Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b3334b1129beb41821354d9120f86309e585b514.roa
File:                     b3334b1129beb41821354d9120f86309e585b514.roa (raw, json)
Hash identifier:          HIHMhA7lfrRdacHyBNuMTYtcUvKE9QfqZ1w3rAuFCMo=
Subject key identifier:   A0:A5:7F:84:68:98:23:6B:49:32:51:91:AE:BB:F2:79:0F:52:B7:9A
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       2406D1
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b3334b1129beb41821354d9120f86309e585b514.roa
Signing time:             Mon 17 Jul 2023 16:08:53 +0000
ROA not before:           Sun 16 Jul 2023 16:08:49 +0000
ROA not after:            Thu 17 Jul 2025 16:08:49 +0000
asID:                     271914
IP address blocks:        190.110.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361041 (0x2406d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Jul 16 16:08:49 2023 GMT
            Not After : Jul 17 16:08:49 2025 GMT
        Subject: CN=b3334b1129beb41821354d9120f86309e585b514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:41:ac:d5:50:a1:1b:af:a2:b1:66:e3:d8:
                    83:06:3f:dc:49:32:34:39:fe:c4:d1:ed:1b:37:de:
                    80:ae:1d:46:6e:2e:cc:1a:2e:be:b4:dd:c9:89:d2:
                    5b:54:ad:28:45:bc:b3:58:be:d6:85:de:67:d2:b6:
                    68:4f:18:08:f0:02:0f:cb:07:8c:e4:1e:39:7f:d0:
                    3b:e7:2a:54:06:36:28:b5:f8:c7:1e:fc:11:00:c3:
                    c5:80:68:26:24:58:17:9d:cf:65:95:b3:1d:56:81:
                    f0:87:1b:d6:38:cf:02:5b:69:06:a7:d3:a1:25:9d:
                    8a:69:a5:fa:b4:c4:ed:48:04:aa:f4:77:d0:fd:0b:
                    62:33:96:56:88:4e:22:dd:ed:01:12:7e:27:58:12:
                    e8:5e:3a:cd:dc:43:f1:13:54:b6:7b:7c:6d:eb:ba:
                    37:ce:96:e4:cc:bc:e9:b7:f6:29:63:9d:91:dc:8f:
                    57:a0:7a:d6:e2:4b:06:b0:27:35:1f:d6:cc:9e:f7:
                    3d:35:3b:77:52:3b:4b:8f:1b:06:5f:49:66:8d:84:
                    f1:f0:9d:54:ad:6d:6e:21:53:0f:3b:dd:46:b8:a1:
                    bb:80:90:87:dd:f2:3f:03:4f:66:1b:9d:b5:ce:85:
                    76:04:65:b4:90:93:14:d1:05:41:3f:49:9e:99:bb:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A5:7F:84:68:98:23:6B:49:32:51:91:AE:BB:F2:79:0F:52:B7:9A
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b3334b1129beb41821354d9120f86309e585b514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:33:d9:0e:d1:a8:d2:77:62:81:6f:f5:fa:92:ba:88:e6:ec:
         96:bc:22:39:36:1c:61:ae:bc:b8:ac:bb:f2:e9:8e:1e:eb:d5:
         7a:cc:b6:f5:60:24:4b:5e:41:79:b5:18:9f:ab:95:3c:8d:ce:
         ba:ca:b4:33:46:79:04:f6:30:ad:b4:e8:7e:85:14:a0:a6:3d:
         43:42:b6:a6:3d:ad:fb:a8:ad:67:11:63:c6:d4:18:df:ab:65:
         64:5c:9f:bd:fa:e5:48:3a:b0:e5:d2:f5:ff:ed:38:6c:d2:8a:
         6a:79:2f:62:68:b4:2f:23:33:d5:b4:a1:82:47:6c:62:87:61:
         42:4e:2d:1e:16:1e:32:6b:d3:a4:62:27:75:bc:f0:d2:eb:d9:
         eb:b6:d4:4c:7e:d1:54:bd:bc:0b:10:c8:f6:72:8e:24:4c:f8:
         4c:59:71:f4:7a:3c:3a:69:5c:d1:f9:d6:00:4f:1f:9d:42:c7:
         42:9a:20:82:2e:1e:24:87:de:b2:95:08:ad:47:91:e2:3d:2b:
         30:d8:e4:08:1e:23:1f:6a:67:41:b7:0f:59:75:94:d3:14:15:
         25:1f:be:6f:c1:95:b3:ba:c6:7e:4e:1c:e3:c5:bc:b7:04:80:
         1d:1d:ad:0e:db:e5:92:67:1c:db:59:44:9b:f2:0d:93:e2:d4:
         3b:2d:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:46:42 2023 by rpki-client on console-ams.rpki-client.org