Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8e12ccd7d1de0da2e9406a006a8c6a66b09b28d8.roa
File:                     8e12ccd7d1de0da2e9406a006a8c6a66b09b28d8.roa (raw, json)
Hash identifier:          JqH5APWGcot2HaH0d47oa3nLNIKU2/Lqcjdx2jqw3Ow=
Subject key identifier:   E9:C5:59:00:49:99:50:13:7C:54:32:A9:97:31:A0:D3:B4:31:24:EE
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27CC46
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8e12ccd7d1de0da2e9406a006a8c6a66b09b28d8.roa
Signing time:             Wed 08 Nov 2023 15:00:46 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     262932
IP address blocks:        190.114.104.0/21 maxlen: 24
                          190.114.104.0/21 maxlen: 24
                          190.114.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2608198 (0x27cc46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=8e12ccd7d1de0da2e9406a006a8c6a66b09b28d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:7c:10:fe:b7:dd:51:6b:ea:b1:2c:67:52:
                    d5:0a:f6:d6:8a:0e:bf:ac:b9:d9:b1:ec:01:75:9f:
                    ba:83:df:64:21:d3:73:ea:e6:fb:3a:54:d7:51:c0:
                    fd:94:91:94:a9:c2:a6:ef:b1:08:81:f6:d0:59:7a:
                    da:51:a5:1d:14:4c:76:7f:02:f4:98:44:e7:3c:a8:
                    30:13:ed:00:fa:72:e0:d5:07:90:d4:17:e4:70:a7:
                    d3:05:2d:17:e0:d1:d2:e6:30:e8:7c:eb:44:b1:c7:
                    94:62:1f:64:c3:83:8c:26:c9:72:f9:67:e6:83:c9:
                    01:44:81:9a:a8:06:66:db:23:35:a8:d0:4a:86:93:
                    56:8e:eb:c9:ac:3d:7f:aa:7c:2a:f1:e3:12:0c:75:
                    ec:0f:f7:aa:e5:45:85:db:00:2d:a7:bc:bf:19:35:
                    99:f7:e4:41:5d:d2:da:08:b6:c6:b2:fa:1a:54:0a:
                    53:6c:44:b0:cd:a6:d8:03:6a:82:8f:9d:d9:56:ac:
                    d4:96:33:9b:3d:18:25:68:c9:32:e2:9b:aa:0f:e5:
                    59:a3:f1:39:f9:7c:7b:1b:f2:0d:bb:30:c4:3e:ce:
                    91:dc:ef:5e:1a:2d:b1:30:2f:f8:60:29:78:97:8b:
                    fd:43:fb:d6:f9:73:9d:7d:6e:1f:dc:dc:a5:7d:cc:
                    93:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C5:59:00:49:99:50:13:7C:54:32:A9:97:31:A0:D3:B4:31:24:EE
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8e12ccd7d1de0da2e9406a006a8c6a66b09b28d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.104.0-190.114.127.255

    Signature Algorithm: sha256WithRSAEncryption
         54:31:29:93:00:f5:e5:bf:ee:35:41:cc:f3:74:05:2a:db:8f:
         f9:57:fe:15:04:f8:d7:cd:c6:74:12:1b:42:09:fc:2d:7f:b0:
         c1:e6:57:32:e6:38:b7:6c:f6:78:c8:6d:04:03:18:a5:14:4d:
         73:7e:8b:6b:15:f0:77:83:ea:d4:36:87:27:78:6e:8f:41:e0:
         7e:99:87:fd:21:02:9d:37:10:8c:47:63:38:f8:d0:69:fe:eb:
         f4:0e:e1:33:a7:7d:66:53:29:8d:5d:3e:c0:8e:c7:80:59:1d:
         cf:a9:97:98:cc:6e:5c:7a:ae:a0:6f:48:fa:44:6f:6c:9d:77:
         c6:b6:f2:63:ab:bd:ec:af:07:19:3f:ef:40:5c:b3:85:12:7b:
         c5:cf:b5:9c:48:8e:cb:d3:7e:dd:dd:fc:18:ac:bf:e5:c0:a9:
         ed:c6:88:81:29:01:3d:7f:a1:4c:8e:30:db:9c:50:e0:7a:2c:
         0e:46:72:01:29:0a:0d:bf:6d:1c:59:f3:b2:c5:a5:9e:a7:98:
         a6:50:e2:c1:98:5d:9a:28:46:e1:50:48:07:3a:8f:d4:24:0c:
         45:98:c8:3c:bc:f1:e5:2b:90:cc:d6:09:63:d6:1b:b0:47:f1:
         e4:88:81:17:0e:55:96:c0:1f:6d:0d:8f:4c:f5:b1:4c:60:87:
         4a:ea:95:ce
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJ8xGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
Y2JhYjkyMGI3MDc5YjFiNzRkZDYxZDRlZTE4MGEwNGEzNDg4NmYwHhcNMjMxMTA4
MTUwMDM3WhcNMjgxMTA4MTUwMDM3WjAzMTEwLwYDVQQDEyg4ZTEyY2NkN2QxZGUw
ZGEyZTk0MDZhMDA2YThjNmE2NmIwOWIyOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk418EP633VFr6rEsZ1LVCvbWig6/rLnZsewBdZ+6g99kIdNz
6ub7OlTXUcD9lJGUqcKm77EIgfbQWXraUaUdFEx2fwL0mETnPKgwE+0A+nLg1QeQ
1BfkcKfTBS0X4NHS5jDofOtEsceUYh9kw4OMJsly+Wfmg8kBRIGaqAZm2yM1qNBK
hpNWjuvJrD1/qnwq8eMSDHXsD/eq5UWF2wAtp7y/GTWZ9+RBXdLaCLbGsvoaVApT
bESwzabYA2qCj53ZVqzUljObPRglaMky4puqD+VZo/E5+Xx7G/INuzDEPs6R3O9e
Gi2xMC/4YCl4l4v9Q/vW+XOdfW4f3NylfcyT3wIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFOnFWQBJmVATfFQyqZcxoNO0MSTuMB8GA1UdIwQYMBaAFBSAJOx2qcdwVVcE
rHkUlPxwwZ7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NjYmFi
OTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzhlMTJjY2Q3ZDFkZTBkYTJlOTQwNmEwMDZhOGM2YTY2YjA5YjI4ZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvN2NjYmFiOTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQDvnJoAwQHvnIAMA0GCSqGSIb3DQEBCwUAA4IBAQBUMSmT
APXlv+41QczzdAUq24/5V/4VBPjXzcZ0EhtCCfwtf7DB5lcy5ji3bPZ4yG0EAxil
FE1zfotrFfB3g+rUNocneG6PQeB+mYf9IQKdNxCMR2M4+NBp/uv0DuEzp31mUymN
XT7AjseAWR3PqZeYzG5ceq6gb0j6RG9snXfGtvJjq73srwcZP+9AXLOFEnvFz7Wc
SI7L037d3fwYrL/lwKntxoiBKQE9f6FMjjDbnFDgeiwORnIBKQoNv20cWfOyxaWe
p5imUOLBmF2aKEbhUEgHOo/UJAxFmMg8vPHlK5DM1glj1huwR/HkiIEXDlWWwB9t
DY9M9bFMYIdK6pXO
-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org