Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/35b7ff478eab04447966cd4b52abdffaa42db3a8.roa
File:                     35b7ff478eab04447966cd4b52abdffaa42db3a8.roa (raw, json)
Hash identifier:          uC04cHpru1nn3Pom7jxyEhKgQRDP01lSHe90ZZMZGl8=
Subject key identifier:   C6:12:33:D4:AB:C7:BF:7E:D4:9E:A4:DE:5F:93:5D:D0:D0:B8:03:13
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2AAF98
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/35b7ff478eab04447966cd4b52abdffaa42db3a8.roa
Signing time:             Thu 15 Feb 2024 20:41:44 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     271914
IP address blocks:        190.110.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2797464 (0x2aaf98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=35b7ff478eab04447966cd4b52abdffaa42db3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:f3:39:90:4a:8f:80:1b:e0:66:c2:54:04:
                    f5:27:24:70:fc:0b:3d:8d:96:16:20:64:59:d6:34:
                    19:ff:c6:f6:71:37:71:c0:99:d8:34:7b:60:3f:bb:
                    a9:26:5d:0d:7a:6f:85:35:58:db:69:46:b9:5d:ff:
                    5f:0b:6a:65:ea:30:09:b6:be:bf:ea:8e:39:56:b9:
                    da:b9:ba:9e:9a:8a:14:b5:6d:5e:6a:09:71:ea:49:
                    d3:c5:5e:fc:1c:7e:21:72:f9:ea:3b:05:e5:81:06:
                    3d:ea:48:00:04:ae:88:65:6f:63:8f:1d:61:1f:03:
                    a5:d5:81:c0:1d:7c:42:29:a6:58:0a:40:12:c9:00:
                    d6:99:1f:1c:ad:9b:18:6c:98:8a:a9:ee:0e:a5:96:
                    e1:52:11:43:67:a1:c3:f0:a8:cb:33:68:4a:7e:ea:
                    32:87:7a:26:a9:d1:9b:f6:a2:77:28:2b:c7:af:1f:
                    02:10:8f:97:1a:30:f8:1e:ce:4e:29:a2:60:02:e2:
                    dd:ff:f2:9c:0d:c9:36:db:0f:36:fd:a0:cb:2b:7b:
                    5f:1f:a7:fe:f1:9e:93:3b:c0:fa:3a:53:a2:14:cb:
                    fd:96:47:29:7a:68:6b:05:c2:09:b0:20:d6:c1:1b:
                    ec:77:af:cf:08:f4:fe:c9:66:83:71:70:3b:76:68:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:33:D4:AB:C7:BF:7E:D4:9E:A4:DE:5F:93:5D:D0:D0:B8:03:13
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/35b7ff478eab04447966cd4b52abdffaa42db3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:43:6e:0c:3e:f9:a0:75:44:5d:20:00:31:a6:3e:86:90:
         26:d3:56:3c:fc:40:27:94:86:f9:14:a7:4c:63:3b:b2:ee:b1:
         aa:79:d8:3c:c0:3c:14:32:7b:e5:21:73:f4:10:d8:26:cf:dc:
         67:83:c0:ed:ee:64:47:04:72:67:9d:d2:5b:89:fe:b5:d8:7b:
         1e:6c:c8:ba:e5:2e:77:23:ea:32:1f:54:62:30:dd:d1:d3:78:
         22:7f:1a:3b:58:71:0b:a9:ee:3e:5a:cd:ed:82:13:54:61:86:
         9d:55:1a:5c:5d:fa:74:64:fa:3e:06:37:04:8d:df:ba:de:ae:
         60:f4:97:79:fe:77:08:79:09:1b:0a:8a:18:b4:e8:8d:2a:6e:
         85:de:08:53:19:3d:8d:db:40:eb:df:16:92:6a:33:32:2b:95:
         9a:58:c7:e4:85:5f:8d:23:c9:a7:30:2d:9f:92:45:35:7d:cc:
         01:6f:76:f3:0b:25:62:a4:e9:75:1d:0f:97:e8:fe:a2:14:40:
         64:f8:28:73:e6:c9:44:8b:89:fe:da:f0:af:d3:58:6b:57:e9:
         a4:bb:58:cf:f9:09:2c:32:c9:5c:b8:88:d3:9e:7e:70:7f:b2:
         cd:67:bd:7b:a0:44:79:44:be:47:d3:12:2d:c0:93:d7:b3:2b:
         87:23:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org