Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/328db06c50329b03fa32c029a89c95a342153033.roa
File:                     328db06c50329b03fa32c029a89c95a342153033.roa (raw, json)
Hash identifier:          eENil0GMtjSXHX1hcRhRmq/c+duBOveojlO1hkwFDLQ=
Subject key identifier:   DC:65:3F:C2:BF:6C:C8:06:F7:80:0D:17:3A:D6:13:5E:09:4E:DE:5A
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       2514E0
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/328db06c50329b03fa32c029a89c95a342153033.roa
Signing time:             Thu 10 Aug 2023 18:00:54 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     10697
IP address blocks:        200.123.48.0/24 maxlen: 24
                          200.50.160.0/23 maxlen: 24
                          200.50.164.0/24 maxlen: 24
                          200.50.168.0/24 maxlen: 24
                          200.50.173.0/24 maxlen: 24
                          2800:820::/32 maxlen: 48
                          2800:820:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2430176 (0x2514e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=328db06c50329b03fa32c029a89c95a342153033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:ce:a0:02:24:a9:60:7c:d8:cb:a9:c6:62:
                    ff:8b:d9:73:ee:03:64:68:61:94:03:7d:9c:71:87:
                    de:b0:b7:01:a8:93:25:dc:7c:87:0a:d9:e5:eb:08:
                    e6:46:e5:16:71:c7:db:8e:b1:71:7a:dc:b9:a6:d8:
                    3b:b4:2a:3c:f8:e0:fc:db:a2:8f:77:44:0a:2f:8a:
                    08:be:cb:b5:f0:68:9d:f7:47:62:eb:17:66:7b:81:
                    30:61:17:79:7f:0f:25:77:5b:ba:13:31:95:9a:8a:
                    30:af:11:5d:3b:c1:e3:22:dc:71:b7:b3:ac:cc:10:
                    b8:f6:57:ad:52:22:81:36:a3:f4:af:c2:42:43:ff:
                    66:78:81:85:a2:fc:84:0a:a6:72:56:36:89:ec:85:
                    71:f9:de:8f:6d:00:03:38:6b:f2:8a:b9:43:98:3e:
                    6c:b9:99:98:17:fd:54:f4:5f:50:a0:67:ae:77:2a:
                    fc:01:94:f0:b6:20:88:06:bf:29:d5:fe:d6:b4:ed:
                    24:06:e8:63:fe:87:05:b7:d7:a7:fc:56:c7:20:2f:
                    83:f8:ed:42:d8:37:ea:1d:67:5a:51:b7:28:80:47:
                    be:cd:dd:1f:27:e4:71:03:89:7b:81:a2:e3:d6:47:
                    7f:d0:89:a3:eb:c4:b0:b7:40:6c:91:4b:64:9a:f5:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:65:3F:C2:BF:6C:C8:06:F7:80:0D:17:3A:D6:13:5E:09:4E:DE:5A
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/328db06c50329b03fa32c029a89c95a342153033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.160.0/23
                  200.50.164.0/24
                  200.50.168.0/24
                  200.50.173.0/24
                  200.123.48.0/24
                IPv6:
                  2800:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:61:89:76:29:27:07:81:8a:0a:77:1a:33:a2:cb:55:b5:
         0c:1b:bd:95:4d:45:2d:fa:2f:68:fa:4e:63:27:0c:1f:6a:c9:
         75:64:d3:1d:a0:dd:e0:43:b8:e1:53:7e:ca:1d:e4:d6:19:dd:
         7e:bf:7e:65:f9:31:55:53:28:e6:dc:dc:60:04:f8:2c:6f:4b:
         3b:3e:3e:17:15:7b:8d:a9:ad:d4:65:73:c7:2e:6b:0e:ed:94:
         2a:f2:ed:f9:d0:50:c0:54:cf:a9:ee:28:35:7d:73:d8:fd:8f:
         8c:d8:c7:0a:15:80:ac:59:a2:85:a0:8d:35:60:cb:df:3c:ce:
         64:a6:e8:37:8e:f2:d3:2d:e2:8c:c5:ee:01:7b:b3:5d:a2:0a:
         8f:c7:36:cd:44:b3:26:3d:cd:13:ac:60:cd:37:0e:cb:43:47:
         a8:0f:65:ec:49:b8:cf:fd:75:6c:81:f9:9f:88:f7:f4:5a:10:
         de:4d:ac:41:98:ad:e3:e9:84:04:43:4f:dc:a5:cf:97:56:27:
         5e:e0:c9:c8:d3:3f:f6:01:64:52:6d:d8:5f:7f:bf:51:09:3b:
         d2:02:ff:4b:06:f9:ae:e5:7f:4c:1b:b9:92:22:da:ef:84:cf:
         43:8b:97:a1:72:f4:a9:da:46:f1:b3:0a:0e:7c:5d:10:73:1e:
         84:c5:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org