Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/40294ef7b37f7cbff93bd1738111fdb909b0c00a.roa
File:                     40294ef7b37f7cbff93bd1738111fdb909b0c00a.roa (raw, json)
Hash identifier:          fsMR9u3ETHl6yvR3tcjwm2tdEz1Y7KGrLXbLrJ+7E/I=
Subject key identifier:   D0:D9:19:C0:5C:C6:31:4F:BE:BA:69:51:A1:28:63:B1:75:D3:A2:CC
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       2504E9
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/40294ef7b37f7cbff93bd1738111fdb909b0c00a.roa
Signing time:             Thu 10 Aug 2023 18:00:48 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     52328
IP address blocks:        200.123.52.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426089 (0x2504e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=40294ef7b37f7cbff93bd1738111fdb909b0c00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:2e:4d:12:20:85:49:e3:a1:83:08:ad:e8:
                    2e:d9:d0:68:70:40:58:a7:1a:1a:80:8d:dc:59:0f:
                    2d:d9:1b:27:54:a0:70:b7:de:62:cc:09:5a:9a:42:
                    76:ac:1c:b2:33:ec:32:fa:9a:7c:b3:43:eb:e4:93:
                    25:16:8e:44:de:dd:02:e6:dc:01:1a:81:6c:86:26:
                    17:84:bc:29:a8:f8:e2:f5:55:bd:87:ea:7e:00:04:
                    c2:d3:0f:2c:0a:68:56:c9:45:06:da:42:c7:e2:0f:
                    30:d8:f2:87:05:c8:79:e6:2e:d7:ab:f0:3d:17:9b:
                    0e:80:93:b3:6c:3c:2d:b3:d7:2c:86:77:86:b9:6a:
                    24:3e:a7:be:d7:c4:eb:5f:15:19:e2:2a:6c:91:fd:
                    3f:69:eb:9b:12:93:c9:58:c4:9d:34:4a:b6:0a:de:
                    a0:13:72:fa:13:dd:1e:a7:2b:a0:70:96:df:f9:ad:
                    11:7e:6c:64:5a:31:ef:d1:d0:30:7d:99:05:3b:e1:
                    6d:2f:44:7e:e7:fa:78:fd:dc:ad:52:00:81:10:36:
                    4d:70:8c:1c:db:57:f4:6c:d6:24:2b:5d:5a:6d:66:
                    02:03:17:18:0c:cb:16:c7:42:20:8b:20:42:90:dc:
                    fb:2d:71:80:6a:ee:c6:e1:43:eb:84:29:d6:e3:80:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D9:19:C0:5C:C6:31:4F:BE:BA:69:51:A1:28:63:B1:75:D3:A2:CC
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/40294ef7b37f7cbff93bd1738111fdb909b0c00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:6d:66:6b:b6:69:51:1a:09:61:ae:33:77:c9:70:de:f5:
         f4:96:5b:8e:30:be:92:e6:7f:05:68:e4:bf:e1:25:dc:c7:ce:
         1d:88:50:56:02:5c:de:e9:3e:17:47:05:36:d6:8b:8f:d6:33:
         fe:cb:4c:e7:20:8c:dd:da:a6:06:1d:60:ea:71:a8:a5:99:0c:
         c9:fd:f1:11:b6:8c:87:03:f4:89:83:af:36:0e:c5:af:8b:99:
         38:13:69:8a:e1:88:b1:dc:ae:fb:fb:c3:5e:f0:14:85:11:d5:
         98:31:96:f1:3c:ff:d5:26:f2:b7:6e:25:ac:d5:15:68:e3:7d:
         a6:bf:fe:6f:28:6a:02:60:d1:99:45:ec:1a:95:27:08:e1:8e:
         e0:76:1f:cb:53:76:0b:fd:15:70:6e:2e:6f:1c:14:6f:b4:98:
         de:75:dd:89:33:60:74:f0:55:ae:07:ae:f8:d6:98:5b:4e:56:
         0b:fa:2e:69:1a:f3:65:53:ae:cd:eb:97:04:86:95:86:6f:b3:
         8d:60:0e:1e:0f:5e:59:32:7a:1b:82:79:90:68:a1:5c:8f:d0:
         30:55:26:fa:92:69:1f:cf:84:5b:ab:83:2b:88:6e:14:3f:ba:
         cb:4d:69:27:2d:a1:8b:b7:51:ba:71:e0:39:0e:ca:7b:43:3d:
         04:f6:cf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org