Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/39d6a5173db6fb76ec5566143817ab23db7b0a74.roa
File:                     39d6a5173db6fb76ec5566143817ab23db7b0a74.roa (raw, json)
Hash identifier:          68InMs54K4Xq2nrdW4vTOhmlqeA6GEzg9mnj4A78/Kc=
Subject key identifier:   36:AC:CC:0E:42:79:0D:08:B9:9F:2F:E0:DC:E2:3F:04:40:AB:5D:40
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       23F5BB
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/39d6a5173db6fb76ec5566143817ab23db7b0a74.roa
Signing time:             Mon 17 Jul 2023 16:08:49 +0000
ROA not before:           Sun 16 Jul 2023 16:08:49 +0000
ROA not after:            Thu 17 Jul 2025 16:08:49 +0000
asID:                     272903
IP address blocks:        190.110.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356667 (0x23f5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Jul 16 16:08:49 2023 GMT
            Not After : Jul 17 16:08:49 2025 GMT
        Subject: CN=39d6a5173db6fb76ec5566143817ab23db7b0a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:6b:63:72:9b:d7:af:04:2d:21:3f:33:2f:
                    a3:fb:fc:f9:57:da:65:3f:23:25:1f:7f:7d:1b:77:
                    45:27:a9:ff:fa:42:48:bf:05:a9:7f:37:49:d6:be:
                    38:59:2b:79:64:22:0b:03:34:03:0b:df:60:f9:29:
                    a9:bf:74:ec:57:62:10:86:0d:0b:be:55:5f:31:fa:
                    54:d8:ee:4a:fd:bf:d2:6f:83:57:db:a9:df:8e:c3:
                    4b:14:92:6b:66:1d:10:e6:f9:ef:13:aa:be:df:b6:
                    82:24:16:f6:14:d9:10:b8:20:68:b9:d5:52:46:ff:
                    fc:e9:0f:74:c9:71:7d:7d:b5:b2:e4:b0:9d:51:42:
                    3f:7e:71:4f:ad:c0:41:76:0d:23:fb:44:fa:26:f5:
                    5a:ed:f2:da:e7:a0:59:cd:68:f7:bb:4d:0a:c9:ac:
                    d2:1f:b1:65:09:f1:d1:72:63:fd:bc:46:8c:72:0a:
                    ab:bc:65:66:47:02:36:13:30:e8:c0:f2:a0:a4:78:
                    4b:69:c5:2d:ea:c1:51:77:92:d8:64:a4:d8:cc:c5:
                    da:8f:a3:b4:68:9b:25:b5:8a:e5:89:3f:6b:86:13:
                    3b:ca:53:28:16:2b:12:9b:fe:ac:f8:e9:77:fb:fa:
                    01:3d:f6:fa:7f:a1:ff:95:5d:d2:e6:c8:cb:93:33:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AC:CC:0E:42:79:0D:08:B9:9F:2F:E0:DC:E2:3F:04:40:AB:5D:40
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/39d6a5173db6fb76ec5566143817ab23db7b0a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:5d:ce:88:b9:8b:12:fa:cb:7c:bb:f1:05:09:3b:f5:bc:15:
         d1:8a:56:56:6a:12:05:e2:19:76:e0:3c:73:7f:fd:90:27:01:
         61:ce:73:41:cf:c8:b0:df:7f:77:61:06:d9:3e:88:91:9f:f1:
         d8:96:db:1f:d7:38:5c:8e:c8:c7:03:a3:95:12:f7:b7:7f:fb:
         65:a4:6f:ed:3f:9a:be:9d:f7:51:8f:c0:53:ab:71:f9:c6:2f:
         da:cc:45:36:7c:83:0a:01:c5:b2:bf:d4:94:59:5c:a6:ad:dd:
         a6:4a:53:d4:a6:6c:4c:07:1e:c0:4b:c0:e3:e0:e0:b7:9f:66:
         67:2a:6a:68:fc:18:69:02:15:ad:b7:f8:10:40:56:ec:b8:93:
         14:ab:18:4b:64:b3:aa:30:f6:07:60:c8:ab:4a:5b:32:63:1d:
         a4:d5:ef:59:34:b0:aa:65:03:3b:eb:12:8b:49:b5:a5:b6:e5:
         64:d2:a4:c9:c3:8e:34:c5:80:57:46:b5:8d:7f:9c:07:33:b1:
         26:11:19:99:24:a5:e4:9e:f9:8d:b8:46:2c:45:61:9e:ae:4b:
         eb:3d:db:45:fc:fb:73:c8:53:1a:52:d0:19:67:10:ee:e4:e7:
         01:71:11:ad:0d:49:f7:79:5c:eb:c8:b3:5e:a5:3b:90:07:1f:
         b6:36:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:21:06 2023 by rpki-client on console-fra.rpki-client.org