Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/29f37b9407cd4ccf225ffa593652f00d2917f229.roa
File:                     29f37b9407cd4ccf225ffa593652f00d2917f229.roa (raw, json)
Hash identifier:          hrw79rgy3DiMRw++9r/up6unBZNHG8OvYS0N7nbPsfM=
Subject key identifier:   9B:60:17:BE:AF:84:88:9A:06:E2:58:10:BD:D4:3E:21:3F:D8:71:38
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2A9B51
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/29f37b9407cd4ccf225ffa593652f00d2917f229.roa
Signing time:             Thu 15 Feb 2024 20:41:33 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     262932
IP address blocks:        190.114.104.0/21 maxlen: 24
                          190.114.104.0/21 maxlen: 24
                          190.114.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2792273 (0x2a9b51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=29f37b9407cd4ccf225ffa593652f00d2917f229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:b2:79:59:c6:f3:6c:5e:a4:69:c1:f1:e0:
                    e9:8f:3c:c6:86:3e:0a:86:ea:13:ad:90:99:67:a0:
                    a0:5f:8d:f5:88:13:cc:90:c7:63:19:c8:fc:15:39:
                    a9:42:ee:73:68:3a:6d:55:35:f5:05:9b:07:c2:0e:
                    1e:f2:42:c0:92:d2:5d:30:f9:5b:77:c6:c2:24:5d:
                    42:6c:2e:4d:67:95:8d:46:11:f2:1e:b0:5c:10:e0:
                    be:32:d3:00:c6:d6:cb:d8:63:3d:75:80:8f:02:a0:
                    4c:4b:39:90:05:22:9d:3f:9a:ff:84:a2:68:95:f8:
                    65:58:fc:86:3d:59:b0:83:06:d7:3e:f0:6f:dc:4c:
                    fa:ba:21:59:6d:02:64:c4:90:ad:ed:92:f3:26:eb:
                    2f:ba:7b:92:30:d5:1b:92:cc:21:2b:60:23:e1:4c:
                    cf:d6:00:33:35:c6:79:b7:40:34:ec:bb:41:28:96:
                    b1:dd:49:0b:2c:00:d3:07:fd:35:c8:f9:2a:46:95:
                    eb:97:6c:a3:56:79:66:c4:cf:ba:4b:6a:98:5e:02:
                    74:c7:a7:7a:62:28:b6:bf:11:24:ab:9f:18:2c:4c:
                    87:57:32:4b:37:b2:13:db:c3:67:a8:c9:51:25:48:
                    4c:7f:3d:68:6c:ed:d3:ad:84:a3:c2:2b:9d:e6:31:
                    32:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:60:17:BE:AF:84:88:9A:06:E2:58:10:BD:D4:3E:21:3F:D8:71:38
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/29f37b9407cd4ccf225ffa593652f00d2917f229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.104.0-190.114.127.255

    Signature Algorithm: sha256WithRSAEncryption
         52:09:b2:c1:62:ff:cf:e5:a2:09:46:68:96:46:1e:87:e8:a4:
         ba:9f:5f:91:32:90:e8:cf:bd:a0:52:ae:94:29:d0:aa:17:e5:
         16:56:dc:94:b4:e7:e2:84:df:f2:14:69:8f:d6:66:4b:56:e8:
         c8:0a:1a:f7:bd:97:7c:d3:ec:db:7d:67:ce:a7:e6:9b:23:23:
         17:43:e8:c7:a1:bd:9f:4a:be:25:79:d4:a9:16:76:2c:24:3a:
         cb:0d:34:e1:99:b4:15:a2:bb:ef:51:52:f2:31:66:cf:2c:d0:
         a0:26:77:9f:0c:b9:15:50:d8:3d:81:76:15:04:df:6e:ff:0c:
         34:60:98:87:18:dd:cb:c1:2f:fc:91:e9:c1:77:19:44:ca:15:
         f6:a3:b6:51:e3:2c:4e:b8:79:cc:60:ee:9c:a2:d3:64:ed:6d:
         85:0a:5c:30:17:3e:2e:c4:cc:1f:e9:62:e6:a5:46:bc:28:72:
         8a:14:77:dc:02:f5:15:18:10:06:d0:02:11:14:1c:69:17:d5:
         cb:03:80:cf:22:45:66:ac:33:ba:26:2b:4c:12:84:42:51:c3:
         fe:19:94:b2:07:5a:a0:d8:3a:4e:bc:6f:e0:8f:e1:c4:c6:13:
         6b:a3:d3:4a:9b:83:c5:cc:02:85:c4:8b:1f:10:de:ea:1c:1e:
         9a:f3:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org