Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2fadeadd11b8297a119a62ab0a17d224194c64d8.roa
File:                     2fadeadd11b8297a119a62ab0a17d224194c64d8.roa (raw, json)
Hash identifier:          A9rMkn25rp3d1n1rmBWbaPSxKmt2AMVoRbzJJdjoUoY=
Subject key identifier:   03:EF:22:5B:3E:4D:90:BD:45:04:2E:BB:ED:AC:F1:CB:5E:3E:D5:A0
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       05AC0F
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2fadeadd11b8297a119a62ab0a17d224194c64d8.roa
Signing time:             Thu 12 Oct 2023 14:58:40 +0000
ROA not before:           Wed 11 Oct 2023 14:58:39 +0000
ROA not after:            Sun 12 Oct 2025 14:58:39 +0000
asID:                     7004
IP address blocks:        190.82.114.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371727 (0x5ac0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Oct 11 14:58:39 2023 GMT
            Not After : Oct 12 14:58:39 2025 GMT
        Subject: CN=2fadeadd11b8297a119a62ab0a17d224194c64d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:e3:b7:0c:09:a1:92:49:e8:4a:4a:ec:41:
                    34:4b:ae:e6:5b:07:58:14:dc:b1:45:18:40:5d:f8:
                    84:67:cb:ed:e7:2c:26:25:c7:fd:55:e2:13:60:bd:
                    e1:65:c4:26:ff:05:d3:88:9c:a6:01:0c:73:69:f8:
                    24:23:d2:b1:a2:77:c5:2d:64:e5:a5:1b:4b:ad:4f:
                    63:17:51:f2:8f:7a:4f:7c:b6:ad:58:a2:ce:61:37:
                    89:f5:19:a5:8c:b4:22:94:20:ed:87:8d:25:9d:2c:
                    84:cf:98:a0:d0:06:22:92:0e:ef:5c:26:15:bc:da:
                    a0:f9:3d:ac:e3:17:15:a6:e3:66:74:cd:a8:1a:66:
                    9a:5a:bd:89:fd:cb:f5:8a:03:a6:db:b0:e9:af:f4:
                    bf:a2:d2:d2:40:f9:7a:91:39:e5:d6:be:09:1d:11:
                    cc:d0:91:ca:9a:d6:1e:97:c5:b6:66:12:cd:4f:a0:
                    45:25:9d:bc:04:62:da:4a:e3:fc:72:78:ba:be:38:
                    63:e9:cf:d3:a9:b2:00:83:a4:c7:e9:66:a0:0b:80:
                    d6:d6:6a:c7:42:c3:b8:de:11:5c:74:e5:ed:34:04:
                    66:47:c7:c4:1d:78:5c:56:c9:71:7a:4f:70:a4:40:
                    a5:d1:01:1f:ba:ba:49:0f:b8:48:9a:a1:84:4c:ed:
                    72:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EF:22:5B:3E:4D:90:BD:45:04:2E:BB:ED:AC:F1:CB:5E:3E:D5:A0
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2fadeadd11b8297a119a62ab0a17d224194c64d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.82.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:02:1f:3b:b5:55:38:20:f8:f3:91:8f:ea:81:a5:32:35:d6:
         bd:51:7b:1f:63:33:38:37:d5:e8:f8:b0:cc:bb:86:68:7d:f3:
         55:99:0d:2d:e8:99:0f:05:64:9c:da:60:b1:56:69:a6:ac:02:
         bb:29:93:9a:aa:24:90:4e:9a:d9:1e:f0:cb:7a:98:49:1f:81:
         b9:af:72:f1:f8:2a:1e:c6:61:a9:20:e2:3c:8a:2c:36:63:84:
         e2:a8:54:b4:f2:4e:24:00:be:7b:d4:3a:3a:ae:bc:e8:8e:15:
         77:9f:9b:fd:6d:7b:cd:84:ff:6a:93:08:f9:58:f4:49:d1:bb:
         08:61:ef:c1:17:17:f7:d4:1f:44:53:47:50:27:a5:93:65:43:
         75:e2:d0:42:5e:95:93:4c:f6:28:f4:88:54:60:91:59:c8:a2:
         3c:e8:2a:5f:81:bd:3c:05:50:f4:76:3d:b8:7b:c5:fd:1e:76:
         7a:a1:20:8d:71:19:a3:a4:a0:64:ae:dd:b5:34:83:6d:48:d6:
         a8:77:20:4c:54:88:3f:58:9c:ca:67:12:ff:75:51:8c:98:81:
         71:26:f0:f0:f8:c9:b4:e4:6d:d8:a4:04:a1:6d:7d:48:58:d6:
         00:5f:07:b9:89:e8:4b:7e:ea:e7:b3:a5:05:c1:50:61:1e:64:
         bb:8b:57:ff
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBawPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMxMDEx
MTQ1ODM5WhcNMjUxMDEyMTQ1ODM5WjAzMTEwLwYDVQQDEygyZmFkZWFkZDExYjgy
OTdhMTE5YTYyYWIwYTE3ZDIyNDE5NGM2NGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh3LjtwwJoZJJ6EpK7EE0S67mWwdYFNyxRRhAXfiEZ8vt5ywm
Jcf9VeITYL3hZcQm/wXTiJymAQxzafgkI9KxonfFLWTlpRtLrU9jF1Hyj3pPfLat
WKLOYTeJ9RmljLQilCDth40lnSyEz5ig0AYikg7vXCYVvNqg+T2s4xcVpuNmdM2o
GmaaWr2J/cv1igOm27Dpr/S/otLSQPl6kTnl1r4JHRHM0JHKmtYel8W2ZhLNT6BF
JZ28BGLaSuP8cni6vjhj6c/TqbIAg6TH6WagC4DW1mrHQsO43hFcdOXtNARmR8fE
HXhcVslxek9wpECl0QEfurpJD7hImqGETO1yxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAPvIls+TZC9RQQuu+2s8ctePtWgMB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkLzJmYWRlYWRkMTFiODI5N2ExMTlhNjJhYjBhMTdkMjI0MTk0YzY0ZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb5ScjANBgkqhkiG9w0BAQsFAAOCAQEABAIfO7VVOCD485GP
6oGlMjXWvVF7H2MzODfV6PiwzLuGaH3zVZkNLeiZDwVknNpgsVZppqwCuymTmqok
kE6a2R7wy3qYSR+Bua9y8fgqHsZhqSDiPIosNmOE4qhUtPJOJAC+e9Q6Oq686I4V
d5+b/W17zYT/apMI+Vj0SdG7CGHvwRcX99QfRFNHUCelk2VDdeLQQl6Vk0z2KPSI
VGCRWciiPOgqX4G9PAVQ9HY9uHvF/R52eqEgjXEZo6SgZK7dtTSDbUjWqHcgTFSI
P1icymcS/3VRjJiBcSbw8PjJtORt2KQEoW19SFjWAF8HuYnoS37q57OlBcFQYR5k
u4tX/w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org