Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f2d6503703ef6aed35202b645025fca50c43c53a.roa
File:                     f2d6503703ef6aed35202b645025fca50c43c53a.roa (raw, json)
Hash identifier:          ZrGFmom8+A9OkgsopOvFWlkz2NgEoI+DKpzW9tpcqpE=
Subject key identifier:   F7:10:82:45:59:FF:B1:26:50:0C:E4:7E:28:B7:E5:2C:B8:18:55:95
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E4CDF
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f2d6503703ef6aed35202b645025fca50c43c53a.roa
Signing time:             Wed 24 Mar 2021 14:30:56 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     265758
IP address blocks:        190.216.56.0/24 maxlen: 24
                          201.234.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937183 (0xe4cdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=f2d6503703ef6aed35202b645025fca50c43c53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:20:d2:66:d3:31:a4:85:c2:4d:7b:cb:bc:
                    31:2a:58:64:f7:6d:eb:7a:7b:76:da:22:fb:28:5f:
                    a3:b1:a7:34:0c:2b:78:d3:2f:4a:c3:97:4b:b9:d0:
                    f6:be:c6:8f:86:15:b5:f3:b9:fe:18:17:51:20:53:
                    48:9d:5e:11:c5:16:12:d5:39:e7:a8:d1:2d:84:89:
                    bb:c3:d6:ee:26:bc:15:ec:51:d3:2b:3a:76:98:a0:
                    31:d8:c2:9f:b1:cb:1b:2d:2f:dd:62:76:10:30:dd:
                    b0:fd:05:a3:f6:ba:69:01:3a:28:a9:dc:49:07:c7:
                    d2:0d:6b:b0:37:ba:e0:72:25:b4:fe:93:96:25:b4:
                    d7:d4:4a:65:ac:26:7b:02:5e:f5:66:4e:b6:87:b6:
                    50:ba:0f:66:d9:15:34:0d:6c:f7:63:01:e7:03:94:
                    fd:d9:3c:2d:58:9e:be:9a:87:97:38:29:84:80:b6:
                    2a:22:dc:21:69:aa:16:7c:e7:2f:1c:f2:98:b3:18:
                    28:83:e6:ee:38:ea:cb:bd:3a:64:48:3d:f1:d8:36:
                    de:5c:ec:f5:dc:75:ec:9b:82:92:98:41:a4:23:63:
                    93:37:54:72:b2:9a:cb:59:c0:28:ae:f6:df:a7:c9:
                    9f:74:33:d0:de:36:b0:56:76:14:d2:74:a2:fe:e5:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:10:82:45:59:FF:B1:26:50:0C:E4:7E:28:B7:E5:2C:B8:18:55:95
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f2d6503703ef6aed35202b645025fca50c43c53a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.56.0/24
                  201.234.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:56:c2:0e:94:73:60:c6:c5:6b:34:0d:31:9d:fd:98:72:60:
         70:b2:e9:5f:4f:3e:f4:03:de:5d:58:48:28:74:0e:5a:d6:a7:
         a3:85:1d:94:40:69:c3:6d:0e:32:61:b0:88:51:e2:72:de:b9:
         48:ac:90:d0:96:7f:c4:17:1e:b2:49:89:19:56:64:f1:c5:c9:
         80:79:76:cf:ae:f4:2d:a3:88:b8:4d:8a:4b:5c:cb:ee:53:e4:
         7e:ff:73:df:a2:3f:09:bf:95:78:44:7b:c8:99:40:5a:38:f8:
         ae:d2:57:43:85:0c:20:66:08:56:a8:77:27:07:b6:41:dd:33:
         6d:8f:ad:35:f8:e7:fa:98:88:2a:48:17:11:d0:c6:36:d9:56:
         9b:8f:07:11:c1:0e:64:97:b5:59:6a:bc:f1:9e:a1:11:5d:ac:
         b9:eb:2e:cf:11:55:da:39:cf:fc:b3:4a:a3:bb:99:dc:4f:13:
         ee:00:0c:84:ea:ea:ea:d6:ba:81:3e:0f:e0:42:d8:48:8b:5f:
         4f:cf:c6:6b:f6:94:61:51:c2:a3:4d:cc:58:f4:c4:e8:50:f2:
         42:7b:01:15:3e:7a:ca:98:49:09:b4:27:77:c2:9a:ba:a1:66:
         d1:38:c1:08:d1:84:be:50:ab:b7:01:8f:6b:fd:ed:a5:bc:e6:
         a6:28:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org