Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38dfe5d49af7702588aea42f4e7cb1499a7f88a0.roa
File:                     38dfe5d49af7702588aea42f4e7cb1499a7f88a0.roa (raw, json)
Hash identifier:          LSAgwRr5K1eAMh4Ac+7+rthbj8GXHYwbqg/KGSu/wm0=
Subject key identifier:   73:40:7B:07:AF:61:8C:CB:46:5E:DE:25:1F:2E:73:77:8A:60:CF:FE
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FFC08
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38dfe5d49af7702588aea42f4e7cb1499a7f88a0.roa
Signing time:             Wed 01 Feb 2023 20:34:04 +0000
ROA not before:           Tue 31 Jan 2023 20:32:28 +0000
ROA not after:            Sat 01 Feb 2025 20:32:28 +0000
asID:                     262171
IP address blocks:        190.93.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096136 (0x1ffc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 20:32:28 2023 GMT
            Not After : Feb  1 20:32:28 2025 GMT
        Subject: CN=38dfe5d49af7702588aea42f4e7cb1499a7f88a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:34:7a:69:57:e5:a0:c1:97:e6:e9:30:89:
                    5f:51:58:7e:ae:0c:c5:91:6e:cb:ef:3b:37:4f:7c:
                    a3:74:57:70:a0:a9:5a:e6:5e:6e:14:86:bf:d6:d0:
                    77:b7:7d:04:e5:e7:78:9b:90:7d:f3:ee:62:eb:78:
                    0c:0e:84:23:9f:0f:22:fe:fc:c7:fb:20:8f:a5:91:
                    dd:36:8a:e7:c5:9f:65:16:42:97:01:10:58:f0:6d:
                    e7:f8:f8:0b:4e:ef:94:b1:4a:b2:4e:15:8c:28:04:
                    c0:c8:74:9d:37:0d:c6:4f:21:dd:f3:c2:35:d8:66:
                    55:a6:09:21:35:2a:93:e9:ee:c4:96:e9:c9:5d:d9:
                    17:72:0b:f9:42:ba:db:1e:06:db:be:1a:3b:a4:f9:
                    4a:16:93:23:b9:6a:d7:19:d7:9e:b6:53:45:cd:81:
                    e7:4b:06:2e:82:22:7a:7f:bf:43:33:38:83:c1:dc:
                    fa:c2:08:54:8b:6e:3a:27:20:5c:4c:bd:5c:66:43:
                    da:04:21:05:0c:dd:fd:34:55:dd:e6:e3:57:97:55:
                    72:40:8d:eb:58:4d:7d:21:be:90:89:cb:79:51:68:
                    b5:23:cf:ec:2e:83:f3:82:f0:df:4a:ce:0a:93:4c:
                    37:e1:52:c7:b6:79:7e:42:37:fe:0f:4a:f0:bc:e2:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:40:7B:07:AF:61:8C:CB:46:5E:DE:25:1F:2E:73:77:8A:60:CF:FE
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38dfe5d49af7702588aea42f4e7cb1499a7f88a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:d8:71:ff:f1:13:75:98:9b:5b:e4:16:4c:27:83:4c:88:
         34:04:45:dd:b0:91:23:74:2e:07:9c:d5:71:2d:b2:a4:df:ca:
         15:13:29:fd:fa:e1:fa:d2:ac:d3:67:83:fa:65:b0:a6:92:e3:
         25:fa:eb:bd:dc:01:de:39:5a:c4:a0:66:43:e2:e1:06:36:7b:
         31:09:ef:c9:6d:72:20:1a:2f:89:46:46:85:71:73:14:9f:1b:
         22:b1:8d:e9:95:bd:40:4c:e6:4f:fa:57:c1:bb:16:c5:d5:06:
         f0:39:dd:cf:9b:65:8e:d3:a2:6a:29:42:e8:a8:58:99:01:11:
         6e:45:29:ce:28:6b:d4:1d:00:08:46:cb:5d:85:a9:60:b3:7f:
         8a:ea:04:15:b8:17:0f:7a:80:b1:54:46:43:ed:40:9a:f2:0f:
         d2:7d:d9:65:e7:e2:46:f1:57:0e:c8:2a:17:50:1a:e9:56:55:
         b2:71:49:83:e8:e6:47:5c:13:0b:a9:fe:22:63:9f:e6:e9:3c:
         d8:43:1b:dd:f1:01:d2:e2:9d:5d:e7:06:4b:73:77:a6:e0:6f:
         3f:f8:9e:36:d2:fb:c5:38:b3:58:b4:39:12:10:45:fe:54:d5:
         a5:44:e5:db:72:54:ea:98:22:41:19:fc:3c:ab:77:77:28:a9:
         87:b5:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org