Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f6fb7e3be1b912fb79b2859602e06803eed81730.roa
File:                     f6fb7e3be1b912fb79b2859602e06803eed81730.roa (raw, json)
Hash identifier:          9b4lt50Fx9dxvFJC6X7xR58ZRzrLBzLXg84XTrgBU1Y=
Subject key identifier:   11:26:BF:C8:C9:95:40:F5:59:31:5C:91:11:FB:B5:81:B3:B7:91:D8
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27F34E
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f6fb7e3be1b912fb79b2859602e06803eed81730.roa
Signing time:             Wed 08 Nov 2023 15:01:02 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     263834
IP address blocks:        190.110.229.0/24 maxlen: 24
                          190.110.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2618190 (0x27f34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=f6fb7e3be1b912fb79b2859602e06803eed81730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:82:28:61:26:c2:77:0d:f0:c4:7d:e2:e0:
                    86:94:f9:9e:73:57:f2:81:af:1c:6d:a4:bf:4c:02:
                    a5:99:06:e7:f5:e1:e1:87:86:ce:93:d9:e1:f2:90:
                    c5:2c:8c:8a:44:80:5b:d7:f8:33:b0:36:b1:d5:59:
                    d1:03:af:13:2c:7f:ab:ce:bb:1f:8f:ee:a1:e1:d0:
                    0d:78:fa:7c:6b:cb:0a:bc:07:02:d4:f7:41:d5:ec:
                    93:7d:bd:36:08:8d:bd:f7:bc:82:fe:4a:ca:24:ae:
                    c0:6e:e1:fa:bd:db:35:d2:b4:24:3a:24:ec:83:6d:
                    dd:13:1c:24:a1:1a:a4:06:70:39:a1:d5:f9:03:3b:
                    8b:2a:61:43:46:3c:b6:9f:e9:aa:07:1d:fe:a1:5b:
                    d3:d5:cd:07:31:1d:79:f4:dd:1a:52:fe:a8:f4:fe:
                    d2:f4:51:70:2d:09:81:91:13:52:02:74:45:77:f4:
                    58:eb:87:98:68:0e:70:5f:86:65:04:9e:cb:76:49:
                    f6:ac:6c:13:ad:7d:a2:c3:fd:aa:42:8f:e9:2e:75:
                    6a:09:6a:4c:d7:f7:93:cd:9f:24:8c:4c:c1:bd:b8:
                    c3:45:d9:3b:43:1b:b7:1a:83:e9:90:8e:30:b3:fe:
                    28:c0:56:41:c8:61:16:58:7d:42:99:d2:b4:5a:65:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:26:BF:C8:C9:95:40:F5:59:31:5C:91:11:FB:B5:81:B3:B7:91:D8
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f6fb7e3be1b912fb79b2859602e06803eed81730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.229.0-190.110.231.255

    Signature Algorithm: sha256WithRSAEncryption
         87:b1:ef:49:87:50:28:d5:3d:f5:7a:17:4b:84:db:4d:e2:75:
         cd:46:f9:a8:30:a7:7c:1c:ce:78:5b:17:71:7a:88:a7:72:2f:
         ae:43:9a:55:33:41:6d:6f:6e:7f:ec:13:aa:bb:61:1f:f4:9c:
         69:61:0d:2b:80:22:32:a6:d9:9f:3f:da:2f:9b:48:ed:dc:df:
         5c:04:b7:af:f7:87:65:8e:9d:7b:6e:b3:e1:46:0b:07:28:5f:
         3a:33:ec:34:b5:7b:3c:15:12:e2:88:8d:9a:38:d0:d1:b8:6e:
         b0:93:ac:5f:cf:7f:63:3e:4e:98:2b:e9:9f:8d:c8:fb:03:82:
         d6:1c:78:e2:48:28:84:c8:ed:fe:2e:1c:2f:66:0d:65:ba:78:
         cb:61:80:34:d8:98:e8:38:cd:60:2b:d8:07:02:3d:b2:56:03:
         eb:63:24:ec:ff:8c:de:16:4c:70:4e:e0:85:f6:19:f0:3d:c8:
         03:34:da:64:b9:cb:5b:63:2d:c5:54:14:51:55:cf:58:0f:a0:
         c3:3e:8d:53:15:91:98:09:bf:5f:10:f0:8b:c5:f3:35:24:a8:
         d7:3b:21:71:42:bc:d1:f5:76:99:01:66:53:f8:b3:fb:44:7c:
         94:c1:3f:63:8c:c4:7e:65:73:2b:73:b1:f6:e4:90:a8:f5:62:
         ae:76:07:7d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJ/NOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
Y2JhYjkyMGI3MDc5YjFiNzRkZDYxZDRlZTE4MGEwNGEzNDg4NmYwHhcNMjMxMTA4
MTUwMDM3WhcNMjgxMTA4MTUwMDM3WjAzMTEwLwYDVQQDEyhmNmZiN2UzYmUxYjkx
MmZiNzliMjg1OTYwMmUwNjgwM2VlZDgxNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkMiCKGEmwncN8MR94uCGlPmec1fyga8cbaS/TAKlmQbn9eHh
h4bOk9nh8pDFLIyKRIBb1/gzsDax1VnRA68TLH+rzrsfj+6h4dANePp8a8sKvAcC
1PdB1eyTfb02CI2997yC/krKJK7AbuH6vds10rQkOiTsg23dExwkoRqkBnA5odX5
AzuLKmFDRjy2n+mqBx3+oVvT1c0HMR159N0aUv6o9P7S9FFwLQmBkRNSAnRFd/RY
64eYaA5wX4ZlBJ7Ldkn2rGwTrX2iw/2qQo/pLnVqCWpM1/eTzZ8kjEzBvbjDRdk7
Qxu3GoPpkI4ws/4owFZByGEWWH1CmdK0WmUCBQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFBEmv8jJlUD1WTFckRH7tYGzt5HYMB8GA1UdIwQYMBaAFBSAJOx2qcdwVVcE
rHkUlPxwwZ7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NjYmFi
OTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2Y2ZmI3ZTNiZTFiOTEyZmI3OWIyODU5NjAyZTA2ODAzZWVkODE3MzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvN2NjYmFiOTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvm7lAwQDvm7gMA0GCSqGSIb3DQEBCwUAA4IBAQCHse9J
h1Ao1T31ehdLhNtN4nXNRvmoMKd8HM54Wxdxeoinci+uQ5pVM0Ftb25/7BOqu2Ef
9JxpYQ0rgCIyptmfP9ovm0jt3N9cBLev94dljp17brPhRgsHKF86M+w0tXs8FRLi
iI2aONDRuG6wk6xfz39jPk6YK+mfjcj7A4LWHHjiSCiEyO3+LhwvZg1lunjLYYA0
2JjoOM1gK9gHAj2yVgPrYyTs/4zeFkxwTuCF9hnwPcgDNNpkuctbYy3FVBRRVc9Y
D6DDPo1TFZGYCb9fEPCLxfM1JKjXOyFxQrzR9XaZAWZT+LP7RHyUwT9jjMR+ZXMr
c7H25JCo9WKudgd9
-----END CERTIFICATE-----
Generated at Tue Jan 30 20:09:05 2024 by rpki-client on console-ams.rpki-client.org