Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f772e7dbf22f6d3c66395d08f9a33e2aa84cc735.roa
File:                     f772e7dbf22f6d3c66395d08f9a33e2aa84cc735.roa (raw, json)
Hash identifier:          BlQ+zjOTP4w+IzDluggZiOpPDqoV3MK/zbXoFGsx2rY=
Subject key identifier:   83:52:FC:5F:91:E6:E3:35:DD:28:42:B3:2D:69:5F:D6:C6:8A:D6:BC
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       24E18C
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f772e7dbf22f6d3c66395d08f9a33e2aa84cc735.roa
Signing time:             Thu 10 Aug 2023 18:00:39 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     11514
IP address blocks:        190.110.253.0/24 maxlen: 24
                          190.114.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417036 (0x24e18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=f772e7dbf22f6d3c66395d08f9a33e2aa84cc735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:0d:27:7d:66:43:11:97:e7:db:32:34:6a:
                    9c:a1:49:9c:3e:43:77:62:f6:1f:67:95:de:6d:ff:
                    f3:06:2a:e8:b7:92:92:66:da:29:27:ad:f1:50:b6:
                    13:4d:5c:9b:39:16:90:4b:59:17:7b:42:b4:fd:4c:
                    0a:59:98:79:c2:94:6f:9b:a2:26:5d:6b:9b:7c:0e:
                    07:61:64:7b:e5:b6:f3:c5:3b:6d:da:3d:00:03:10:
                    93:76:3f:f1:d7:3f:a7:2d:5b:91:76:38:c3:86:88:
                    e1:91:3d:0c:44:6c:4c:15:8d:24:55:8d:8e:e0:0e:
                    cb:23:81:96:3d:0c:fe:f7:96:13:8f:3c:81:97:d8:
                    21:8a:52:ff:90:17:07:77:42:54:75:cd:54:e3:3c:
                    fa:e4:a1:bc:44:4f:d0:88:fc:23:ae:87:0d:fa:1b:
                    70:99:fa:9c:0f:8a:5a:f7:56:83:3e:60:16:a7:a2:
                    3d:aa:b2:33:b6:45:2c:cb:b0:a3:21:d6:fc:67:7b:
                    f8:22:8e:3c:0d:f7:80:5a:89:6e:5c:ac:d0:74:ab:
                    7d:00:a9:17:4e:ff:09:b7:16:c3:df:be:30:2c:63:
                    30:69:e9:4d:70:00:b8:ba:ce:80:16:51:1a:67:5e:
                    42:a5:12:71:df:71:88:c7:79:a4:d6:8a:ce:ae:fe:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:FC:5F:91:E6:E3:35:DD:28:42:B3:2D:69:5F:D6:C6:8A:D6:BC
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f772e7dbf22f6d3c66395d08f9a33e2aa84cc735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.253.0/24
                  190.114.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:d2:50:55:b6:af:19:14:c0:b7:59:6a:5e:fa:0c:6a:c7:
         02:43:9b:54:fe:7b:a8:f0:ee:5f:41:b4:2d:1e:4b:6b:82:b3:
         2a:17:64:6a:72:04:20:09:10:4a:f1:46:67:f1:89:29:b8:b4:
         13:48:ab:63:8d:1c:ee:88:cf:5c:94:12:47:66:68:b7:d9:21:
         60:21:47:af:09:03:9b:11:d6:57:f9:06:bc:5f:a8:37:34:d4:
         d4:e6:c8:f0:4e:c6:9f:ed:75:c5:d5:1f:58:94:9a:67:27:ea:
         a1:fb:91:d0:9b:ba:bb:20:d2:f4:b2:08:30:48:a0:f2:14:07:
         bd:3e:a2:82:e7:f7:02:3c:44:47:b5:8e:43:0e:46:b1:66:79:
         63:6b:dd:d6:fd:0b:04:c8:61:97:87:cf:e4:fc:34:03:4f:78:
         e0:85:35:e7:3e:87:b1:cc:e4:52:96:1a:50:ad:33:83:ee:0f:
         92:10:6f:25:90:86:35:76:82:df:e7:b5:51:23:7a:0b:e5:bf:
         2b:a5:05:3a:9c:13:3b:85:05:b7:b2:c9:a5:23:b8:25:97:2f:
         e5:d6:d9:1a:f0:54:08:6e:02:05:9d:25:bd:23:7b:c0:65:8a:
         0f:ab:78:b4:01:ba:94:d2:26:ed:73:d7:f8:4b:40:7c:04:47:
         b2:bc:61:38
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJOGMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
YmJjNTZhMjVkNjY0YWMxOGEzMjgzMDk1NTBjMGY2MzI5ZWEzNjIwHhcNMjMwODA5
MTgwMDM1WhcNMjgwODEwMTgwMDM1WjAzMTEwLwYDVQQDEyhmNzcyZTdkYmYyMmY2
ZDNjNjYzOTVkMDhmOWEzM2UyYWE4NGNjNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo/YNJ31mQxGX59syNGqcoUmcPkN3YvYfZ5Xebf/zBirot5KS
ZtopJ63xULYTTVybORaQS1kXe0K0/UwKWZh5wpRvm6ImXWubfA4HYWR75bbzxTtt
2j0AAxCTdj/x1z+nLVuRdjjDhojhkT0MRGxMFY0kVY2O4A7LI4GWPQz+95YTjzyB
l9ghilL/kBcHd0JUdc1U4zz65KG8RE/QiPwjrocN+htwmfqcD4pa91aDPmAWp6I9
qrIztkUsy7CjIdb8Z3v4Io48DfeAWoluXKzQdKt9AKkXTv8JtxbD374wLGMwaelN
cAC4us6AFlEaZ15CpRJx33GIx3mk1orOrv5OiwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFINS/F+R5uM13ShCsy1pX9bGita8MB8GA1UdIwQYMBaAFOxWMP+ndQU1YGwb
0Xk0OuMXY94tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjhiYmM1
NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2Y3NzJlN2RiZjIyZjZkM2M2NjM5NWQwOGY5YTMzZTJhYTg0Y2M3MzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMjhiYmM1NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL5u/QMEAL5yZzANBgkqhkiG9w0BAQsFAAOCAQEAPtLSUFW2
rxkUwLdZal76DGrHAkObVP57qPDuX0G0LR5La4KzKhdkanIEIAkQSvFGZ/GJKbi0
E0irY40c7ojPXJQSR2Zot9khYCFHrwkDmxHWV/kGvF+oNzTU1ObI8E7Gn+11xdUf
WJSaZyfqofuR0Ju6uyDS9LIIMEig8hQHvT6iguf3AjxER7WOQw5GsWZ5Y2vd1v0L
BMhhl4fP5Pw0A0944IU15z6HsczkUpYaUK0zg+4PkhBvJZCGNXaC3+e1USN6C+W/
K6UFOpwTO4UFt7LJpSO4JZcv5dbZGvBUCG4CBZ0lvSN7wGWKD6t4tAG6lNIm7XPX
+EtAfARHsrxhOA==
-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org