Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f8110dc7b09c921c3593063170c9b00162c9ad9a.roa
File:                     f8110dc7b09c921c3593063170c9b00162c9ad9a.roa (raw, json)
Hash identifier:          HdtNjUwGrCu0bqquvv8AQGYMGzDbAOGTs0VEBpYjSEk=
Subject key identifier:   D7:42:4C:9A:B7:9D:F3:2E:12:11:C3:AA:3A:40:33:AE:80:2B:9E:21
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       24763C
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f8110dc7b09c921c3593063170c9b00162c9ad9a.roa
Signing time:             Fri 21 Jul 2023 20:55:27 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     266769
IP address blocks:        200.55.16.4/30 maxlen: 30
                          190.216.7.240/28 maxlen: 28
                          201.234.150.16/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2389564 (0x24763c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=f8110dc7b09c921c3593063170c9b00162c9ad9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:2c:7e:4f:8c:09:1f:0c:84:42:82:e4:45:
                    79:93:60:2a:0e:93:7e:44:de:44:4f:9b:40:db:74:
                    51:eb:8f:48:a6:f7:44:b8:d1:22:df:7f:c4:46:c6:
                    c4:06:29:de:76:2e:10:38:65:02:13:3a:3c:08:b3:
                    64:d9:3b:53:04:a6:47:5f:5a:f3:d4:62:32:2a:93:
                    63:d5:49:e8:95:ba:b9:13:95:be:7d:24:1c:46:fe:
                    45:bb:aa:46:06:ce:cc:9b:00:2f:c7:6b:b9:f1:01:
                    e0:16:7d:41:61:e7:e0:77:6e:8c:ff:9a:63:6f:21:
                    f0:cb:8e:d1:7c:6d:83:12:24:a9:dd:c5:ed:e2:ad:
                    cd:2c:93:8b:7f:a7:ec:af:8a:3a:6b:af:d5:83:85:
                    99:19:8a:41:a6:37:30:c1:fc:3c:61:37:5d:22:94:
                    71:da:e6:b8:a3:34:6e:05:00:b4:df:98:03:59:25:
                    81:a9:15:74:a5:c7:41:6b:97:04:70:af:85:89:a1:
                    1a:b3:cb:25:61:93:82:34:15:81:fa:37:b5:62:99:
                    bd:8b:aa:09:8e:a7:71:60:3b:9c:2a:1d:6e:80:bc:
                    41:3d:7c:3d:d7:06:92:de:2a:3e:0a:7e:a8:d6:90:
                    b3:60:d8:fd:5c:f2:6c:c7:fe:28:4b:c2:fa:62:11:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:42:4C:9A:B7:9D:F3:2E:12:11:C3:AA:3A:40:33:AE:80:2B:9E:21
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f8110dc7b09c921c3593063170c9b00162c9ad9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.7.240/28
                  200.55.16.4/30
                  201.234.150.16/28

    Signature Algorithm: sha256WithRSAEncryption
         72:7d:c9:0d:af:8b:10:e4:65:9c:7b:ed:14:89:4b:62:ea:0c:
         84:d5:11:ab:88:38:22:3f:7b:12:42:1e:89:f6:b4:82:7a:14:
         f2:a2:ff:2e:5b:a6:3b:bd:8e:66:72:1e:97:2f:cb:50:62:bf:
         87:ed:5d:a5:4a:0a:c1:ed:3d:ae:ac:40:27:61:27:64:10:1d:
         bf:d4:40:06:be:79:b8:ad:4f:24:6b:2c:0a:f9:3a:ea:ad:dc:
         bf:10:00:41:9e:e9:01:3d:08:b6:38:c0:08:4a:73:25:1b:aa:
         7b:5f:b2:5d:65:b0:60:e3:d1:db:ba:33:44:3a:05:8c:6a:75:
         b9:9b:72:b1:56:a9:30:a4:94:39:c3:2d:d0:8e:e8:d4:20:9a:
         5e:55:8b:b7:79:ed:98:ae:7a:22:48:ed:ac:3b:b4:1f:0a:0b:
         35:fd:b6:ff:a2:bf:c5:2e:cf:04:81:8d:a3:47:a8:24:4d:d6:
         34:6e:df:b6:57:b1:c9:88:0e:d3:da:3f:28:87:5c:83:45:25:
         ba:03:a7:35:e4:8b:eb:2d:7b:81:bf:f3:e3:64:b1:c2:49:67:
         d2:78:d9:6d:39:ae:1e:4b:a9:e6:16:d2:0c:f4:02:06:66:88:
         88:23:37:89:c6:56:cd:cb:60:a2:d9:a9:62:9d:13:21:f4:30:
         83:5e:7d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org