Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7cb8d019a84d806f3bc02b099e27df829437b198.roa
File:                     7cb8d019a84d806f3bc02b099e27df829437b198.roa (raw, json)
Hash identifier:          NsL8WxjjX9yE7x06yUF1twb2jXAVGMke5FbZdcAVljs=
Subject key identifier:   B9:06:19:54:A0:12:66:A2:7F:2E:3D:5E:9E:C9:B5:C1:3B:91:81:1F
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DC6A2
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7cb8d019a84d806f3bc02b099e27df829437b198.roa
Signing time:             Thu 07 Dec 2023 12:42:30 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     265663
IP address blocks:        190.227.160.0/24 maxlen: 24
                          181.14.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999970 (0x2dc6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=7cb8d019a84d806f3bc02b099e27df829437b198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:45:b9:2a:ca:d5:44:be:bd:fb:de:a1:52:9c:
                    58:a3:1c:30:87:f1:1c:8a:e1:80:4d:00:57:d9:d9:
                    69:9c:b2:64:1c:d8:44:b7:0e:f3:c7:6d:8d:f0:2a:
                    21:2e:48:86:a1:ca:f1:b3:f7:61:cc:18:dd:19:60:
                    e3:51:69:ce:a9:a2:1c:ac:6d:d0:85:25:f5:62:06:
                    07:40:6b:9e:79:5a:cf:33:9e:04:1e:1e:9f:96:2b:
                    56:63:52:f7:fb:86:db:cc:f9:ec:7e:bb:56:1b:74:
                    ad:1a:6a:38:ca:79:25:d0:9a:0c:69:fa:76:93:17:
                    c7:15:ed:d3:ca:fa:91:01:06:4f:11:a7:dd:cc:c9:
                    1f:44:20:16:6d:07:a4:15:fb:5d:fe:e3:a2:65:30:
                    3b:ec:c5:98:87:60:38:53:4b:ac:16:2b:51:49:35:
                    b2:a0:1e:76:f9:bc:28:99:85:9d:93:e3:f1:f6:1f:
                    86:f2:db:9e:e2:95:b9:b9:3c:ab:6e:09:d6:65:8e:
                    92:25:ec:26:d3:a5:01:0f:99:f8:00:e7:93:15:06:
                    23:4a:ee:c0:bd:12:ec:63:17:42:80:e0:df:e4:85:
                    00:bd:9f:68:50:a1:86:53:65:85:04:cd:07:d2:e9:
                    d1:b5:ea:35:9d:96:90:1b:91:1c:b7:02:7a:b0:29:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:06:19:54:A0:12:66:A2:7F:2E:3D:5E:9E:C9:B5:C1:3B:91:81:1F
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7cb8d019a84d806f3bc02b099e27df829437b198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.14.239.0/24
                  190.227.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:02:89:e9:b1:08:bf:68:d4:e4:51:0b:0d:16:56:90:10:
         e7:6d:41:ad:53:6c:3f:27:60:58:3d:c6:94:fd:b9:a2:a7:c1:
         a8:33:ce:5b:23:fc:ce:75:cd:64:0b:c3:27:5b:e2:b9:a6:93:
         20:e1:22:af:40:6c:05:1d:ae:4a:ba:46:9b:b4:1a:8e:fc:c9:
         c1:df:ea:2a:8b:d9:0a:f6:09:15:75:16:a4:6e:44:a6:e9:c2:
         e1:bd:9a:b7:11:cc:54:0e:2d:aa:c5:46:af:69:5a:8e:07:e6:
         c1:93:81:8c:bf:35:41:05:96:fd:6b:9e:b4:83:d2:f7:38:87:
         5a:7e:d2:8e:65:93:43:82:60:04:50:be:99:66:c0:1a:79:12:
         cc:24:0a:da:3d:b1:52:65:f8:cf:70:bd:c6:97:ff:3a:fa:d8:
         a1:a6:aa:cb:11:8c:51:73:c8:84:a2:15:8c:85:ad:56:5b:80:
         50:35:86:e3:41:df:d1:2f:8b:05:9c:cf:d1:93:f2:b5:b8:b0:
         a7:01:f5:54:d2:7f:2d:a2:f7:aa:01:05:09:d9:00:90:70:2b:
         35:8c:2b:ae:60:85:bf:2c:9e:e0:72:fb:35:9c:58:79:cd:00:
         eb:32:09:90:4b:c8:30:72:a3:83:93:de:61:24:b4:e0:83:56:
         d0:e7:75:45
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDLcaiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEyg3Y2I4ZDAxOWE4NGQ4
MDZmM2JjMDJiMDk5ZTI3ZGY4Mjk0MzdiMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5UW5KsrVRL69+96hUpxYoxwwh/EciuGATQBX2dlpnLJkHNhE
tw7zx22N8CohLkiGocrxs/dhzBjdGWDjUWnOqaIcrG3QhSX1YgYHQGueeVrPM54E
Hh6flitWY1L3+4bbzPnsfrtWG3StGmo4ynkl0JoMafp2kxfHFe3TyvqRAQZPEafd
zMkfRCAWbQekFftd/uOiZTA77MWYh2A4U0usFitRSTWyoB52+bwomYWdk+Px9h+G
8tue4pW5uTyrbgnWZY6SJewm06UBD5n4AOeTFQYjSu7AvRLsYxdCgODf5IUAvZ9o
UKGGU2WFBM0H0unRteo1nZaQG5EctwJ6sClf3QIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFLkGGVSgEmaify49Xp7JtcE7kYEfMB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzdjYjhkMDE5YTg0ZDgwNmYzYmMwMmIwOTllMjdkZjgyOTQzN2IxOTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEALUO7wMEAL7joDANBgkqhkiG9w0BAQsFAAOCAQEAJfMCiemx
CL9o1ORRCw0WVpAQ521BrVNsPydgWD3GlP25oqfBqDPOWyP8znXNZAvDJ1viuaaT
IOEir0BsBR2uSrpGm7QajvzJwd/qKovZCvYJFXUWpG5EpunC4b2atxHMVA4tqsVG
r2lajgfmwZOBjL81QQWW/WuetIPS9ziHWn7SjmWTQ4JgBFC+mWbAGnkSzCQK2j2x
UmX4z3C9xpf/OvrYoaaqyxGMUXPIhKIVjIWtVluAUDWG40Hf0S+LBZzP0ZPytbiw
pwH1VNJ/LaL3qgEFCdkAkHArNYwrrmCFvyye4HL7NZxYec0A6zIJkEvIMHKjg5Pe
YSS04INW0Od1RQ==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org