Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f3b668841a31139ce99a5c813ed625f8dd39c2bf.roa
File:                     f3b668841a31139ce99a5c813ed625f8dd39c2bf.roa (raw, json)
Hash identifier:          94x4DJuHn+KL91LlcK/tbTcP6jA1dTb7ZrDtAlIhHyk=
Subject key identifier:   66:6C:8A:77:38:FC:52:A0:C2:8B:25:3B:F2:89:CF:6D:E3:84:D0:F5
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1E3F67
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f3b668841a31139ce99a5c813ed625f8dd39c2bf.roa
Signing time:             Fri 02 Dec 2022 21:12:22 +0000
ROA not before:           Thu 01 Dec 2022 21:03:02 +0000
ROA not after:            Mon 02 Dec 2024 21:03:02 +0000
asID:                     271914
IP address blocks:        190.110.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982311 (0x1e3f67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Dec  1 21:03:02 2022 GMT
            Not After : Dec  2 21:03:02 2024 GMT
        Subject: CN=f3b668841a31139ce99a5c813ed625f8dd39c2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:9e:40:7e:36:51:b4:4f:e5:1e:ef:9d:ac:
                    41:10:a5:a1:66:cc:e6:f0:a3:6a:e2:20:14:36:0e:
                    11:13:0b:93:6c:95:51:17:a7:9e:a8:5b:e3:5e:62:
                    02:7b:56:4e:17:4b:f1:dd:9e:eb:48:38:91:77:6b:
                    94:0c:3a:a2:80:8f:b0:f6:07:3c:ea:78:77:da:a6:
                    9a:c5:6b:3f:0e:32:e2:95:b1:11:a0:04:ec:77:36:
                    85:94:0c:72:01:2a:9e:8d:6e:a8:9f:f8:92:e5:ec:
                    67:59:c2:b5:6c:5e:11:5c:c3:1f:c2:18:98:44:aa:
                    c0:78:11:06:02:20:3c:59:fd:3c:3a:4b:ca:d1:a1:
                    cd:ec:5d:57:89:8f:db:60:0c:04:31:3a:b9:16:42:
                    ad:25:4f:c0:e4:8f:94:ae:4b:84:15:f4:12:8e:e4:
                    06:83:dd:a6:86:38:73:21:dd:c0:28:a3:21:27:7c:
                    fb:c8:f9:73:91:2a:e2:14:70:8d:0a:5a:7a:aa:ab:
                    c6:d6:d3:03:ed:9d:69:d8:fb:e1:c5:62:b9:ce:e6:
                    c2:b4:8d:78:f6:c6:f6:9f:0c:5f:0e:b5:ec:c7:18:
                    da:ef:29:0a:df:f5:29:6c:bb:94:79:4f:e7:00:09:
                    22:9b:6d:20:6a:fb:0c:f3:a1:3d:fb:68:6f:bf:7e:
                    84:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6C:8A:77:38:FC:52:A0:C2:8B:25:3B:F2:89:CF:6D:E3:84:D0:F5
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f3b668841a31139ce99a5c813ed625f8dd39c2bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:45:bf:fd:ec:cd:52:8a:67:95:f8:80:af:5b:d0:6a:77:cd:
         2f:b3:7c:40:70:37:93:02:ec:0f:57:30:91:79:7c:2d:cb:a3:
         f9:34:cf:65:c6:87:6a:ac:cd:cc:ce:20:ab:d8:60:ce:62:c0:
         97:74:4f:0a:e6:a0:0f:71:0f:21:47:09:29:17:44:4f:f2:1d:
         c9:a7:18:0a:e0:37:0a:13:13:8e:34:c1:42:80:ab:36:24:6b:
         2b:e8:0d:55:7c:6d:87:10:61:c7:b0:b4:a5:49:8b:19:53:83:
         1b:02:c4:09:da:d7:db:2d:f0:dd:7f:b2:83:ee:38:be:1f:5c:
         70:50:a8:3d:49:74:74:ae:ed:26:b0:95:cc:87:70:90:66:88:
         2d:ba:a6:1e:81:b4:2d:24:30:a8:62:ab:b5:08:7d:e2:a7:d7:
         ed:ff:5c:1d:e3:d2:2e:1d:4f:1d:40:da:6b:ca:a2:2f:cc:55:
         7f:f4:38:77:0e:2d:0d:31:b2:24:91:55:13:dc:7d:e0:61:d7:
         83:a8:36:b1:f2:08:b1:ea:37:4f:49:99:9d:f6:c5:43:f3:04:
         7a:5c:e6:33:35:5a:ea:ef:1c:eb:b6:80:4f:25:5b:fe:bb:d2:
         88:22:7c:c0:bc:3e:09:d1:37:f8:b5:59:33:eb:7b:06:51:9e:
         a7:8e:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org