Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/0530a72d9993493a2f2ac56716871da026bd94e5.roa
File:                     0530a72d9993493a2f2ac56716871da026bd94e5.roa (raw, json)
Hash identifier:          G6e5mul1kC7Wg8M1DBT9ZM4vTB3h/UwwsbB+G80R90A=
Subject key identifier:   34:7F:28:43:39:53:64:04:DF:BA:61:0E:63:85:2F:16:09:19:D8:0A
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       243055
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/0530a72d9993493a2f2ac56716871da026bd94e5.roa
Signing time:             Mon 17 Jul 2023 16:09:28 +0000
ROA not before:           Sun 16 Jul 2023 16:08:49 +0000
ROA not after:            Thu 17 Jul 2025 16:08:49 +0000
asID:                     11514
IP address blocks:        190.110.253.0/24 maxlen: 24
                          190.114.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371669 (0x243055)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Jul 16 16:08:49 2023 GMT
            Not After : Jul 17 16:08:49 2025 GMT
        Subject: CN=0530a72d9993493a2f2ac56716871da026bd94e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:2b:fc:56:a2:95:91:d1:ab:7f:0c:aa:f1:
                    8a:f8:b8:a1:7f:fe:45:38:28:8f:19:a9:63:7b:9f:
                    c4:74:b0:50:50:2f:3d:7c:ab:f8:b5:62:17:63:42:
                    60:c2:17:10:22:51:b6:db:d3:27:98:de:80:10:af:
                    a3:5e:35:88:9d:a0:b0:46:51:c0:23:c7:22:20:16:
                    a9:e2:a3:3b:e4:59:36:b5:ec:b8:58:a1:ea:ed:18:
                    f0:e9:9c:84:f8:82:3c:45:35:b2:82:9f:1d:77:f8:
                    e4:b1:fd:bb:2f:81:c5:22:05:dc:7d:f9:fe:72:aa:
                    4a:a8:a3:ef:c4:b2:2a:62:56:90:6c:86:aa:1e:16:
                    fe:08:c0:f1:49:d4:c3:a2:a5:72:a9:53:1b:e1:ee:
                    de:b7:19:42:68:f4:5f:14:6a:f2:c5:10:ba:65:45:
                    54:35:3a:49:0b:b5:ce:5a:be:c6:f6:1f:49:d4:14:
                    6b:87:21:2f:e4:f5:94:f3:72:0f:22:d4:fb:98:12:
                    24:37:69:f8:47:9c:3f:62:53:2a:34:56:b3:b0:93:
                    49:c9:37:f6:f8:08:24:9a:6c:9d:97:c4:5d:dc:ea:
                    8e:a0:86:76:94:ed:9d:6d:a5:e8:0c:7b:91:5e:8e:
                    1f:37:af:14:c7:2c:c6:fe:a9:80:14:cc:09:86:2b:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7F:28:43:39:53:64:04:DF:BA:61:0E:63:85:2F:16:09:19:D8:0A
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/0530a72d9993493a2f2ac56716871da026bd94e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.253.0/24
                  190.114.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:89:c6:fa:23:e4:09:8e:8f:bc:fd:1d:80:a0:e7:12:11:de:
         99:cf:e0:b8:f3:8a:17:65:45:75:dd:99:a9:69:ff:7b:68:ee:
         43:6a:01:6c:60:f9:7c:13:af:ac:b7:42:60:c5:b2:f7:a2:b1:
         73:8e:ee:27:79:ef:1e:70:12:12:16:db:88:3d:d9:ba:8e:06:
         ce:fc:18:03:8b:94:e3:83:e0:d0:92:4a:86:5f:fd:2c:0e:cc:
         83:90:d4:82:fd:6d:81:4f:58:b2:4c:2a:63:25:79:5e:1d:52:
         16:69:7f:e7:1d:5f:d2:3d:59:2d:25:e0:89:02:86:82:86:38:
         6d:45:1f:86:89:5f:c7:08:fd:0e:c2:04:23:7f:c2:0d:e2:cf:
         1b:a5:40:c9:48:1a:36:28:bf:2c:80:49:8a:1c:f8:92:a4:85:
         5d:75:1f:9a:ae:8f:a2:c7:8e:8d:33:7d:bf:18:1c:cc:40:b5:
         92:5e:ee:af:09:27:c2:22:5f:b2:b4:51:d1:17:fb:65:1e:c7:
         90:d5:c0:94:f1:c8:b6:c0:86:94:c8:a3:cf:8d:64:c7:22:b1:
         e6:50:12:96:43:20:4e:4d:81:77:de:3d:3b:5f:ce:90:cc:a0:
         0a:75:02:70:8c:39:ec:9d:79:0f:66:4c:5f:c2:ca:aa:b7:cb:
         c3:84:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:21:06 2023 by rpki-client on console-fra.rpki-client.org