Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1ec60876468259255a38a6748c0f6cd4a24c222e.roa
File:                     1ec60876468259255a38a6748c0f6cd4a24c222e.roa (raw, json)
Hash identifier:          ff1/4fw92GP/lm5f6B8lw2J4wPW4Gg3Wvv5flr97MXA=
Subject key identifier:   F7:1D:BF:D0:8A:80:7F:D3:55:0B:93:D0:C7:47:01:20:A8:9B:33:9D
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2A878A
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1ec60876468259255a38a6748c0f6cd4a24c222e.roa
Signing time:             Thu 15 Feb 2024 20:41:27 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     11514
IP address blocks:        190.110.253.0/24 maxlen: 24
                          190.114.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787210 (0x2a878a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=1ec60876468259255a38a6748c0f6cd4a24c222e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:7b:79:06:f8:4f:63:c3:c5:3e:15:ed:44:
                    59:6b:3a:27:47:4d:89:5f:3a:2e:f5:27:31:2e:f0:
                    42:10:71:22:08:94:7c:62:16:99:a5:64:78:40:40:
                    6c:9b:29:6c:19:52:5d:26:b4:59:90:4a:6b:b4:12:
                    e2:41:19:39:e7:1a:bf:f3:48:fa:5a:f1:6c:aa:db:
                    bc:2b:56:55:b1:e7:7e:98:1d:00:0e:dd:10:02:81:
                    fb:ce:cd:84:b8:57:cc:c9:44:16:9d:5c:68:ff:77:
                    ca:ca:cf:c6:08:f7:c2:3d:c8:8a:c1:6c:a4:0f:65:
                    12:65:29:d3:46:17:05:89:fe:04:bb:7c:e2:a5:74:
                    51:59:ed:17:e2:a4:b1:e1:3a:75:89:44:fe:3d:76:
                    a3:3d:d6:fb:d6:5f:57:a6:58:58:a4:02:ad:83:7e:
                    51:ca:e0:eb:f7:ee:b5:c6:68:bf:69:f1:08:b2:ec:
                    57:7f:82:c9:78:4c:01:74:4a:c9:2d:50:69:79:6f:
                    e2:91:1b:d2:13:81:8e:22:20:c7:e9:7d:8c:15:ba:
                    e1:95:ed:da:21:4f:9b:90:cd:74:48:39:eb:09:ad:
                    c8:c6:cd:a5:93:c9:7f:58:33:54:27:e2:00:d8:54:
                    29:ec:8d:01:42:b3:94:1b:30:28:56:f0:a6:48:a7:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1D:BF:D0:8A:80:7F:D3:55:0B:93:D0:C7:47:01:20:A8:9B:33:9D
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1ec60876468259255a38a6748c0f6cd4a24c222e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.253.0/24
                  190.114.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:57:5d:28:aa:d3:9b:a7:63:b2:92:0c:45:1b:af:1a:97:79:
         5e:fd:12:4c:a9:71:88:40:69:10:ed:fc:b4:a1:15:e7:8f:a0:
         ff:8b:20:37:c2:68:c5:c5:af:a6:d6:ae:1f:b5:a2:c8:af:34:
         c8:19:3d:eb:ab:55:4d:e3:04:33:96:0e:ab:c5:90:68:ab:de:
         9c:1d:18:25:13:3c:65:b0:87:ed:79:17:1c:8f:d4:18:2c:9a:
         68:ff:72:18:55:b9:ab:13:da:52:7c:a8:bf:ee:31:c1:93:a0:
         4c:0f:24:e9:a5:f3:3c:35:98:89:43:56:d1:56:fe:5f:6c:a5:
         d9:57:db:a5:a1:80:34:8f:ea:7c:4e:68:79:fc:2e:47:93:15:
         85:1f:71:8e:da:4e:1a:20:a5:ca:e8:b7:f8:20:dd:c5:3a:91:
         c3:b2:a8:5d:5a:31:77:37:6e:18:54:3c:8d:ab:5d:90:df:81:
         61:1e:92:b5:53:ac:e6:b1:e9:25:e2:71:2f:56:03:ad:81:7c:
         06:6b:c8:4a:a8:ad:8a:15:70:a9:cc:c4:73:8f:d4:de:5c:68:
         8e:ab:7a:bc:82:58:86:f5:37:d7:50:56:3a:d2:a7:22:83:1d:
         50:1d:94:7d:69:f7:ca:34:4d:d2:66:40:58:cb:7d:33:f6:47:
         97:17:00:28
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDKoeKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NzhlNzM1Y2JhM2VlNmRlNGQ3Nzg5MjQ3Y2MwOWE2YWQ5YmMyYjIwHhcNMjQwMjE1
MjA0MTI0WhcNMjkwMjE1MjA0MTI0WjAzMTEwLwYDVQQDEygxZWM2MDg3NjQ2ODI1
OTI1NWEzOGE2NzQ4YzBmNmNkNGEyNGMyMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqNl7eQb4T2PDxT4V7URZazonR02JXzou9ScxLvBCEHEiCJR8
YhaZpWR4QEBsmylsGVJdJrRZkEprtBLiQRk55xq/80j6WvFsqtu8K1ZVsed+mB0A
Dt0QAoH7zs2EuFfMyUQWnVxo/3fKys/GCPfCPciKwWykD2USZSnTRhcFif4Eu3zi
pXRRWe0X4qSx4Tp1iUT+PXajPdb71l9XplhYpAKtg35RyuDr9+61xmi/afEIsuxX
f4LJeEwBdErJLVBpeW/ikRvSE4GOIiDH6X2MFbrhle3aIU+bkM10SDnrCa3Ixs2l
k8l/WDNUJ+IA2FQp7I0BQrOUGzAoVvCmSKeaYQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFPcdv9CKgH/TVQuT0MdHASComzOdMB8GA1UdIwQYMBaAFMCCc9M3OBeeSXY/
BckTmZOOOXWwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE3OGU3
MzVjYmEzZWU2ZGU0ZDc3ODkyNDdjYzA5YTZhZDliYzJiMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzFlYzYwODc2NDY4MjU5MjU1YTM4YTY3NDhjMGY2Y2Q0YTI0YzIyMmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvYzE3OGU3MzVjYmEzZWU2ZGU0ZDc3ODkyNDdjYzA5YTZhZDliYzJi
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL5u/QMEAL5yZzANBgkqhkiG9w0BAQsFAAOCAQEAH1ddKKrT
m6djspIMRRuvGpd5Xv0STKlxiEBpEO38tKEV54+g/4sgN8JoxcWvptauH7WiyK80
yBk966tVTeMEM5YOq8WQaKvenB0YJRM8ZbCH7XkXHI/UGCyaaP9yGFW5qxPaUnyo
v+4xwZOgTA8k6aXzPDWYiUNW0Vb+X2yl2VfbpaGANI/qfE5oefwuR5MVhR9xjtpO
GiClyui3+CDdxTqRw7KoXVoxdzduGFQ8jatdkN+BYR6StVOs5rHpJeJxL1YDrYF8
BmvISqitihVwqczEc4/U3lxojqt6vIJYhvU311BWOtKnIoMdUB2UfWn3yjRN0mZA
WMt9M/ZHlxcAKA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org