Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/cefcf80cc27b1bc6f67d598cfd82583bf172dca8.roa
File:                     cefcf80cc27b1bc6f67d598cfd82583bf172dca8.roa (raw, json)
Hash identifier:          NI8URSvBMyp6UzoGT6j2Q1xph7nUvE5RsPEiwNNSEVY=
Subject key identifier:   35:4B:92:E7:E5:07:F9:27:7B:F4:2C:CC:97:0C:E1:AA:C9:7A:9C:1E
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       24F8F8
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/cefcf80cc27b1bc6f67d598cfd82583bf172dca8.roa
Signing time:             Thu 10 Aug 2023 18:00:45 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     262932
IP address blocks:        190.114.104.0/21 maxlen: 24
                          190.114.104.0/21 maxlen: 24
                          190.114.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2423032 (0x24f8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=cefcf80cc27b1bc6f67d598cfd82583bf172dca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1c:93:d7:7d:4a:4e:cc:1d:77:1d:5c:3d:ce:
                    43:c5:e7:9a:7e:0c:ed:18:83:22:1d:2c:be:f3:56:
                    53:1e:80:b3:c2:d2:f9:49:40:f4:0f:f5:a1:0c:73:
                    bd:22:12:b1:c9:3c:d7:97:2d:a0:b0:05:82:6d:ef:
                    c0:2c:54:7e:1a:f6:e4:c8:63:92:c2:01:b0:08:10:
                    50:75:31:22:ef:c5:c9:27:de:f2:c2:dd:ab:90:66:
                    6a:2a:96:e8:73:19:e4:df:89:4c:b8:c6:75:39:78:
                    a5:ed:5a:4e:da:3b:82:85:3c:9b:35:f0:71:d4:02:
                    1d:d4:24:aa:f9:3c:a3:d7:cc:c5:83:02:0a:55:43:
                    09:ec:57:f1:c2:2e:6e:4f:22:54:05:42:90:c6:7f:
                    10:19:e3:3c:92:9b:5d:8a:42:0a:b5:73:fa:f0:8b:
                    bc:ab:e9:3c:91:50:59:a9:e6:a8:bc:c6:45:86:04:
                    93:65:ae:f6:c5:c9:6e:79:8d:a8:ef:be:13:01:83:
                    3f:ee:45:5d:6f:87:88:96:b3:57:66:9a:7b:21:8c:
                    c3:c5:8c:a0:e3:f2:f3:22:9c:02:aa:35:2b:7b:44:
                    78:4d:78:6a:ee:d4:ab:7f:24:e2:6b:2a:79:39:62:
                    4c:dd:85:33:eb:66:11:51:58:3f:bb:10:2a:b0:0f:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:92:E7:E5:07:F9:27:7B:F4:2C:CC:97:0C:E1:AA:C9:7A:9C:1E
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/cefcf80cc27b1bc6f67d598cfd82583bf172dca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.104.0-190.114.127.255

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:18:f9:d2:3f:bb:db:b9:a2:14:f3:92:05:e0:76:96:38:
         20:bd:20:73:51:8e:f7:76:b8:04:a8:c0:5f:d4:9f:a6:2b:e6:
         b1:45:2a:3c:9f:9e:00:ce:0b:1e:a4:ae:ec:e5:5f:1b:44:1b:
         95:11:64:6d:73:6c:56:37:18:12:f0:9c:74:ec:e0:ca:4b:09:
         ba:e0:74:a9:2a:4c:9e:6d:c2:41:23:ba:a8:68:b7:44:93:a8:
         d7:b2:6d:8e:d7:8e:61:54:83:f7:07:c7:48:b7:59:d6:9c:1d:
         b2:e0:eb:6e:27:d9:b2:30:ae:cb:1f:b3:e5:43:25:f0:80:37:
         46:51:bd:17:8c:c0:1b:12:14:d1:88:fa:56:1b:8e:93:bc:b6:
         6d:bc:65:7c:28:a3:62:60:44:f7:d2:0a:e5:a9:85:93:4b:73:
         a7:e9:84:45:0e:dd:36:ce:e2:ac:9d:b8:af:fe:ec:c1:b4:26:
         02:ce:20:99:1a:d4:54:44:4d:0f:11:9f:21:90:7f:14:a2:29:
         aa:b7:b3:d8:d4:52:e2:f1:fa:f5:3c:b5:ac:d9:95:82:0c:56:
         4e:13:d9:d7:78:e0:cf:63:4a:1d:8c:65:47:89:5d:4e:c8:22:
         73:9d:8e:4b:5a:24:93:9d:e4:e4:06:fe:18:6a:a1:fa:b6:7f:
         3a:0a:27:50
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJPj4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
YmJjNTZhMjVkNjY0YWMxOGEzMjgzMDk1NTBjMGY2MzI5ZWEzNjIwHhcNMjMwODA5
MTgwMDM1WhcNMjgwODEwMTgwMDM1WjAzMTEwLwYDVQQDEyhjZWZjZjgwY2MyN2Ix
YmM2ZjY3ZDU5OGNmZDgyNTgzYmYxNzJkY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhByT131KTswddx1cPc5DxeeafgztGIMiHSy+81ZTHoCzwtL5
SUD0D/WhDHO9IhKxyTzXly2gsAWCbe/ALFR+GvbkyGOSwgGwCBBQdTEi78XJJ97y
wt2rkGZqKpbocxnk34lMuMZ1OXil7VpO2juChTybNfBx1AId1CSq+Tyj18zFgwIK
VUMJ7Ffxwi5uTyJUBUKQxn8QGeM8kptdikIKtXP68Iu8q+k8kVBZqeaovMZFhgST
Za72xclueY2o774TAYM/7kVdb4eIlrNXZpp7IYzDxYyg4/LzIpwCqjUre0R4TXhq
7tSrfyTiayp5OWJM3YUz62YRUVg/uxAqsA8j/QIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFDVLkuflB/kne/QszJcM4arJepweMB8GA1UdIwQYMBaAFOxWMP+ndQU1YGwb
0Xk0OuMXY94tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjhiYmM1
NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2NlZmNmODBjYzI3YjFiYzZmNjdkNTk4Y2ZkODI1ODNiZjE3MmRjYTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMjhiYmM1NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQDvnJoAwQHvnIAMA0GCSqGSIb3DQEBCwUAA4IBAQB/WBj5
0j+727miFPOSBeB2ljggvSBzUY73drgEqMBf1J+mK+axRSo8n54AzgsepK7s5V8b
RBuVEWRtc2xWNxgS8Jx07ODKSwm64HSpKkyebcJBI7qoaLdEk6jXsm2O145hVIP3
B8dIt1nWnB2y4OtuJ9myMK7LH7PlQyXwgDdGUb0XjMAbEhTRiPpWG46TvLZtvGV8
KKNiYET30grlqYWTS3On6YRFDt02zuKsnbiv/uzBtCYCziCZGtRURE0PEZ8hkH8U
oimqt7PY1FLi8fr1PLWs2ZWCDFZOE9nXeODPY0odjGVHiV1OyCJznY5LWiSTneTk
Bv4YaqH6tn86CidQ
-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org