d5:ff:97:30:f5:61:7b:86:2b:
                    07:b5:f6:76:cc:8b:31:78:8b:05:70:e9:89:6e:45:
                    5b:60:eb:c4:d0:09:df:c4:71:f0:d7:b3:a9:26:55:
                    c8:6d:47:6f:4a:63:f1:7a:fe:77:ad:1c:b4:3a:52:
                    ef:67:0a:4a:9a:0c:f3:9d:78:d8:0c:cc:56:54:a0:
                    f4:cd:3a:cd:a7:a7:77:5a:67:34:1e:e3:bd:38:ad:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:57:5F:5B:EB:28:73:8B:B0:15:43:E9:85:3F:6C:D2:51:B6:C5:6E
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f06659f2e9ef1511372983223c877a6fa20decbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:aa:47:fb:46:41:37:04:04:1c:08:8e:9f:bb:93:50:b9:59:
         e5:aa:ae:7a:ad:68:0e:ce:02:03:ca:e1:9c:42:d0:d7:f9:65:
         02:d3:e9:d1:a9:29:b0:ca:bf:dd:6d:e8:d5:6f:54:01:fe:e1:
         f2:b4:80:de:2a:22:cc:a5:ba:e0:c1:0d:73:38:35:e4:65:39:
         c7:de:35:d2:d5:09:31:a2:f6:de:34:e7:a6:49:45:43:46:d0:
         d6:bc:f1:0c:06:8d:5a:6b:0d:29:30:5c:73:79:25:d8:2b:9f:
         f0:04:e7:1b:39:97:2a:ce:bd:b1:9a:86:76:a6:ed:7c:bb:73:
         78:0b:58:82:9a:38:b8:45:06:36:54:52:32:8f:59:79:1d:88:
         dd:19:89:a3:cb:35:2f:84:b6:23:47:37:9f:b3:f7:e8:4e:c8:
         2d:7a:34:d0:16:16:d0:f7:60:6b:5e:3b:45:73:05:e5:f9:02:
         bd:ba:4e:94:ce:fc:d3:32:ea:db:1f:46:b9:3c:f5:ce:5a:b3:
         b2:e5:72:18:50:47:2a:d5:de:13:58:b8:ea:00:c8:78:6e:2c:
         e2:19:89:1f:d0:1b:cf:9c:07:4c:93:a1:d8:63:b2:b4:ce:08:
         38:43:f4:9e:36:87:27:77:0c:68:d0:c8:89:9f:29:fb:18:a9:
         c8:40:2b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org