Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2007f752ac6e03dc2cd11418240e6d0a46c4ebfe.roa
File:                     2007f752ac6e03dc2cd11418240e6d0a46c4ebfe.roa (raw, json)
Hash identifier:          FJW+9s5FX9jO9pYYTa3FuTxKNlEeE0TmuP6qyOmjYHE=
Subject key identifier:   26:05:18:38:95:C3:94:2E:91:FF:5D:2D:9D:15:50:42:17:E2:75:4C
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       251C13
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2007f752ac6e03dc2cd11418240e6d0a46c4ebfe.roa
Signing time:             Thu 10 Aug 2023 18:00:56 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     271914
IP address blocks:        190.110.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432019 (0x251c13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=2007f752ac6e03dc2cd11418240e6d0a46c4ebfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:09:09:56:34:8f:eb:fd:54:10:3a:8b:9c:
                    a5:fa:0b:af:b8:f2:64:c9:50:41:7c:3b:92:11:19:
                    da:d6:9f:f8:a7:0d:5c:e2:79:c3:97:eb:f7:ef:8f:
                    de:46:e9:72:24:64:eb:ab:1c:b6:c4:ff:57:9c:37:
                    c2:dd:e6:c1:c8:42:d7:0b:f8:cd:e2:bd:e6:fd:5e:
                    46:cf:0a:b7:51:c1:22:53:58:b3:a6:73:bb:7f:ad:
                    d5:3f:90:05:7b:8b:19:f7:d3:34:c5:69:4e:b2:90:
                    df:43:2e:bb:68:56:48:23:82:49:5d:a2:6b:39:6a:
                    6b:f7:46:3e:8f:73:04:fc:d7:b1:5b:1d:7c:03:31:
                    96:7b:76:65:a3:b6:25:c2:67:f8:59:48:97:8c:a0:
                    c1:f9:fa:39:0a:09:76:4c:07:cf:86:96:2c:9e:5a:
                    50:ab:28:e9:b3:88:c9:36:ad:9c:3d:74:32:63:3b:
                    1b:73:1d:35:79:f6:ba:f2:2e:0d:bc:cc:52:66:ce:
                    ad:e8:f9:5d:bb:a4:1d:a0:9e:1c:e1:7d:10:d1:b6:
                    e7:85:f3:f1:cf:32:f4:30:c2:a1:d7:03:61:c6:72:
                    7a:cf:c3:31:3c:3c:cf:a2:07:c2:9d:11:55:41:8f:
                    60:be:07:12:07:66:32:80:c8:5a:fc:1e:b6:4d:95:
                    e9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:05:18:38:95:C3:94:2E:91:FF:5D:2D:9D:15:50:42:17:E2:75:4C
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2007f752ac6e03dc2cd11418240e6d0a46c4ebfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:09:cc:17:e3:12:5e:78:5c:0d:e4:df:9a:ce:78:70:ef:e2:
         8c:0d:f4:f6:c2:a2:72:dd:7a:06:8e:88:b5:06:64:51:69:44:
         86:3d:9f:64:bc:ff:56:e0:de:16:88:87:00:c3:05:f8:ad:98:
         51:46:be:92:93:18:dc:56:46:43:2b:71:d3:ef:e6:02:10:37:
         6e:76:95:6d:0d:b4:53:91:4f:5d:c5:a8:1d:d2:de:77:d9:68:
         d7:cd:82:8b:3f:b7:c6:2a:3d:6d:03:bb:79:1a:29:f2:9e:ab:
         02:12:5c:72:33:67:2e:48:09:5e:85:ea:5a:1d:ab:b6:22:bb:
         7c:4b:4e:e2:12:5d:4a:bd:0b:25:54:cb:7c:3e:af:57:d0:f0:
         1e:6f:d7:8e:bb:d3:1b:69:6e:37:d5:f0:1a:6a:2c:3c:9e:75:
         93:2d:6f:7b:9c:54:be:18:23:33:09:ec:d4:e9:29:cd:2b:ad:
         88:f3:2a:41:21:b4:27:6c:ed:b2:cd:a4:b8:d1:8b:d7:f2:45:
         5e:c6:1f:84:7c:24:cb:6a:50:56:27:c8:0f:a5:d2:3e:de:91:
         31:7f:74:6e:47:6e:c4:fa:4c:f3:a3:86:28:14:38:45:78:3a:
         bb:27:44:90:3d:fd:be:ce:ac:7c:48:39:b0:92:17:bb:e1:e0:
         d8:07:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:57:29 2023 by rpki-client on console-ams.rpki-client.org