Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/40cd9323243fc7bca04c6ec8e989a83c8b13c5c2.roa
File:                     40cd9323243fc7bca04c6ec8e989a83c8b13c5c2.roa (raw, json)
Hash identifier:          hwY/kOs2ljv8ERMO8/crOYM7YH5oHg2yn0YneETOTGM=
Subject key identifier:   75:39:0A:D3:5C:6C:62:05:A2:61:12:FE:BE:CC:A1:C4:BF:9F:F1:38
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       2506E4
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/40cd9323243fc7bca04c6ec8e989a83c8b13c5c2.roa
Signing time:             Thu 10 Aug 2023 18:00:49 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     264716
IP address blocks:        200.123.62.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426596 (0x2506e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=40cd9323243fc7bca04c6ec8e989a83c8b13c5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:53:ee:b3:11:ea:e9:2a:f1:86:93:24:6c:22:
                    34:3d:8c:ae:52:af:3c:03:8b:9e:1d:58:c7:7c:c8:
                    4b:14:eb:f6:47:c0:c4:b4:c0:76:03:66:ef:e9:93:
                    48:4f:d6:56:c3:a5:ed:e7:ec:52:08:e9:8a:1d:72:
                    cd:52:8f:fb:f8:8b:01:88:fd:72:79:c6:fb:46:b7:
                    f6:02:77:c2:ff:61:b9:11:d2:d2:9e:86:c8:66:21:
                    83:d6:00:49:36:48:57:2f:9d:ae:2b:e2:64:9d:5b:
                    38:27:3c:17:40:ab:06:3c:8e:fe:74:dd:c0:e9:84:
                    11:d6:cc:02:25:b0:49:37:7f:8e:91:89:7c:c0:a5:
                    ac:ca:b8:17:e4:50:08:d6:bd:ea:b6:18:f9:28:c0:
                    60:06:e2:9f:a8:59:c5:b1:c0:5b:aa:6c:3a:52:00:
                    29:88:9d:25:44:ef:fa:d3:92:c5:76:10:54:84:6c:
                    07:c9:10:6c:94:17:be:24:a6:54:d6:df:d9:85:1d:
                    64:b5:6a:f2:73:02:c6:e5:5b:ef:b7:4e:e9:1c:49:
                    9f:95:3e:53:66:7d:eb:e7:30:c1:6d:1c:74:fb:a3:
                    ff:2c:e7:c6:46:12:36:16:5b:22:97:ba:b9:61:d5:
                    17:89:01:95:99:7d:0d:c0:3b:1c:e9:4b:40:7a:40:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:39:0A:D3:5C:6C:62:05:A2:61:12:FE:BE:CC:A1:C4:BF:9F:F1:38
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/40cd9323243fc7bca04c6ec8e989a83c8b13c5c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:bc:94:95:48:94:56:31:b7:ca:c2:e5:ca:e1:5e:d9:f8:9e:
         f8:f3:f2:dd:9a:0f:96:3f:b2:12:70:0e:80:64:b7:8b:89:a6:
         cc:f6:8b:36:dc:e3:37:3f:5e:6d:d7:75:ca:2c:bd:3a:51:c5:
         10:68:1c:c2:89:64:cf:2f:6e:e3:9a:80:43:60:d8:78:b0:fc:
         8f:0d:64:0a:5c:a1:4f:53:f0:66:97:ff:e0:fe:ef:e8:ca:0b:
         f3:5f:50:bb:3e:9e:76:d7:4c:e3:4a:dc:c9:44:c6:2a:89:71:
         07:8c:3a:4a:49:1d:c5:6b:a3:3e:22:61:22:dc:ec:56:15:fc:
         40:8c:53:0e:b7:78:04:88:72:76:07:bc:58:8e:7b:75:e4:bb:
         fe:b8:b2:1b:65:d8:64:a7:22:a2:84:44:d8:79:a3:97:5c:08:
         0a:ad:dc:79:00:5a:7f:11:d3:b4:7d:6f:fe:c0:3c:6e:c5:e6:
         f9:7b:24:94:bb:84:9d:d7:d3:dd:b6:60:30:12:ef:fa:7d:7b:
         9b:87:2a:1f:89:b2:a1:7b:85:57:77:0b:4b:8d:1e:eb:11:e2:
         bb:f6:6b:19:20:35:ee:6c:e4:cb:cf:55:5a:ac:71:c6:0b:2e:
         ab:c0:9b:96:bb:30:e9:6d:0f:7d:43:50:18:91:b6:38:75:27:
         9c:80:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org