Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/0507784199d881827b1fe90c8b823241c70101db.roa
File:                     0507784199d881827b1fe90c8b823241c70101db.roa (raw, json)
Hash identifier:          L4LxXqvbK4cyCGnU+WUjhXIQ+VKEcYOVMhwIz4TRt9E=
Subject key identifier:   8E:34:7D:6E:C4:D5:CA:CE:7A:C0:22:69:B6:45:43:C4:C5:FC:EB:A3
Certificate issuer:       /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial:       278BD4
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/0507784199d881827b1fe90c8b823241c70101db.roa
Signing time:             Tue 07 Nov 2023 16:00:54 +0000
ROA not before:           Tue 07 Nov 2023 16:00:38 +0000
ROA not after:            Tue 07 Nov 2028 16:00:38 +0000
asID:                     20207
IP address blocks:        190.110.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591700 (0x278bd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
        Validity
            Not Before: Nov  7 16:00:38 2023 GMT
            Not After : Nov  7 16:00:38 2028 GMT
        Subject: CN=0507784199d881827b1fe90c8b823241c70101db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:ba:39:40:f1:96:dd:23:34:2b:a2:79:ef:
                    a4:bf:2d:ea:92:82:92:de:f2:cf:59:93:70:dd:0f:
                    02:64:ba:da:a4:02:7e:d9:16:ef:42:33:12:17:68:
                    37:8a:99:d1:8d:05:79:b3:b5:fc:ce:7a:ce:cb:4c:
                    a5:8d:3e:7d:8d:b5:b1:d4:22:4a:c7:c7:59:fc:f8:
                    83:81:d2:55:9e:b0:e8:8a:7e:cf:f8:b2:cc:c6:6c:
                    29:90:6a:d0:61:d9:0c:01:17:cc:00:74:e8:3b:c1:
                    33:2f:d6:88:83:54:b1:c9:a0:0c:4e:8c:33:07:aa:
                    c1:bb:5c:9a:ad:dc:56:82:da:40:19:10:1f:21:67:
                    b9:c5:55:7a:33:63:9e:ec:0b:e5:4f:b0:b5:98:5a:
                    33:79:af:ef:e4:21:ef:2f:a6:ba:fd:50:bb:4d:7d:
                    7a:0d:fe:2b:ab:f1:75:7c:63:55:71:58:17:0b:3d:
                    47:33:e2:87:ad:31:1a:b2:5c:28:34:2e:ca:35:d8:
                    a1:d3:cc:bb:b3:9c:69:1e:16:27:0c:fd:c0:c8:b5:
                    53:ae:64:cb:5b:94:c9:e1:cf:07:2a:34:7c:d8:74:
                    80:60:12:7a:a9:fe:9d:59:cd:d3:47:03:10:c1:83:
                    df:79:72:52:0d:ab:61:81:4a:98:b0:67:ec:e8:d5:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:34:7D:6E:C4:D5:CA:CE:7A:C0:22:69:B6:45:43:C4:C5:FC:EB:A3
            X509v3 Authority Key Identifier:
                keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/0507784199d881827b1fe90c8b823241c70101db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:1d:98:66:05:98:bd:f0:a6:f1:6e:72:21:c7:81:9a:ad:
         7a:c1:26:24:df:6e:9a:f2:e1:db:93:3f:25:5d:fa:66:1d:06:
         94:90:ee:9f:79:17:ce:26:36:59:63:93:fe:18:af:b6:21:ec:
         73:a8:fe:29:76:10:74:c5:1f:b0:d1:2c:96:50:72:d8:dd:82:
         4b:6e:ba:30:40:0a:b6:e0:aa:59:37:c8:9e:4b:00:fe:5b:41:
         ea:81:a6:86:8f:85:f6:71:6e:19:28:e5:71:5e:e0:a3:67:a0:
         62:4c:4a:d7:cd:5b:6f:7e:9b:98:75:80:0f:20:fb:35:46:eb:
         28:f9:d5:26:6f:dd:9b:f1:94:b8:2e:39:10:89:61:16:d7:0e:
         dd:d1:b3:75:d7:57:ca:6b:84:8c:e7:48:e8:fe:eb:7e:0c:f1:
         a0:c8:a0:f5:20:ce:29:8b:12:89:4b:13:71:d3:0e:e4:62:ec:
         d5:7a:8d:e2:f8:27:86:54:2a:dc:dd:c5:4d:a8:c1:d6:5c:8e:
         6f:57:22:b9:7f:32:ca:49:70:ff:83:45:08:3b:2a:f3:7c:19:
         d2:c7:d0:c8:e6:dd:10:44:3c:8e:24:98:58:fe:ea:ba:fe:12:
         97:d7:65:31:23:20:d0:fd:69:ac:fa:da:33:0e:65:20:e5:4e:
         7d:62:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:45:01 2023 by rpki-client on console-ams.rpki-client.org