Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/1384be26c971bd5f6559b823b8402b1bd7cc71a8.roa
File:                     1384be26c971bd5f6559b823b8402b1bd7cc71a8.roa (raw, json)
Hash identifier:          X+/JxU7YOLNPkCAlq5WbJY6XRgBrkWfwsFyNXKS0QYY=
Subject key identifier:   A7:8A:D9:8D:C8:63:9A:A0:3F:95:53:98:E3:F8:A4:7F:D2:43:BA:5E
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       28F066
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/1384be26c971bd5f6559b823b8402b1bd7cc71a8.roa
Signing time:             Tue 07 Nov 2023 16:32:24 +0000
ROA not before:           Tue 07 Nov 2023 16:32:24 +0000
ROA not after:            Fri 07 Nov 2025 16:32:24 +0000
asID:                     269986
IP address blocks:        190.90.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2682982 (0x28f066)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Nov  7 16:32:24 2023 GMT
            Not After : Nov  7 16:32:24 2025 GMT
        Subject: CN=1384be26c971bd5f6559b823b8402b1bd7cc71a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7a:a3:cf:8d:10:ea:e3:e8:e3:3b:48:b8:37:
                    57:37:80:1c:85:12:c6:72:1e:f0:a1:0d:5f:2a:d4:
                    f2:cc:92:99:7e:e1:a8:d7:ea:1e:5a:03:7a:0a:52:
                    de:b3:15:3c:b9:9a:af:02:c1:54:d1:60:a1:91:66:
                    9c:87:4f:73:8f:65:73:a9:8b:16:f3:b6:94:92:f9:
                    6d:98:0c:b6:d4:21:da:20:93:da:77:64:3b:de:44:
                    56:f6:4c:72:b1:62:0e:67:d3:ba:e6:36:27:47:95:
                    c8:2e:50:66:b2:1c:53:c3:6d:fc:a9:cc:76:37:8f:
                    04:b3:19:03:1c:f3:d0:1f:82:5a:90:9f:f4:01:19:
                    62:fb:fe:16:02:a2:80:47:85:6d:94:5a:3a:14:9c:
                    02:de:e8:d9:64:07:9e:60:1b:de:3b:13:97:0a:6a:
                    b1:9b:a2:52:ae:fb:d3:b4:c0:50:ca:ac:b4:4e:31:
                    c3:10:3c:36:c7:e1:0f:73:ae:3e:86:53:e1:a0:41:
                    d2:08:9e:d7:22:3f:7b:41:22:ae:2a:be:3d:91:14:
                    a5:f6:2c:e3:c0:21:72:ff:ae:00:2a:0c:40:fc:75:
                    2c:fc:50:d4:eb:75:80:ab:bf:ae:a9:b5:26:1f:ed:
                    04:ca:d3:12:79:c3:b8:8e:b2:d8:80:78:aa:d8:2f:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:D9:8D:C8:63:9A:A0:3F:95:53:98:E3:F8:A4:7F:D2:43:BA:5E
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/1384be26c971bd5f6559b823b8402b1bd7cc71a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:e9:a4:ff:2e:bd:87:1c:36:ab:df:57:5d:70:bf:d9:97:
         dd:b4:6b:0f:9f:9e:86:da:8c:f0:2b:7e:5d:ae:f2:76:0f:ec:
         2d:d1:f2:f9:3d:1c:08:03:5c:eb:ef:c3:e8:9f:8c:26:62:31:
         f3:b1:5d:f9:eb:9a:e7:f5:d4:4d:3b:0b:72:19:15:62:9d:a0:
         3f:49:ff:5b:05:49:33:df:76:28:36:ae:2c:f8:63:6b:d7:0a:
         03:ef:b5:7f:a7:12:d5:09:ec:88:91:31:da:99:55:6f:3c:5d:
         e4:20:95:f9:64:06:6c:7b:9c:c2:f2:4d:d1:8c:78:60:5b:69:
         00:0e:65:72:14:6b:ab:98:1a:cc:2b:01:0c:9f:42:de:30:bd:
         2f:d6:25:12:5d:4b:42:a0:c7:9a:ee:e2:e8:b5:a1:4c:c0:00:
         13:ca:94:86:a0:8f:0f:9c:89:c3:97:89:99:04:ee:0a:f4:45:
         15:81:56:0b:c7:b1:f7:f7:fe:57:3a:45:8a:d8:b2:ca:61:ba:
         20:12:6f:a2:51:92:a3:61:76:88:a3:ac:98:c0:7a:99:c2:2d:
         77:e5:3c:70:1a:a7:b3:f0:3a:f3:77:a0:e9:80:62:74:3a:5d:
         99:d2:38:31:83:f9:92:0a:27:5b:02:3f:d4:8c:be:d5:64:e6:
         c0:db:26:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org