Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/78032cfd71d975f7dc2568567e648f9427a519a0.roa
File:                     78032cfd71d975f7dc2568567e648f9427a519a0.roa (raw, json)
Hash identifier:          yGzxsLcYYFlBg8jIeUsLq0yPjeVDdwseVx6JCeTEOIY=
Subject key identifier:   13:F6:F0:4D:AF:9C:6C:D2:6E:20:C7:53:48:95:D3:8A:33:FB:F9:DE
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DF38E
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/78032cfd71d975f7dc2568567e648f9427a519a0.roa
Signing time:             Thu 07 Dec 2023 12:43:06 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     263777
IP address blocks:        190.227.188.0/22 maxlen: 24
                          190.228.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3011470 (0x2df38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=78032cfd71d975f7dc2568567e648f9427a519a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:ed:19:0d:18:4a:3c:4b:fa:a7:84:11:93:
                    72:52:ef:d5:9d:db:d6:06:2a:98:5d:8e:5f:08:27:
                    a0:07:41:a1:74:df:15:2a:c2:a3:11:07:fd:0d:f2:
                    19:0e:47:d2:53:5b:e0:5d:e5:66:a5:f1:6f:ae:2e:
                    c0:02:be:d0:71:8e:b9:a3:2b:b6:45:03:4b:c0:4f:
                    02:c6:2f:34:17:c7:2d:69:40:9a:04:cd:13:ae:0a:
                    3a:fa:3d:85:37:08:12:02:7d:4a:46:ec:e1:e6:66:
                    02:52:e7:72:d8:fd:e4:58:60:8b:23:04:12:23:dc:
                    a1:ac:21:f1:43:7d:28:e3:0a:8a:72:e6:b3:a8:49:
                    f3:8e:4f:f9:5d:94:a3:21:6d:6d:cd:cd:3a:60:e7:
                    4b:57:97:c0:5f:8b:e2:8a:31:3c:8e:57:76:75:16:
                    ed:34:07:c6:71:57:b4:47:be:d4:c4:0b:40:dd:46:
                    2a:b4:48:12:7c:cb:09:ac:98:61:7a:14:1e:3e:8c:
                    60:a1:f4:c9:ed:56:45:fe:43:aa:e6:6d:1d:7c:f0:
                    ac:ab:af:c4:21:fc:90:2a:af:60:d3:4b:30:00:b5:
                    5e:fe:89:f8:3c:37:20:08:7a:7e:7b:d5:83:5b:b2:
                    a3:40:1e:a9:ec:d3:c5:96:a7:6e:b2:e7:72:63:85:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F6:F0:4D:AF:9C:6C:D2:6E:20:C7:53:48:95:D3:8A:33:FB:F9:DE
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/78032cfd71d975f7dc2568567e648f9427a519a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.227.188.0/22
                  190.228.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:95:6d:e2:12:06:08:01:61:d1:27:d8:c6:79:59:2a:0a:4d:
         c4:a8:e8:9a:26:14:a3:5a:57:90:2a:0d:e6:e9:a1:e2:ea:e5:
         0b:35:38:bc:96:51:87:11:0d:db:ae:16:f0:2b:f8:3a:99:a4:
         70:12:87:af:1f:23:97:41:9a:9a:17:b2:ca:4a:69:78:4c:c2:
         5c:57:06:d8:f8:15:64:1a:77:1c:bb:56:09:0d:2d:b9:fc:b6:
         09:6c:e7:53:7d:67:e3:89:c4:51:c6:5e:39:1c:51:0e:60:0a:
         b0:fc:45:a1:9e:9d:89:1c:ba:40:cc:6c:e4:50:7b:43:34:18:
         17:bc:5f:43:a0:74:63:81:32:33:f8:51:de:e0:da:f1:3c:56:
         0e:e5:65:64:9c:a6:f3:3c:a8:73:3f:b8:a8:2e:e6:30:ae:d0:
         45:5f:78:67:21:8b:f0:34:18:50:c7:f3:af:e2:7a:64:92:8f:
         0c:45:00:0b:23:b3:66:69:01:98:e2:ee:ce:72:7a:cb:59:ce:
         41:55:09:b7:0d:39:cc:48:d4:39:94:81:df:4f:1e:e7:6c:0e:
         e0:01:f8:37:e7:78:8b:31:44:07:3a:45:44:9a:d5:d9:29:85:
         3a:b8:55:88:46:89:cf:ee:fb:8f:92:de:ff:d2:ac:ae:06:90:
         3e:f6:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org