Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/112990b8b5aca4ca74842f1a5bb3d49c7b41b779.roa
File:                     112990b8b5aca4ca74842f1a5bb3d49c7b41b779.roa (raw, json)
Hash identifier:          m7+pphkCCfKz61IpW1UphnMoX2ygBoIXdaYGUmVzBN4=
Subject key identifier:   78:5B:05:6A:92:E2:D1:15:1B:E4:65:47:A2:62:D8:E3:CE:BE:F8:F6
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       25262C
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/112990b8b5aca4ca74842f1a5bb3d49c7b41b779.roa
Signing time:             Thu 10 Aug 2023 18:01:01 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     263834
IP address blocks:        190.110.229.0/24 maxlen: 24
                          190.110.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434604 (0x25262c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=112990b8b5aca4ca74842f1a5bb3d49c7b41b779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7f:ac:68:9d:01:78:54:17:09:c9:b5:27:55:
                    b5:a7:13:e9:19:29:be:89:78:7c:c1:5d:b0:68:3f:
                    80:93:84:f8:c9:df:04:6f:a4:97:94:b8:29:f6:cd:
                    54:c2:d3:ef:31:31:54:e9:7a:dd:b7:f0:05:c6:76:
                    3f:dd:07:99:e0:09:bc:35:93:65:fc:00:d5:9c:29:
                    8e:47:bf:20:c7:6f:51:4f:ac:87:90:8e:36:09:d7:
                    99:ae:c8:ce:7c:f6:ee:21:a7:ce:2b:85:03:62:f6:
                    ec:6e:c9:8c:4c:26:50:9c:c2:96:e4:16:cd:6d:2b:
                    39:df:16:fd:73:42:c1:a8:2a:1d:dd:c1:ae:bd:99:
                    2f:49:d9:01:f4:c0:d3:98:53:93:04:91:f9:24:ee:
                    1f:e9:21:0e:3e:81:ed:b7:dd:4c:16:25:57:a8:07:
                    0f:3c:c7:07:a4:2e:a1:e0:9f:59:d3:56:41:55:00:
                    d5:c5:69:6f:fe:1c:f5:b5:fc:9d:b5:42:81:7b:f9:
                    4b:2b:0e:4b:dd:f7:f7:9f:db:f7:64:69:4d:80:96:
                    e2:02:83:ff:45:06:e6:e9:ce:a8:56:d3:88:b0:73:
                    09:8b:69:a9:ff:15:c5:56:7f:c2:b4:c1:68:54:88:
                    9e:5b:be:22:6c:fd:9b:86:86:cd:3c:2b:6b:9d:0c:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5B:05:6A:92:E2:D1:15:1B:E4:65:47:A2:62:D8:E3:CE:BE:F8:F6
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/112990b8b5aca4ca74842f1a5bb3d49c7b41b779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.229.0-190.110.231.255

    Signature Algorithm: sha256WithRSAEncryption
         5a:c2:43:a0:4f:8e:f5:58:fd:ed:43:a3:f7:b4:95:b0:8b:b8:
         e4:7d:13:53:3d:cd:4d:2a:9f:70:23:bc:55:93:d5:07:e4:71:
         c9:b5:b8:ae:dd:65:e3:95:3c:79:a9:e5:ed:4d:7b:4c:6a:96:
         87:16:91:e5:a1:e8:8d:22:78:6f:18:76:60:e3:10:a9:80:d6:
         f4:f9:e2:90:fa:50:f8:36:54:40:b8:58:9a:c9:47:81:02:2d:
         a1:65:f2:ef:ee:97:eb:a9:00:1a:ce:39:8a:a7:6f:0b:97:d7:
         bb:1f:d4:c6:c1:25:1f:d0:aa:26:b6:c6:16:aa:45:fb:81:e2:
         21:84:19:bf:f1:d1:65:24:16:fd:0e:9a:c2:95:21:fe:ea:79:
         8f:44:cc:48:e0:28:ad:3a:92:2b:7b:01:80:9f:2c:36:54:65:
         42:4d:68:8e:35:7c:ab:e5:93:08:c7:8f:4b:2e:c4:6a:2f:6a:
         bb:b5:97:1b:5f:e6:d4:d1:44:a4:ff:30:6b:dc:83:1b:89:31:
         5e:18:97:be:68:76:f1:49:78:c1:c3:05:16:5e:4b:22:f1:7f:
         50:63:8d:39:6a:1a:48:47:9c:1f:57:65:9b:d7:68:11:f0:3f:
         3d:80:70:ed:08:2a:c7:a6:38:96:99:cc:81:33:0d:98:af:a0:
         66:4b:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org