Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3a72af7854858ec374f0525c17f99152e6a65216.roa
File:                     3a72af7854858ec374f0525c17f99152e6a65216.roa (raw, json)
Hash identifier:          Y8IManCiQvPOMI4yOCBrIVdRXi8QUF9AtTG1A+tqp4A=
Subject key identifier:   30:E9:D3:F9:97:39:8A:6E:55:56:13:79:83:A8:DF:2E:96:6A:82:2A
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2AA171
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3a72af7854858ec374f0525c17f99152e6a65216.roa
Signing time:             Thu 15 Feb 2024 20:41:39 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     20207
IP address blocks:        190.110.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2793841 (0x2aa171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=3a72af7854858ec374f0525c17f99152e6a65216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:26:40:7c:2b:1e:c7:34:52:71:ae:66:aa:
                    ae:c8:c8:72:7b:60:21:4a:83:4c:1e:fa:be:53:d7:
                    89:fd:83:3a:8f:08:fd:83:78:31:a1:73:3b:fc:9a:
                    ef:a1:a1:75:f3:4a:b6:84:e0:94:f5:64:51:58:dd:
                    a4:ea:ee:b9:4b:05:3e:07:cf:e8:33:04:e4:00:8a:
                    b7:5b:42:70:98:53:3f:9c:50:93:a5:6d:47:f1:0c:
                    23:80:59:a4:81:ef:32:b2:38:fc:8a:29:79:6a:4e:
                    ca:8b:80:30:f3:d9:c2:d5:0b:21:54:61:0d:31:68:
                    c2:d6:f8:92:11:83:61:fa:fc:9f:c7:8b:51:a0:fe:
                    c4:24:8f:df:13:a2:2c:ef:43:14:16:cf:44:a0:c1:
                    37:e7:b8:c4:4b:96:3b:3e:49:bf:b0:73:07:bf:4d:
                    d6:8c:11:9a:76:1b:63:0f:1f:29:f5:38:9a:76:b5:
                    3b:a7:80:f5:23:fb:7f:66:b8:51:e2:c9:0f:25:46:
                    b5:11:1c:10:8b:0a:bf:c8:d8:1e:1a:fe:ab:66:1b:
                    8c:ff:ce:8a:7e:80:7e:17:3c:f3:e0:60:6a:d7:71:
                    e1:2c:2f:3f:4f:e6:ce:3f:28:ce:d1:61:fd:a6:26:
                    cc:4f:b3:a3:8d:1e:ca:68:16:9f:60:40:90:f3:ee:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E9:D3:F9:97:39:8A:6E:55:56:13:79:83:A8:DF:2E:96:6A:82:2A
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3a72af7854858ec374f0525c17f99152e6a65216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:87:74:d9:74:71:e0:1e:ce:a0:75:7b:79:bb:eb:0b:4e:
         e5:a6:02:b1:da:69:aa:ce:6a:f1:b8:95:91:c5:91:18:0c:a7:
         b8:40:6d:46:3e:ca:d0:ea:80:33:94:b0:19:fb:21:64:7d:6a:
         19:db:5a:b3:e4:c9:e4:80:ab:f1:f6:a4:ba:4b:8f:a0:3c:36:
         d3:d3:82:84:67:28:e6:3d:60:13:fb:ac:26:b0:23:94:c6:c2:
         3a:77:d9:04:1a:1c:f3:08:2f:59:42:d1:a7:cd:25:b3:f2:d5:
         57:ba:67:ea:6d:7d:56:56:65:a6:15:ab:a8:a5:e8:e0:1f:09:
         2b:32:17:9d:10:d5:47:2a:53:c7:bb:b9:e3:6f:47:2f:c9:ea:
         5b:9b:9e:9f:9a:9e:42:48:6c:ed:35:97:83:cf:d6:10:63:79:
         7a:cf:f9:fc:f4:b2:90:d8:2c:6e:0a:74:18:71:ed:7c:d7:ef:
         dc:ba:9d:6a:1e:a7:0a:9a:ef:1a:fb:ad:81:3f:b5:91:d9:ea:
         2f:79:e8:9b:c6:c4:72:e6:3d:d2:f4:dc:3c:05:0e:38:a6:87:
         0e:48:d4:e5:d7:56:95:6c:d0:41:75:a6:5a:de:1f:03:9a:05:
         ce:48:8f:7d:f8:d4:0f:10:55:a2:e6:91:37:95:a3:c0:5d:58:
         60:27:dc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org