Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/968060d44edd33b636e35863c350099d6f6a0c87.roa
File:                     968060d44edd33b636e35863c350099d6f6a0c87.roa (raw, json)
Hash identifier:          z4vNHhokLIADSYrPSdQLzRuPJWAf0gvjz7Wuyslatyg=
Subject key identifier:   CF:82:35:20:20:CD:32:63:A8:D5:F2:92:43:3F:24:CA:84:8D:F1:06
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2A8718
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/968060d44edd33b636e35863c350099d6f6a0c87.roa
Signing time:             Thu 15 Feb 2024 20:41:26 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     52312
IP address blocks:        190.110.240.0/21 maxlen: 24
                          190.110.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787096 (0x2a8718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=968060d44edd33b636e35863c350099d6f6a0c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:03:55:54:f3:46:d7:50:3e:16:b7:b6:af:91:
                    a9:09:25:a8:18:dc:bd:45:86:a8:77:ad:aa:d6:f8:
                    cc:b6:cc:9d:ee:f5:92:33:e1:1e:03:91:4f:8c:2c:
                    e7:fc:33:af:9c:aa:2e:54:76:19:d7:d5:e5:a3:94:
                    b5:17:66:3a:97:6b:c3:97:c1:1e:d7:cd:0d:9d:7a:
                    43:1e:bc:17:45:5d:33:de:94:6d:a6:64:9c:93:40:
                    b7:dd:80:d9:d0:44:78:aa:bb:ac:06:38:16:47:b9:
                    c2:5c:d7:61:ea:6f:41:cc:7c:29:ed:8b:fd:63:21:
                    6a:01:b7:a8:f0:47:41:b8:07:6c:cf:2a:dd:7c:66:
                    85:99:3b:3e:bd:12:f4:8c:6d:a6:5e:3a:ad:d7:ff:
                    3e:bc:a4:45:da:d4:ed:20:4f:87:ee:66:66:c0:30:
                    46:80:cb:32:2c:89:8d:02:08:a8:70:1e:e6:a9:db:
                    52:3a:8b:fa:f5:4e:7d:d2:b5:73:66:e3:d2:65:06:
                    7c:93:b6:d8:c3:43:1f:b4:dc:33:40:3b:f1:c8:66:
                    f6:47:25:e0:42:60:9f:9a:e6:06:f0:6e:f4:74:36:
                    93:79:66:82:d5:48:8d:f8:0f:f2:83:0f:cb:b9:7e:
                    fb:88:7d:a2:51:66:d8:cc:16:a6:a7:c7:d4:1b:83:
                    9a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:82:35:20:20:CD:32:63:A8:D5:F2:92:43:3F:24:CA:84:8D:F1:06
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/968060d44edd33b636e35863c350099d6f6a0c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.236.0/23
                  190.110.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:d1:0a:02:0b:c0:a2:b2:a9:c9:6a:7c:00:ab:38:db:49:
         11:40:56:9b:b3:2c:97:19:81:c5:b1:4f:4a:2f:ba:11:24:23:
         34:63:23:53:f4:8a:38:28:86:af:72:44:8f:d0:c0:ad:ea:8e:
         6a:04:18:90:ff:6d:10:4a:81:04:0e:de:c9:b1:42:78:68:8b:
         3d:c7:a8:05:05:32:23:fc:43:7e:c7:b5:09:a7:6f:b5:be:98:
         36:15:d6:93:11:b2:0a:ab:91:b3:31:65:85:b3:d7:08:99:78:
         2b:5d:94:ff:c8:80:16:89:2e:e8:16:5f:53:fa:33:05:03:22:
         c5:e5:83:e0:e2:4e:0a:a5:e8:ff:e4:01:cc:8c:ae:0e:e2:8b:
         3e:22:58:1a:5e:e1:df:c6:70:c0:de:18:42:26:25:9c:f4:58:
         69:a9:28:83:b7:85:12:8e:04:13:dd:bc:c5:83:0f:7d:5b:43:
         eb:a6:27:20:b9:a9:38:fa:3a:fc:9f:a5:10:fe:89:85:1f:cc:
         14:db:2b:62:16:d0:41:68:5a:97:cb:fc:49:bf:11:63:cf:3b:
         45:60:fa:be:aa:e0:d4:f0:5d:fd:fc:e5:50:67:ca:c4:73:c2:
         ef:2c:38:c0:7c:13:2e:b3:c1:00:d1:83:6f:ed:3d:fa:26:7e:
         61:5d:fa:73
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDKocYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NzhlNzM1Y2JhM2VlNmRlNGQ3Nzg5MjQ3Y2MwOWE2YWQ5YmMyYjIwHhcNMjQwMjE1
MjA0MTI0WhcNMjkwMjE1MjA0MTI0WjAzMTEwLwYDVQQDEyg5NjgwNjBkNDRlZGQz
M2I2MzZlMzU4NjNjMzUwMDk5ZDZmNmEwYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1ANVVPNG11A+Fre2r5GpCSWoGNy9RYaod62q1vjMtsyd7vWS
M+EeA5FPjCzn/DOvnKouVHYZ19Xlo5S1F2Y6l2vDl8Ee180NnXpDHrwXRV0z3pRt
pmSck0C33YDZ0ER4qrusBjgWR7nCXNdh6m9BzHwp7Yv9YyFqAbeo8EdBuAdszyrd
fGaFmTs+vRL0jG2mXjqt1/8+vKRF2tTtIE+H7mZmwDBGgMsyLImNAgiocB7mqdtS
Oov69U590rVzZuPSZQZ8k7bYw0MftNwzQDvxyGb2RyXgQmCfmuYG8G70dDaTeWaC
1UiN+A/ygw/LuX77iH2iUWbYzBamp8fUG4OadQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFM+CNSAgzTJjqNXykkM/JMqEjfEGMB8GA1UdIwQYMBaAFMCCc9M3OBeeSXY/
BckTmZOOOXWwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE3OGU3
MzVjYmEzZWU2ZGU0ZDc3ODkyNDdjYzA5YTZhZDliYzJiMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzk2ODA2MGQ0NGVkZDMzYjYzNmUzNTg2M2MzNTAwOTlkNmY2YTBjODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvYzE3OGU3MzVjYmEzZWU2ZGU0ZDc3ODkyNDdjYzA5YTZhZDliYzJi
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAb5u7AMEA75u8DANBgkqhkiG9w0BAQsFAAOCAQEAU8bRCgIL
wKKyqclqfACrONtJEUBWm7MslxmBxbFPSi+6ESQjNGMjU/SKOCiGr3JEj9DAreqO
agQYkP9tEEqBBA7eybFCeGiLPceoBQUyI/xDfse1Cadvtb6YNhXWkxGyCquRszFl
hbPXCJl4K12U/8iAFoku6BZfU/ozBQMixeWD4OJOCqXo/+QBzIyuDuKLPiJYGl7h
38ZwwN4YQiYlnPRYaakog7eFEo4EE928xYMPfVtD66YnILmpOPo6/J+lEP6JhR/M
FNsrYhbQQWhal8v8Sb8RY887RWD6vqrg1PBd/fzlUGfKxHPC7yw4wHwTLrPBANGD
b+09+iZ+YV36cw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org