Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e.roa
File:                     f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e.roa (raw, json)
Hash identifier:          hQOWl0gW35+Uc3DD0CheUPuIvZR1QPMEocK+Em/fWtc=
Subject key identifier:   BD:9E:60:66:74:1B:01:6A:60:B1:40:23:B4:43:B3:83:3B:7F:B4:D4
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       24B907
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e.roa
Signing time:             Fri 21 Jul 2023 20:55:50 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     52255
IP address blocks:        201.234.101.0/24 maxlen: 24
                          201.234.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406663 (0x24b907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:1d:85:a1:c7:2a:51:ba:19:b1:4a:64:f9:
                    87:4c:22:31:3f:cc:9a:82:77:18:1e:c8:dd:a8:09:
                    41:37:f9:6d:1b:42:35:7b:d5:cf:93:50:90:b4:ec:
                    ba:09:72:61:40:30:c9:68:5a:39:40:bc:0d:66:32:
                    e2:be:f9:a6:91:56:e9:31:4d:8f:b6:1a:ca:60:6b:
                    55:15:eb:90:0a:2d:eb:12:be:9f:6f:1c:ed:6c:08:
                    9b:7a:0c:29:04:94:92:38:ce:07:dc:46:1a:7e:7d:
                    72:31:17:b2:89:31:72:30:bf:31:f8:4d:5b:6c:14:
                    fb:5d:c7:29:e2:56:72:4c:fe:0e:48:3e:6a:c9:02:
                    74:32:77:47:8c:76:26:b1:64:f1:d2:26:03:8a:99:
                    15:05:1a:2f:64:45:c7:61:e9:fb:26:3d:3f:ec:9e:
                    69:6a:65:a3:c3:d7:dd:45:9a:44:23:8c:d6:aa:63:
                    80:77:ee:ca:d8:d9:d5:c8:b0:5a:3e:bb:fb:a8:99:
                    0a:8d:6a:ab:b6:46:05:25:d5:5c:0c:2d:12:7d:4a:
                    ae:af:17:0b:9f:52:1f:16:f6:d9:69:f6:da:45:23:
                    d4:51:65:07:c6:5f:13:16:19:56:a8:7e:d6:40:a4:
                    cc:24:13:55:ed:3d:79:bc:21:0d:3a:d3:c1:1e:89:
                    08:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9E:60:66:74:1B:01:6A:60:B1:40:23:B4:43:B3:83:3B:7F:B4:D4
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.19.0/24
                  201.234.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:56:60:fe:a8:f8:20:78:a0:10:e4:16:60:8a:5d:31:95:0c:
         ea:d6:1a:1a:8c:30:34:a9:6b:6a:fa:92:78:93:c9:a1:8e:30:
         8a:73:6e:76:7b:f6:35:59:64:5a:77:7b:39:e4:4b:e8:67:80:
         b3:3d:bc:08:72:84:20:ed:50:7c:d3:63:de:2c:d7:6c:24:f0:
         77:d7:e5:a5:df:84:89:0a:b4:07:30:2e:e7:9f:5c:29:53:44:
         50:d6:ba:0d:8f:8b:f0:b7:99:57:56:a6:ca:60:8e:40:a8:aa:
         e9:df:d4:a3:8d:5a:66:95:a3:c6:0d:a0:bb:db:bd:7f:93:74:
         7f:e6:d5:39:7b:b3:42:c5:a7:86:49:1b:f8:92:b1:b1:f2:ae:
         ac:9e:fa:b2:e5:0e:0b:16:0f:ac:88:78:59:68:6a:2e:d6:2d:
         fe:c6:47:2b:c4:05:ad:75:83:95:d0:ca:a6:7b:69:fb:cc:d0:
         79:a7:4b:e0:3c:55:c0:9c:53:d9:ed:8a:74:28:36:ac:70:00:
         73:97:f3:30:04:68:c1:f2:51:ba:81:a2:ae:d1:77:fd:aa:26:
         5a:c4:59:6c:8c:33:d2:c4:e3:e6:06:44:71:ce:1c:a7:81:a3:
         79:d4:07:8c:b6:ca:e3:c1:a3:2e:86:f8:b5:c8:1d:e8:4c:6c:
         43:d9:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org