Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2f528c3e97712534829f64d29be86d904a4de87f.roa
File:                     2f528c3e97712534829f64d29be86d904a4de87f.roa (raw, json)
Hash identifier:          WLone86cRk0bDoVYi8p1pbFM3LXaphIoAnyMFjxCGbg=
Subject key identifier:   19:4F:96:4A:5C:8E:21:8F:AD:04:9B:30:22:0E:C4:28:15:A8:7D:36
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E5DEF
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2f528c3e97712534829f64d29be86d904a4de87f.roa
Signing time:             Thu 07 Dec 2023 13:01:18 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     265663
IP address blocks:        190.227.160.0/24 maxlen: 24
                          181.14.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3038703 (0x2e5def)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=2f528c3e97712534829f64d29be86d904a4de87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:18:ba:94:46:9b:03:d8:d9:c8:b5:32:48:
                    29:1b:59:3f:4c:76:57:66:d6:98:45:b9:cb:8b:ff:
                    8c:61:03:60:49:99:28:df:eb:4e:2e:07:e7:9b:37:
                    d8:2a:2c:4f:8f:25:a0:d2:e0:44:82:57:f3:0e:d5:
                    8e:48:b6:a3:b4:b2:91:d2:08:d0:92:da:7d:26:ff:
                    25:c8:a5:1d:86:d8:83:f2:b3:28:ce:67:3b:01:ba:
                    41:e3:00:43:72:37:37:1b:ec:26:08:22:0f:51:7d:
                    ac:20:5f:59:d1:e8:f9:b1:f0:0a:c9:cc:ba:6a:e1:
                    3b:01:2f:01:63:9b:c1:62:58:9e:48:f0:38:ba:48:
                    da:2e:da:ba:2e:11:7b:83:48:17:7d:e0:87:40:54:
                    c8:08:c6:f1:ca:ef:ef:7e:74:37:bb:f4:44:f4:04:
                    d9:b3:4e:44:f7:1a:8d:8c:24:72:e7:c0:37:3a:ed:
                    74:0a:7d:38:a5:6d:7c:59:0f:c0:b5:fe:32:56:b1:
                    6a:e9:66:63:3b:fe:ec:2f:4f:6c:bc:65:ce:99:a1:
                    8c:5f:fa:33:80:7b:f0:e0:45:85:d0:01:9b:87:dc:
                    19:e5:74:67:f3:6f:2a:8d:f0:d3:e8:bd:72:05:a2:
                    c8:aa:b7:2c:83:2d:36:3f:b4:2f:8a:f7:b2:df:83:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4F:96:4A:5C:8E:21:8F:AD:04:9B:30:22:0E:C4:28:15:A8:7D:36
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2f528c3e97712534829f64d29be86d904a4de87f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.14.239.0/24
                  190.227.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:f2:bf:96:4a:58:02:27:4f:61:69:41:22:ac:29:b2:52:
         b5:11:c8:d9:dc:06:2d:e3:62:d2:e2:20:1f:0d:02:79:4b:74:
         93:21:21:9f:74:09:d4:28:fe:bb:35:7a:41:2a:d6:45:1f:d4:
         c0:00:e2:e4:74:3c:09:99:e8:f0:48:93:0f:cc:ca:d7:18:e2:
         09:cd:3f:5f:81:73:92:c0:b4:83:53:af:6a:fc:17:f3:58:b7:
         ff:b9:fc:19:6a:a3:4a:b3:8c:22:d8:52:e5:d6:f0:b2:b4:94:
         4a:a3:3e:61:67:67:5f:46:5f:3a:99:d2:0e:69:0e:39:89:2e:
         eb:fd:d1:c2:49:5c:b5:ef:f3:32:49:9e:74:a8:60:9a:70:1a:
         d4:1c:37:0c:8b:dd:b1:88:17:dd:47:8b:d0:92:20:20:28:bc:
         c6:71:7a:16:98:91:5c:a6:38:37:2c:53:db:a6:69:ea:86:0a:
         54:fb:2a:b4:d1:79:25:47:37:9e:b0:42:c9:26:3c:fd:ab:31:
         c9:88:bb:81:7c:1e:53:4b:58:96:82:e7:ac:88:c4:4d:44:2c:
         74:78:e8:2f:6b:e1:d7:87:6e:4e:05:04:c2:93:9e:d6:93:3b:
         d3:55:35:62:d8:af:69:ab:d4:93:0f:22:99:45:66:95:dc:2c:
         0e:cb:1c:b2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDLl3vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NzQ0MDlkMGMyYTcwYzkyMWRkNjg1ZTg2M2U5ZjAwY2IxZTI2MmEwHhcNMjMxMjA3
MTMwMDQ2WhcNMjgxMjA3MTMwMDQ2WjAzMTEwLwYDVQQDEygyZjUyOGMzZTk3NzEy
NTM0ODI5ZjY0ZDI5YmU4NmQ5MDRhNGRlODdmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx0IYupRGmwPY2ci1MkgpG1k/THZXZtaYRbnLi/+MYQNgSZko
3+tOLgfnmzfYKixPjyWg0uBEglfzDtWOSLajtLKR0gjQktp9Jv8lyKUdhtiD8rMo
zmc7AbpB4wBDcjc3G+wmCCIPUX2sIF9Z0ej5sfAKycy6auE7AS8BY5vBYlieSPA4
ukjaLtq6LhF7g0gXfeCHQFTICMbxyu/vfnQ3u/RE9ATZs05E9xqNjCRy58A3Ou10
Cn04pW18WQ/Atf4yVrFq6WZjO/7sL09svGXOmaGMX/ozgHvw4EWF0AGbh9wZ5XRn
828qjfDT6L1yBaLIqrcsgy02P7Qvivey34N/owIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFBlPlkpcjiGPrQSbMCIOxCgVqH02MB8GA1UdIwQYMBaAFPuO/GhWAKtj6gJP
ow0fFdW1sMGxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk3NDQw
OWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzJmNTI4YzNlOTc3MTI1MzQ4MjlmNjRkMjliZTg2ZDkwNGE0ZGU4N2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvYzk3NDQwOWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEALUO7wMEAL7joDANBgkqhkiG9w0BAQsFAAOCAQEAHAryv5ZK
WAInT2FpQSKsKbJStRHI2dwGLeNi0uIgHw0CeUt0kyEhn3QJ1Cj+uzV6QSrWRR/U
wADi5HQ8CZno8EiTD8zK1xjiCc0/X4FzksC0g1OvavwX81i3/7n8GWqjSrOMIthS
5dbwsrSUSqM+YWdnX0ZfOpnSDmkOOYku6/3Rwklcte/zMkmedKhgmnAa1Bw3DIvd
sYgX3UeL0JIgICi8xnF6FpiRXKY4NyxT26Zp6oYKVPsqtNF5JUc3nrBCySY8/asx
yYi7gXweU0tYloLnrIjETUQsdHjoL2vh14duTgUEwpOe1pM701U1YtivaavUkw8i
mUVmldwsDsscsg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org