Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/27a91606c58b872247e069be13dc5dd9b909354f.roa
File:                     27a91606c58b872247e069be13dc5dd9b909354f.roa (raw, json)
Hash identifier:          EQVqWuubFPpit47fn17l8s/7PqkrWLApYAu1DYqmibE=
Subject key identifier:   73:36:A4:F8:3D:AD:20:97:44:5F:6F:31:A8:65:3F:3C:3F:6D:32:C9
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2AB6EC
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/27a91606c58b872247e069be13dc5dd9b909354f.roa
Signing time:             Thu 15 Feb 2024 20:41:49 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     263834
IP address blocks:        190.110.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2799340 (0x2ab6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=27a91606c58b872247e069be13dc5dd9b909354f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:67:d2:7e:83:f3:4b:2d:62:a1:60:7d:1c:80:
                    44:e4:0f:19:a7:25:52:a2:ad:97:7e:83:47:c0:d7:
                    43:08:80:9d:1b:9f:10:11:30:64:75:d4:67:e0:ce:
                    39:96:f3:3a:aa:dd:54:8b:28:bf:84:e3:2d:65:3c:
                    c4:5a:6b:2b:fb:6c:68:c7:49:c0:b9:d6:dd:08:14:
                    22:f3:20:64:94:e7:ce:52:f2:ff:36:31:28:a0:33:
                    d6:84:4b:49:99:ea:74:df:fe:fd:c0:49:27:b2:a8:
                    f3:16:54:99:8f:73:9e:41:85:60:46:17:24:fe:5d:
                    10:5f:8a:fb:03:48:4a:f6:98:09:f6:79:34:88:7e:
                    2e:55:24:89:af:4f:54:1f:c1:35:bf:50:35:f5:31:
                    ac:c7:5a:95:74:76:cd:cd:e2:9b:dc:bb:4b:0c:b7:
                    06:d1:67:65:8d:2d:c9:b9:12:3a:82:77:82:1f:89:
                    b6:15:8c:1d:1f:36:40:e0:a8:6c:11:c2:9c:c9:c1:
                    99:28:9d:a9:48:5b:a8:39:c7:4d:b6:e1:66:b2:ad:
                    ea:ff:6f:fe:f5:4b:02:11:45:7c:ef:79:45:78:de:
                    b1:9a:87:ed:9e:c7:fd:f7:80:8f:fa:72:ea:02:fd:
                    47:c6:fa:0f:8b:ff:6b:82:65:56:f7:f2:a7:3e:62:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:A4:F8:3D:AD:20:97:44:5F:6F:31:A8:65:3F:3C:3F:6D:32:C9
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/27a91606c58b872247e069be13dc5dd9b909354f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:bc:53:e4:a2:02:28:7a:e5:69:92:8f:f0:18:45:3f:37:33:
         ea:a4:a5:32:dd:40:92:e1:b4:be:1a:cd:0f:05:ef:81:66:da:
         bf:c2:ae:78:7f:d0:4c:36:cf:52:8d:be:77:91:38:dd:55:82:
         64:af:12:b5:d4:ca:72:a9:f7:2d:f1:39:ac:1f:32:0f:2e:62:
         cc:1e:b4:71:dd:25:ca:51:57:42:6f:14:ed:78:3a:92:02:3c:
         44:1d:ee:f5:e6:a7:1b:6c:e1:88:e5:c6:9a:76:86:61:4e:80:
         9c:a2:ca:f5:67:59:23:ae:ea:cb:71:10:d6:12:72:6c:16:4b:
         b6:f4:3d:eb:78:1c:31:ea:5f:d7:88:9a:67:78:87:1d:a3:ae:
         93:44:af:e8:37:74:6e:c2:bb:8e:eb:69:83:83:32:b4:c8:d2:
         b7:86:ec:8b:a7:9c:20:b6:ad:54:89:55:7e:96:0e:f0:a1:03:
         e5:d1:36:01:a1:3c:2a:cb:bb:50:20:8d:74:2e:b6:e4:4a:0a:
         29:26:10:5c:5f:aa:f4:c5:98:2a:43:33:46:b7:05:cf:44:ea:
         cb:7c:81:e1:f8:48:c0:a2:12:1f:c9:38:5c:9c:80:ac:d1:70:
         19:57:77:f1:d9:46:49:e4:8a:09:c0:bf:28:78:05:3c:c2:f5:
         9e:1e:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org