Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/038a55a55a4196730d5d2886c9ec8e3021fb8621.roa
File:                     038a55a55a4196730d5d2886c9ec8e3021fb8621.roa (raw, json)
Hash identifier:          fMkK/J7SrPXezFU/2/+w7Y5VVE8n4++PVsELKUgGhps=
Subject key identifier:   79:B9:0C:B3:FA:C1:A5:B2:66:C1:01:B0:C9:19:38:C5:1E:5A:D9:4C
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1FA7F3
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/038a55a55a4196730d5d2886c9ec8e3021fb8621.roa
Signing time:             Tue 31 Jan 2023 16:07:18 +0000
ROA not before:           Mon 30 Jan 2023 16:06:23 +0000
ROA not after:            Fri 31 Jan 2025 16:06:23 +0000
asID:                     262171
IP address blocks:        190.93.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074611 (0x1fa7f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jan 30 16:06:23 2023 GMT
            Not After : Jan 31 16:06:23 2025 GMT
        Subject: CN=038a55a55a4196730d5d2886c9ec8e3021fb8621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:e6:60:53:89:23:e2:f3:2b:56:3e:d8:2a:
                    cc:a2:88:f6:a9:46:dd:ee:07:a7:14:f0:bf:ed:dc:
                    6a:05:ab:f6:87:01:54:ed:b3:60:fe:87:4b:47:1d:
                    d2:e3:85:52:27:f8:58:ae:09:12:31:37:cf:0c:f3:
                    60:de:9d:75:76:cb:e2:eb:89:9c:d4:15:e4:f3:c9:
                    8f:2b:d5:cd:ab:96:af:f0:4b:70:52:16:d4:16:12:
                    79:e0:21:e9:12:08:9c:15:e3:47:7d:6c:0f:c4:9c:
                    b0:df:b5:ed:69:7a:36:94:63:18:94:75:9e:fc:61:
                    a7:d4:cc:bf:9c:c0:e1:40:8e:6d:c8:d5:0a:55:1d:
                    c8:0e:0e:52:84:ef:8f:9c:8d:5f:15:b4:2f:c5:cd:
                    74:41:c0:4a:3e:36:ac:65:8f:29:3e:cd:47:76:10:
                    a8:8a:17:cb:04:36:28:c2:7d:2c:11:60:47:84:79:
                    04:8a:f3:8c:0f:a9:b3:9d:7f:22:61:ad:e0:a9:4f:
                    45:14:b0:7d:7a:36:09:56:1e:8b:d4:61:24:24:07:
                    ad:45:ed:c3:3c:f2:76:bb:2e:25:72:2d:bc:e8:2c:
                    d3:b2:bb:96:f3:5e:59:da:40:22:47:7c:aa:90:00:
                    a7:b0:36:a8:4e:37:8e:77:0e:66:68:4a:53:69:c0:
                    bb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:0C:B3:FA:C1:A5:B2:66:C1:01:B0:C9:19:38:C5:1E:5A:D9:4C
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/038a55a55a4196730d5d2886c9ec8e3021fb8621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0b:67:9e:53:0a:04:fd:0a:46:5a:06:cb:ae:88:7f:41:40:
         6d:5d:c6:fd:d5:b3:cb:a2:29:07:08:94:2b:ae:2a:12:9c:e7:
         26:78:26:62:e0:6b:b1:4f:52:ee:1d:d7:32:c5:8f:25:8c:99:
         bc:b6:c8:5d:68:ab:fc:9d:25:e1:f4:9e:d1:c2:33:ed:35:9b:
         27:81:3f:39:90:2c:64:24:12:ed:7e:48:13:9c:34:9a:7f:92:
         5d:af:e0:dd:8d:39:bf:1d:cd:a9:58:f3:07:c5:29:8e:91:e7:
         be:5a:55:ee:14:69:d0:a9:cf:c9:e3:ca:4e:bc:0c:e9:c2:c4:
         ec:1c:bb:ee:88:ea:fc:b6:cd:b9:2d:38:7b:04:9f:e4:41:62:
         3b:2a:e7:14:8a:80:b5:8a:15:1f:63:14:ac:ae:5e:c6:58:8b:
         18:de:72:63:d6:52:72:9f:2b:7f:86:cd:ef:d3:b6:c5:e2:65:
         86:40:32:e7:66:22:3d:cb:87:5b:00:5b:94:ee:69:a5:5f:4f:
         49:15:09:4e:d5:fa:62:42:9b:f8:be:30:12:3c:c1:39:df:c5:
         f5:08:e9:35:2a:da:38:ea:46:5a:db:26:28:32:b8:d7:d1:6a:
         47:19:a1:28:1e:0f:e9:f9:37:b9:50:11:11:eb:1c:06:cb:fb:
         8c:e4:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org