Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2d539befaf9ca3fcb109ddd647fa930e77a2986c.roa
File:                     2d539befaf9ca3fcb109ddd647fa930e77a2986c.roa (raw, json)
Hash identifier:          y9Zx9Yjr6lsThiQOQnyIpmKBsZG9ViUGRXenXEzWMGo=
Subject key identifier:   DB:66:B4:A4:E0:57:21:0C:36:36:82:CC:1D:53:67:D4:13:A4:7B:97
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27E590
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2d539befaf9ca3fcb109ddd647fa930e77a2986c.roa
Signing time:             Wed 08 Nov 2023 15:00:56 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     271914
IP address blocks:        190.110.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2614672 (0x27e590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=2d539befaf9ca3fcb109ddd647fa930e77a2986c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:ff:80:4d:1d:ae:81:12:83:c8:70:6d:50:
                    76:c0:5d:a8:0c:3a:82:0a:96:05:fd:f2:96:5b:1e:
                    54:4a:05:6e:07:94:a8:f1:94:42:5b:1c:91:1d:5e:
                    29:7b:2c:58:f1:cc:be:77:58:87:b6:27:37:da:30:
                    ba:45:0b:b2:e6:33:5b:f6:d3:6c:8b:78:1b:0e:80:
                    57:7f:71:83:c3:ce:7a:30:2d:bd:48:1d:cc:06:3f:
                    c2:4b:f2:f4:93:4a:89:44:cc:ba:8a:23:0d:cb:d8:
                    26:7f:80:00:19:95:59:d8:3f:14:39:a6:98:cd:29:
                    9c:b9:f2:40:18:b0:d5:2a:4a:cc:35:c5:29:c4:0a:
                    59:d9:07:06:bd:5d:08:7e:0a:51:30:a1:aa:9a:09:
                    48:42:d0:5f:03:f9:c2:35:11:e5:c7:02:60:86:bf:
                    1c:02:b9:a8:84:41:53:27:ef:ce:e3:70:c6:41:83:
                    12:f9:e3:d7:e3:99:7a:ce:44:ba:b9:8f:69:53:ae:
                    6f:1d:46:80:d3:be:06:c7:d3:96:0d:92:17:4d:d4:
                    7d:03:f9:b2:00:99:4b:14:b4:da:1a:cd:98:d0:43:
                    ff:66:2d:86:06:32:00:3f:3d:53:31:d8:06:40:b7:
                    d9:28:77:49:0d:dc:bc:c6:94:80:a4:cd:7f:4c:a3:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:66:B4:A4:E0:57:21:0C:36:36:82:CC:1D:53:67:D4:13:A4:7B:97
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2d539befaf9ca3fcb109ddd647fa930e77a2986c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:2b:d1:7d:7c:38:ac:65:89:a0:51:41:71:9c:70:f0:d3:3c:
         01:e0:83:2d:c7:c5:db:14:9f:43:a2:ed:e6:e8:c8:33:37:ab:
         93:24:26:93:af:3b:5b:39:da:93:30:c6:15:52:2b:04:9f:90:
         58:f0:d5:5d:39:e2:45:ff:c2:51:6f:3a:72:88:67:37:9d:da:
         42:5d:60:9b:26:0f:98:10:75:c5:cb:19:33:f0:0d:27:62:34:
         ae:f5:d4:4d:8d:7d:b5:8c:82:37:79:75:de:07:d1:6a:3f:9c:
         83:be:bf:20:6c:90:3d:00:37:0a:2d:40:6f:a8:35:a7:dc:2b:
         de:42:57:29:cc:22:b2:bc:b6:70:6e:27:74:12:43:23:e9:64:
         5f:87:f4:b9:f3:61:8e:ae:1a:79:b4:d7:a2:d7:5b:9c:e3:00:
         a7:32:bf:7f:56:a3:90:93:6c:1b:3b:05:6b:24:84:43:b9:a4:
         13:5f:c1:c3:01:7f:e0:2d:19:cb:59:b3:09:f6:40:40:53:af:
         9f:00:a7:1c:ed:d3:b8:a1:5c:fa:99:02:ef:16:28:4c:4e:71:
         46:20:e2:13:cf:c0:5e:82:f2:be:75:e5:27:ea:61:28:23:00:
         de:08:79:c3:0b:91:4f:8d:6c:ea:2f:7a:9b:2f:ef:05:88:15:
         8c:7b:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org