Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f403ac19ca72c1ba3bfe0612841c0fc0d93ffbd3.roa
File:                     f403ac19ca72c1ba3bfe0612841c0fc0d93ffbd3.roa (raw, json)
Hash identifier:          +N2SwzWBQ7O2jLLGkVjTjnUaT2ZtCjGRICG/7fbGgCA=
Subject key identifier:   43:6C:DE:79:DA:C0:85:09:70:39:CE:F3:AA:AC:8D:57:F5:2C:F2:36
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1D80B3
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f403ac19ca72c1ba3bfe0612841c0fc0d93ffbd3.roa
Signing time:             Thu 10 Nov 2022 18:56:48 +0000
ROA not before:           Wed 12 Oct 2022 02:56:01 +0000
ROA not after:            Mon 14 Oct 2024 02:56:01 +0000
asID:                     272903
IP address blocks:        190.110.254.0/23 maxlen: 23
                          190.110.254.0/24 maxlen: 24
                          190.110.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933491 (0x1d80b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Oct 12 02:56:01 2022 GMT
            Not After : Oct 14 02:56:01 2024 GMT
        Subject: CN=f403ac19ca72c1ba3bfe0612841c0fc0d93ffbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:47:e9:56:4c:da:b9:b3:88:68:64:f6:d3:
                    56:8c:53:81:0e:c6:72:30:50:ef:78:a9:38:c8:09:
                    b9:78:00:f3:32:fd:17:57:7f:93:da:32:72:66:c9:
                    46:3d:3e:ed:f5:7d:f2:d0:16:be:92:28:cd:7e:36:
                    b8:81:d2:7c:58:78:aa:fe:d6:ae:44:3d:ab:76:fc:
                    b5:3f:0a:31:73:ef:a9:c6:09:cc:bc:fa:f3:97:ce:
                    e5:ad:c2:51:94:cb:49:1f:02:2b:77:2e:c5:e2:4d:
                    4b:15:57:07:7e:7a:79:3b:d0:18:68:ed:da:8d:f6:
                    ad:e1:c8:35:93:82:24:81:43:91:98:89:fc:b5:3f:
                    48:47:f0:05:85:ca:2f:dc:c3:5f:a5:55:70:a9:15:
                    31:47:3b:e8:75:a6:be:d2:b6:90:b3:13:0d:45:72:
                    16:f1:29:e3:fa:25:96:ff:f2:fd:4e:2c:0b:d2:a9:
                    f0:99:ca:7a:4a:ff:e2:fc:97:b9:94:88:9f:f0:56:
                    22:df:8d:65:dd:47:c9:87:d8:9b:80:88:a3:fe:a1:
                    be:68:46:e0:74:34:2a:da:e3:fc:86:d4:40:83:07:
                    ef:6b:46:b6:c1:fc:9c:50:55:8f:69:48:17:af:fd:
                    fc:29:75:eb:bb:fa:08:ec:7b:94:b3:3c:08:53:89:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6C:DE:79:DA:C0:85:09:70:39:CE:F3:AA:AC:8D:57:F5:2C:F2:36
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f403ac19ca72c1ba3bfe0612841c0fc0d93ffbd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:b0:94:8e:98:7d:95:84:f7:8d:43:ea:6b:15:ed:8d:ed:94:
         86:fd:51:99:ee:1b:f5:0b:eb:87:b6:f8:05:36:c8:58:10:98:
         38:95:fe:63:f0:3d:39:42:61:3c:67:ef:e8:f3:d7:ac:9d:af:
         88:6c:e7:3e:e6:f3:fa:5b:d6:37:b8:ba:89:02:a2:ab:dd:1b:
         eb:e0:3e:4b:8b:a3:71:91:ce:67:80:a7:fd:9f:f3:db:48:09:
         88:77:84:ad:e1:2c:c6:27:e2:68:84:35:47:b3:b6:4a:6c:d5:
         2c:3a:86:a6:79:3b:4b:ab:2f:63:ee:8a:0f:76:02:9f:3e:7f:
         d9:8b:6f:83:05:68:62:e2:61:dc:45:4f:c0:c4:e5:8a:e6:63:
         5b:67:21:61:d5:28:78:a1:36:85:ef:cd:31:39:ab:e1:a7:21:
         ee:d6:dc:bd:1d:34:92:2d:89:04:ab:eb:6b:1d:20:3d:b4:39:
         2d:28:58:35:be:5c:e7:04:b7:18:11:4b:55:ae:84:ec:00:2b:
         c6:6a:d5:0a:f5:06:5c:d7:0a:3f:1a:02:14:93:62:e7:b7:18:
         45:fe:7b:26:18:e0:af:62:2b:18:57:7f:f6:13:72:e0:1a:c4:
         29:70:d8:55:d0:60:59:71:57:83:06:21:7f:7d:fe:f5:c1:8e:
         b9:fe:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org