Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/418f4bfc3ed69015f16764bdb4801084b9e37f13.roa
File:                     418f4bfc3ed69015f16764bdb4801084b9e37f13.roa (raw, json)
Hash identifier:          sHNK+YAe1KbJ6RJ0UDlwOjnlcAmocO/L3iWbKfcDTu0=
Subject key identifier:   0A:0B:D9:9B:DE:15:13:1A:17:58:7C:F6:26:61:4F:6D:E0:20:9F:53
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       24DC3F
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/418f4bfc3ed69015f16764bdb4801084b9e37f13.roa
Signing time:             Thu 10 Aug 2023 18:00:37 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     52312
IP address blocks:        190.110.240.0/21 maxlen: 24
                          190.110.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415679 (0x24dc3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=418f4bfc3ed69015f16764bdb4801084b9e37f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:00:35:ec:a6:49:36:d8:90:09:87:c8:47:
                    18:63:b7:45:fb:3a:17:56:78:a6:13:d8:c4:0f:7c:
                    de:12:6c:e5:f8:0e:11:80:f2:7e:b9:5e:be:b9:f9:
                    1c:ac:08:d5:f7:07:36:8e:cd:d5:fa:83:c1:32:f9:
                    7f:83:d1:6d:6e:7f:d0:df:18:c3:ad:25:d8:77:45:
                    d1:89:54:0b:3c:53:84:a3:38:45:66:f9:c5:2b:67:
                    2d:11:dc:e4:11:b7:e3:d9:e9:a7:e2:89:82:78:06:
                    ce:db:ff:9e:64:b1:86:9a:1f:5b:fb:f3:9d:69:b9:
                    ce:a8:f7:4e:ea:c7:c8:40:2c:43:2a:ba:7a:00:0a:
                    48:84:80:06:1b:e0:d0:7f:c8:93:a9:82:9c:0b:53:
                    4c:6d:0e:ea:3e:5a:05:d3:09:66:80:83:d9:56:e9:
                    7c:d5:b3:bc:79:53:bf:a8:1b:32:27:75:c4:55:16:
                    43:f5:4c:d4:a2:29:77:47:18:05:3f:0b:2c:32:a3:
                    9f:d8:eb:96:8b:9a:e7:77:89:86:29:c9:fd:ef:33:
                    87:1a:68:b6:76:53:43:6b:38:b3:3b:ca:25:09:69:
                    da:c2:b8:85:e4:c5:e7:19:ec:69:05:2f:e5:20:ce:
                    92:59:d3:06:e1:75:9e:ac:67:02:65:a4:ea:bc:d7:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0B:D9:9B:DE:15:13:1A:17:58:7C:F6:26:61:4F:6D:E0:20:9F:53
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/418f4bfc3ed69015f16764bdb4801084b9e37f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.236.0/23
                  190.110.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:80:5a:6f:9f:62:66:e3:57:56:2c:9f:cc:4a:4b:01:cf:
         5d:6a:9f:84:91:b4:d5:a5:26:a5:16:80:24:8c:3d:2f:8a:ed:
         ae:46:69:f6:e3:03:7b:e0:02:c8:37:e9:e4:ef:de:ee:ec:fe:
         e9:5a:1c:19:0f:35:28:bc:70:b2:09:7f:77:30:d9:0b:bb:97:
         5e:52:87:37:cf:a9:75:de:0e:5b:af:b6:37:d9:43:db:13:99:
         59:2c:81:9b:b0:76:aa:7d:ad:75:8e:b4:08:d2:46:17:46:c2:
         be:b2:9f:5d:73:77:39:e6:2d:18:6a:ff:8e:14:69:b5:08:e5:
         9d:0b:7f:64:78:95:20:6d:0f:2e:75:c3:4e:94:8a:b0:a9:a6:
         a4:66:5b:2b:80:2c:5f:00:3b:0d:22:bb:3f:71:a4:b3:e0:20:
         50:06:5f:28:e1:41:fb:94:b4:da:94:a7:42:6d:75:36:87:32:
         25:35:33:61:9a:ba:79:f8:37:fb:a2:ae:94:36:58:d3:10:27:
         47:d0:40:de:4b:9f:d6:3c:7f:23:30:0a:15:53:88:d1:76:d4:
         aa:b6:5e:b8:5e:c8:5e:fa:f6:64:0f:b8:fb:c2:b8:b7:47:aa:
         a4:fc:7d:36:b4:ce:23:79:4c:c4:23:27:b9:7e:b6:ce:e1:38:
         89:df:ac:c9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJNw/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
YmJjNTZhMjVkNjY0YWMxOGEzMjgzMDk1NTBjMGY2MzI5ZWEzNjIwHhcNMjMwODA5
MTgwMDM1WhcNMjgwODEwMTgwMDM1WjAzMTEwLwYDVQQDEyg0MThmNGJmYzNlZDY5
MDE1ZjE2NzY0YmRiNDgwMTA4NGI5ZTM3ZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAla4ANeymSTbYkAmHyEcYY7dF+zoXVnimE9jED3zeEmzl+A4R
gPJ+uV6+ufkcrAjV9wc2js3V+oPBMvl/g9Ftbn/Q3xjDrSXYd0XRiVQLPFOEozhF
ZvnFK2ctEdzkEbfj2emn4omCeAbO2/+eZLGGmh9b+/OdabnOqPdO6sfIQCxDKrp6
AApIhIAGG+DQf8iTqYKcC1NMbQ7qPloF0wlmgIPZVul81bO8eVO/qBsyJ3XEVRZD
9UzUoil3RxgFPwssMqOf2OuWi5rnd4mGKcn97zOHGmi2dlNDazizO8olCWnawriF
5MXnGexpBS/lIM6SWdMG4XWerGcCZaTqvNfppQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFAoL2ZveFRMaF1h89iZhT23gIJ9TMB8GA1UdIwQYMBaAFOxWMP+ndQU1YGwb
0Xk0OuMXY94tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjhiYmM1
NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzQxOGY0YmZjM2VkNjkwMTVmMTY3NjRiZGI0ODAxMDg0YjllMzdmMTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMjhiYmM1NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAb5u7AMEA75u8DANBgkqhkiG9w0BAQsFAAOCAQEAHKqAWm+f
YmbjV1Ysn8xKSwHPXWqfhJG01aUmpRaAJIw9L4rtrkZp9uMDe+ACyDfp5O/e7uz+
6VocGQ81KLxwsgl/dzDZC7uXXlKHN8+pdd4OW6+2N9lD2xOZWSyBm7B2qn2tdY60
CNJGF0bCvrKfXXN3OeYtGGr/jhRptQjlnQt/ZHiVIG0PLnXDTpSKsKmmpGZbK4As
XwA7DSK7P3Gks+AgUAZfKOFB+5S02pSnQm11NocyJTUzYZq6efg3+6KulDZY0xAn
R9BA3kuf1jx/IzAKFVOI0XbUqrZeuF7IXvr2ZA+4+8K4t0eqpPx9NrTOI3lMxCMn
uX62zuE4id+syQ==
-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org