Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/819332f34566e1143f777ee61741bed4e0a3fd23.roa
File:                     819332f34566e1143f777ee61741bed4e0a3fd23.roa (raw, json)
Hash identifier:          o976LMRSHFne9sQ2Ook9u8BwXbb+PBvCdAyE9nubr5c=
Subject key identifier:   F8:A4:B3:9F:F1:5D:98:58:00:3E:21:B6:2F:EF:70:2A:F0:30:D9:A6
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       240ABF
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/819332f34566e1143f777ee61741bed4e0a3fd23.roa
Signing time:             Mon 17 Jul 2023 16:08:54 +0000
ROA not before:           Sun 16 Jul 2023 16:08:49 +0000
ROA not after:            Thu 17 Jul 2025 16:08:49 +0000
asID:                     20207
IP address blocks:        190.110.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362047 (0x240abf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Jul 16 16:08:49 2023 GMT
            Not After : Jul 17 16:08:49 2025 GMT
        Subject: CN=819332f34566e1143f777ee61741bed4e0a3fd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:e2:3c:19:41:77:7a:50:47:78:a7:8f:b7:
                    42:97:15:8c:e3:e6:e7:f5:6c:d2:84:d8:7a:3c:01:
                    d8:7c:be:41:3c:e7:49:47:13:45:50:db:92:b1:c0:
                    31:7b:ba:d4:32:cc:ed:bf:d9:58:0f:b9:8e:31:11:
                    12:9a:3c:7c:61:fb:49:f7:13:0c:9c:01:49:c3:bb:
                    0d:83:df:2d:82:85:e0:cc:d6:21:45:bc:98:7b:f7:
                    c1:41:b9:ba:c4:ef:bd:c1:a4:b3:a1:8d:a7:f2:85:
                    61:72:51:f2:5f:7c:82:bf:55:1c:db:8d:f4:26:19:
                    5b:7b:e7:5e:e3:48:af:db:02:c6:d3:57:65:c8:32:
                    ec:13:f5:3a:88:7f:4a:9f:b9:98:81:d6:51:eb:c7:
                    fe:17:25:35:e4:75:bf:15:fe:3d:8a:43:31:b3:f9:
                    24:b9:67:f5:98:d7:ce:c2:68:25:c3:c7:ad:b1:79:
                    ae:04:59:36:3f:0e:38:95:39:2f:1a:50:85:01:2f:
                    37:d9:94:c7:7b:50:80:8b:95:a3:bf:83:10:7d:8b:
                    8c:6a:f2:91:bc:9a:82:29:4c:ef:7d:9a:6b:4f:ee:
                    95:f8:68:7b:07:bf:05:22:2a:39:e3:51:83:8b:84:
                    e2:cf:66:2c:3d:5f:b8:35:aa:2f:e9:c0:c1:b1:9a:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A4:B3:9F:F1:5D:98:58:00:3E:21:B6:2F:EF:70:2A:F0:30:D9:A6
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/819332f34566e1143f777ee61741bed4e0a3fd23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:ff:f8:6c:a0:fe:c3:1c:17:11:ca:33:ff:d2:cf:98:08:
         e1:24:8b:f3:1b:09:75:6a:84:fb:dd:7f:93:52:be:61:16:39:
         77:97:a1:b9:fd:68:9d:e8:37:77:73:c7:68:b4:fc:8c:27:25:
         90:06:ff:80:b9:eb:db:93:f6:33:08:fb:ed:82:64:ae:51:26:
         48:59:30:55:77:cd:ce:1b:4b:e2:d8:4c:76:ed:84:76:69:4d:
         30:9a:cc:da:fb:8a:38:50:69:02:b3:a1:20:13:46:1c:17:11:
         e5:fd:eb:f6:a0:aa:9f:89:40:78:9f:f0:35:3a:c9:3a:1c:a0:
         a5:87:4a:85:b8:65:f0:6f:3e:d7:55:60:12:2a:ec:74:e7:e2:
         96:0f:3b:5b:b4:ef:4c:76:2c:0c:cc:df:c6:5a:82:f3:e7:62:
         c9:a0:9f:c1:f5:80:99:a1:13:e0:4a:01:63:b2:09:52:30:41:
         06:a9:b9:1a:9f:f2:f7:25:0e:6b:9f:c3:17:fb:7f:d2:25:8e:
         5f:4d:22:0c:2a:82:36:cf:21:de:b9:02:d6:71:e9:5e:c3:e7:
         24:71:5f:37:e4:6c:a2:05:3c:19:87:ca:4e:00:a0:79:14:2a:
         d6:26:f7:3f:59:83:dd:74:8b:07:c4:f7:f2:69:57:a7:40:4f:
         c0:2d:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:21:06 2023 by rpki-client on console-fra.rpki-client.org