Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/aef39531375a0aed0a423f1e0d4c14c06b5a0f47.roa
File:                     aef39531375a0aed0a423f1e0d4c14c06b5a0f47.roa (raw, json)
Hash identifier:          +6D4IFlbRzaHzfeKV2EEJYiFpThUGEA/ft3p9SqrnJE=
Subject key identifier:   83:9E:12:7D:73:41:C4:0B:8F:D5:B3:86:D5:D0:35:55:52:DC:9A:19
Certificate issuer:       /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial:       27757B
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/aef39531375a0aed0a423f1e0d4c14c06b5a0f47.roa
Signing time:             Tue 07 Nov 2023 16:00:45 +0000
ROA not before:           Tue 07 Nov 2023 16:00:38 +0000
ROA not after:            Tue 07 Nov 2028 16:00:38 +0000
asID:                     272903
IP address blocks:        190.110.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2585979 (0x27757b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
        Validity
            Not Before: Nov  7 16:00:38 2023 GMT
            Not After : Nov  7 16:00:38 2028 GMT
        Subject: CN=aef39531375a0aed0a423f1e0d4c14c06b5a0f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:d4:9a:14:29:f0:a9:50:f4:83:43:6d:ba:
                    2b:2d:5c:9e:b3:1e:4c:49:33:c2:3d:0a:6c:09:0a:
                    8a:58:0f:71:88:5c:71:e9:08:87:d4:2b:07:cd:52:
                    ae:92:04:bb:87:3c:ec:e1:26:0c:cf:c9:b9:0c:fa:
                    f4:9e:1c:96:20:92:f1:fe:90:ee:38:61:04:21:15:
                    27:32:50:b4:76:73:74:d2:b3:63:c6:3d:bb:28:5b:
                    03:6b:7a:64:e1:3f:67:80:61:30:7f:1f:d1:71:c9:
                    d8:c2:6e:1a:2e:5a:c0:87:d9:81:41:0a:7e:a0:6d:
                    e2:1f:08:18:0f:0d:b1:2d:83:4e:92:7a:e8:7d:0e:
                    c4:5e:b7:c4:8a:ae:32:db:d5:c0:5c:e9:03:c7:91:
                    65:8f:de:0c:6b:75:c2:f3:fc:cb:23:cd:7f:a5:f1:
                    59:35:32:ec:b0:9c:98:b3:67:34:d9:5f:10:93:ee:
                    34:53:07:68:31:2d:dc:82:62:49:50:49:a4:71:17:
                    a5:6e:a9:ff:04:69:00:90:aa:09:dd:c2:7d:6f:ae:
                    9f:0d:ac:b3:19:9c:cb:0f:18:b6:15:78:bf:27:dd:
                    a5:a9:41:51:19:90:5b:bb:ee:5f:59:0e:10:d8:de:
                    87:f0:86:d3:ff:35:40:94:5f:f2:15:47:a0:04:15:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9E:12:7D:73:41:C4:0B:8F:D5:B3:86:D5:D0:35:55:52:DC:9A:19
            X509v3 Authority Key Identifier:
                keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/aef39531375a0aed0a423f1e0d4c14c06b5a0f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:24:df:83:40:34:74:e4:91:1b:e4:76:c0:d1:61:88:80:97:
         ba:f0:c2:43:4d:77:1c:23:39:2c:ce:71:18:7d:57:1d:cb:dd:
         af:ce:47:27:ef:1f:a5:e7:72:55:9e:60:2f:b9:98:bf:b5:e8:
         78:3f:f2:0b:4d:1c:5b:39:fd:a0:8f:e4:16:bd:f4:2d:2a:6d:
         56:6c:06:63:65:d8:9a:94:ab:c3:50:7b:d1:b8:cd:71:89:04:
         8f:a2:15:ef:5c:ce:80:1b:46:2d:86:cc:c5:f6:0f:33:3a:89:
         23:74:d4:75:eb:94:50:57:7e:09:ec:82:da:d0:01:48:97:6d:
         c4:39:67:e7:88:d5:30:ac:15:67:3c:b0:81:7a:5f:55:36:4e:
         ad:2c:28:58:66:db:6a:71:25:00:56:5f:78:fe:aa:68:ff:74:
         a6:fb:bb:23:3c:29:da:00:79:bf:69:1e:6a:3d:31:2d:21:28:
         95:53:3a:17:e9:23:c6:4c:64:e2:e8:db:91:70:34:b4:f5:86:
         56:80:c8:69:f7:03:54:2b:df:cf:34:c0:41:8b:0f:e3:68:0e:
         2f:94:ad:9a:ee:ae:6d:83:f3:c3:06:a5:d1:3a:6d:9f:be:85:
         45:c0:49:9f:e9:99:be:32:93:cb:a0:fa:b0:10:fd:fc:c4:8d:
         26:bb:fb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:33 2023 by rpki-client on console-fra.rpki-client.org