Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/485b5db875cd793cbd9bf875feae3d7922e078fd.roa
File:                     485b5db875cd793cbd9bf875feae3d7922e078fd.roa (raw, json)
Hash identifier:          NWBkqD/XXDUc6eZd78vr5HCx0pGtDFzqduKiOhzNtZo=
Subject key identifier:   E5:78:51:36:4B:F3:F3:97:AD:47:C2:F8:58:C3:95:CB:58:B6:DB:E0
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27DABA
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/485b5db875cd793cbd9bf875feae3d7922e078fd.roa
Signing time:             Wed 08 Nov 2023 15:00:51 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     20207
IP address blocks:        190.110.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2611898 (0x27daba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=485b5db875cd793cbd9bf875feae3d7922e078fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:93:cc:dc:22:71:62:a0:cf:df:e6:cb:8b:
                    d4:2b:d6:80:31:2f:54:f8:b5:97:f4:c7:65:f3:7a:
                    bf:f6:9a:a1:1a:7f:fd:db:77:e4:31:47:fe:03:13:
                    91:45:9b:78:b4:ab:7a:32:59:f4:99:82:52:92:17:
                    59:bb:4a:5d:18:1e:9b:80:17:43:0d:dd:fd:c0:a0:
                    d7:b8:68:d7:4a:b4:7b:54:2c:41:9a:9d:13:d8:df:
                    d7:5f:41:3b:6c:99:a3:ea:06:5e:1b:c5:96:e5:4a:
                    ac:07:01:c6:23:f9:0b:49:c3:5f:7a:f6:5c:eb:7c:
                    ee:f7:e2:4a:57:5b:2b:b6:3a:3c:12:6d:10:8b:a5:
                    15:04:a5:3c:3e:b2:87:cc:d9:3e:ca:03:05:75:99:
                    87:41:dd:bd:52:f0:7a:bf:41:33:90:6f:aa:d3:b6:
                    4c:04:b5:39:b7:90:c2:77:28:3a:5e:17:14:3f:fa:
                    8c:f0:4b:d4:88:29:85:c1:40:b2:41:88:51:f1:2d:
                    2a:6b:bd:26:bd:63:5f:0c:4c:a2:c6:8c:8e:5e:f6:
                    0c:0e:68:13:89:87:3a:07:f9:b8:93:bd:19:b2:9c:
                    e2:82:d7:a8:35:bd:10:36:91:5e:32:d1:34:2b:d9:
                    a2:e7:d0:c5:14:5b:2f:12:e1:bb:d7:93:aa:4e:fa:
                    b2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:78:51:36:4B:F3:F3:97:AD:47:C2:F8:58:C3:95:CB:58:B6:DB:E0
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/485b5db875cd793cbd9bf875feae3d7922e078fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c1:ab:a9:e4:2b:c4:86:03:5c:70:ac:39:d9:04:44:68:d2:
         c0:f1:69:f2:19:cc:f5:31:b1:3f:93:3e:b0:65:e9:49:41:20:
         ae:d7:8a:6f:25:31:47:22:64:e0:1e:50:5c:63:fe:49:16:91:
         5e:88:3f:22:58:7d:b7:d9:09:1f:d1:b7:a3:06:7f:f9:bd:a9:
         14:84:b9:cc:7b:a4:5a:bc:b2:02:48:33:61:54:04:38:7b:62:
         63:12:ae:36:5d:d5:44:77:d5:b4:2f:8f:0b:62:0b:3a:58:d4:
         8e:64:64:fa:82:86:da:25:f8:22:a9:75:5e:65:12:9f:6f:bf:
         82:c6:b3:4b:1b:25:03:cd:f1:0b:1e:6f:5c:1f:a4:e4:63:d0:
         5a:96:a9:02:a1:24:18:12:45:41:65:54:7f:75:87:7d:46:3b:
         a1:fe:e9:6a:34:f0:7b:9f:80:e1:e2:dd:e1:d2:80:76:a8:73:
         e3:0a:68:20:f2:d6:ac:10:07:48:be:9e:22:1e:cb:bb:71:d2:
         02:77:3b:ab:23:0b:04:9a:4f:88:18:66:60:03:76:34:fc:f4:
         ce:d7:61:b6:4d:da:58:7c:7f:bc:60:6a:2b:f9:46:b4:78:9c:
         88:35:3a:bc:b3:f6:71:fe:dc:af:ec:96:1f:58:b0:05:a3:59:
         19:da:17:24
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ9q6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
Y2JhYjkyMGI3MDc5YjFiNzRkZDYxZDRlZTE4MGEwNGEzNDg4NmYwHhcNMjMxMTA4
MTUwMDM3WhcNMjgxMTA4MTUwMDM3WjAzMTEwLwYDVQQDEyg0ODViNWRiODc1Y2Q3
OTNjYmQ5YmY4NzVmZWFlM2Q3OTIyZTA3OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtB+TzNwicWKgz9/my4vUK9aAMS9U+LWX9Mdl83q/9pqhGn/9
23fkMUf+AxORRZt4tKt6Mln0mYJSkhdZu0pdGB6bgBdDDd39wKDXuGjXSrR7VCxB
mp0T2N/XX0E7bJmj6gZeG8WW5UqsBwHGI/kLScNfevZc63zu9+JKV1srtjo8Em0Q
i6UVBKU8PrKHzNk+ygMFdZmHQd29UvB6v0EzkG+q07ZMBLU5t5DCdyg6XhcUP/qM
8EvUiCmFwUCyQYhR8S0qa70mvWNfDEyixoyOXvYMDmgTiYc6B/m4k70Zspzigteo
Nb0QNpFeMtE0K9mi59DFFFsvEuG715OqTvqyHQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOV4UTZL8/OXrUfC+FjDlctYttvgMB8GA1UdIwQYMBaAFBSAJOx2qcdwVVcE
rHkUlPxwwZ7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NjYmFi
OTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzQ4NWI1ZGI4NzVjZDc5M2NiZDliZjg3NWZlYWUzZDc5MjJlMDc4ZmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvN2NjYmFiOTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5u7zANBgkqhkiG9w0BAQsFAAOCAQEAcMGrqeQrxIYDXHCs
OdkERGjSwPFp8hnM9TGxP5M+sGXpSUEgrteKbyUxRyJk4B5QXGP+SRaRXog/Ilh9
t9kJH9G3owZ/+b2pFIS5zHukWryyAkgzYVQEOHtiYxKuNl3VRHfVtC+PC2ILOljU
jmRk+oKG2iX4Iql1XmUSn2+/gsazSxslA83xCx5vXB+k5GPQWpapAqEkGBJFQWVU
f3WHfUY7of7pajTwe5+A4eLd4dKAdqhz4wpoIPLWrBAHSL6eIh7Lu3HSAnc7qyML
BJpPiBhmYAN2NPz0ztdhtk3aWHx/vGBqK/lGtHiciDU6vLP2cf7cr+yWH1iwBaNZ
GdoXJA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org