Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7f1a8139b6c20820920629c93a1a35e1e7eeb82e.roa
File:                     7f1a8139b6c20820920629c93a1a35e1e7eeb82e.roa (raw, json)
Hash identifier:          c+A76SbVimxvRPEdZA/AR8jt2SNwAnrXssrSjZiNQrY=
Subject key identifier:   D7:2A:E8:BC:4E:81:24:04:8A:1F:2D:5D:63:7A:3D:86:17:70:69:96
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       23FAEC
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7f1a8139b6c20820920629c93a1a35e1e7eeb82e.roa
Signing time:             Mon 17 Jul 2023 16:08:51 +0000
ROA not before:           Sun 16 Jul 2023 16:08:49 +0000
ROA not after:            Thu 17 Jul 2025 16:08:49 +0000
asID:                     264716
IP address blocks:        200.123.62.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2357996 (0x23faec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Jul 16 16:08:49 2023 GMT
            Not After : Jul 17 16:08:49 2025 GMT
        Subject: CN=7f1a8139b6c20820920629c93a1a35e1e7eeb82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:75:a5:00:8c:d8:72:1c:ce:19:58:1a:bf:
                    6c:23:dc:37:f5:f5:1c:bc:34:46:57:18:60:6c:04:
                    38:c3:6a:84:5b:0b:c9:06:92:0e:5a:95:05:2d:9a:
                    40:5f:4a:12:1f:63:63:ce:7b:d4:98:60:0c:1e:73:
                    e0:ef:0b:88:86:3c:57:af:1f:3e:35:62:ae:8e:48:
                    1c:32:20:41:a6:0b:7c:69:c4:58:7a:5f:7c:ed:02:
                    24:d6:49:e8:05:dc:c3:0d:38:06:07:1d:21:bd:19:
                    b5:49:a8:03:15:0e:4e:2a:02:16:94:9a:95:fe:40:
                    8a:1d:54:f1:14:42:26:2b:be:fd:16:b8:95:55:1a:
                    ad:13:de:b5:0e:d5:dd:b7:92:2e:0f:da:ff:28:da:
                    54:72:57:d6:d5:36:c1:5f:f7:7c:56:7e:cd:28:c7:
                    67:d8:ac:a9:5d:2d:93:ff:5c:bc:0b:ea:cc:c2:86:
                    b8:56:2e:7d:00:87:be:b4:1b:30:6b:5e:4d:e9:88:
                    ee:fd:d8:34:df:bc:e5:97:f6:72:92:1b:a2:fc:a7:
                    60:17:10:72:6c:0f:48:6e:93:23:4c:ae:a5:b4:c1:
                    4f:7e:82:1c:85:68:e3:55:79:27:32:a9:8d:8e:7d:
                    d5:ca:10:e9:12:4f:f3:4a:ac:d2:a4:7f:75:be:32:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2A:E8:BC:4E:81:24:04:8A:1F:2D:5D:63:7A:3D:86:17:70:69:96
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7f1a8139b6c20820920629c93a1a35e1e7eeb82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:0b:53:5e:8c:45:d3:e5:fb:8f:2a:ca:f5:45:bd:82:2d:85:
         4a:ce:9c:95:ce:2c:cb:6a:5a:d2:ca:ff:8e:ca:d2:71:6c:f1:
         26:89:d2:c7:e5:d6:96:4f:ba:62:cd:48:4f:27:25:ce:8a:47:
         60:91:74:5e:a1:15:5d:a4:56:4a:8f:dc:d8:7b:b2:d1:9e:2f:
         7d:0c:3b:4f:5e:ef:37:55:d1:67:d1:8a:48:20:1b:57:d8:98:
         9a:69:7e:0d:01:4c:39:81:b4:93:eb:db:47:01:c9:2a:ec:9c:
         e1:10:2e:9b:ae:83:bc:df:f1:f3:b1:65:9c:4f:d4:ff:d1:a9:
         c2:cc:7c:92:5c:db:29:90:37:a6:83:ce:8f:3d:a7:ec:dd:b8:
         56:24:72:5e:42:88:90:c5:27:56:76:d8:56:79:b9:bc:e7:c0:
         d7:f9:34:01:43:ab:90:5a:01:62:a0:cf:1c:08:b3:b2:c2:d2:
         64:dd:56:bc:f5:04:99:72:50:a0:f8:03:19:bd:e5:24:aa:95:
         33:ff:16:d5:fa:27:73:2a:3c:4b:05:85:0b:c1:e4:1e:bc:43:
         fe:9e:d5:73:92:9d:78:0e:de:7c:e6:0b:98:89:ec:c7:1a:3b:
         27:9b:b7:81:a7:d8:bd:fc:4e:72:f6:86:03:e3:4d:7a:ad:df:
         07:e4:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:21:06 2023 by rpki-client on console-fra.rpki-client.org