Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/94d9bc193193b46d5ba384c4408af3b125768073.roa
File:                     94d9bc193193b46d5ba384c4408af3b125768073.roa (raw, json)
Hash identifier:          TjFFmr4tnkmaD1XivyFEJ+TM/0NYpDH6cS8b59KBDlw=
Subject key identifier:   F7:7D:F3:06:79:6F:9F:E0:5D:99:80:6E:49:34:72:34:B7:1C:EE:EC
Certificate issuer:       /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial:       276BA0
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/94d9bc193193b46d5ba384c4408af3b125768073.roa
Signing time:             Tue 07 Nov 2023 16:00:43 +0000
ROA not before:           Tue 07 Nov 2023 16:00:38 +0000
ROA not after:            Tue 07 Nov 2028 16:00:38 +0000
asID:                     52444
IP address blocks:        200.123.56.0/23 maxlen: 24
                          200.123.56.0/23 maxlen: 24
                          200.123.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2583456 (0x276ba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
        Validity
            Not Before: Nov  7 16:00:38 2023 GMT
            Not After : Nov  7 16:00:38 2028 GMT
        Subject: CN=94d9bc193193b46d5ba384c4408af3b125768073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:6b:9c:9a:2a:0b:a2:2a:33:fe:8d:6c:0e:
                    8e:56:96:ec:99:29:6f:03:c8:0d:5d:3a:3e:a9:b3:
                    e7:91:a9:28:0b:7b:fe:94:e8:6a:26:08:b5:6a:e9:
                    26:73:80:0e:3a:91:5b:76:b4:5a:d4:96:14:68:be:
                    5d:a3:12:07:e6:be:99:02:9d:70:b2:33:79:53:8a:
                    4c:c8:04:20:97:05:de:2c:02:d3:98:4c:5b:cb:b0:
                    74:70:6f:a5:d0:14:5a:3b:d2:56:95:ad:e4:f5:26:
                    90:2b:9f:38:54:4e:bd:e5:fb:f9:67:6e:82:a7:ba:
                    cb:e4:23:f5:35:7d:15:ad:9f:37:ee:63:44:c1:c7:
                    87:50:19:fc:c6:bc:bf:e7:7e:3d:88:56:69:1e:84:
                    ae:71:94:0b:05:79:a4:c2:b6:88:92:cd:12:14:3e:
                    52:a9:8c:f0:d6:5e:a1:ae:81:ab:52:e5:a6:be:25:
                    93:7a:48:39:28:a2:ce:5e:42:df:dd:44:09:57:a4:
                    00:2a:ad:6a:1a:71:f2:ce:af:77:90:86:60:9a:77:
                    37:ce:6e:a6:d2:06:37:9a:d5:83:70:98:6b:d3:ec:
                    0c:86:f8:2b:d1:57:d7:87:00:64:3b:a4:9a:b0:81:
                    0d:be:b6:16:91:fe:28:c9:35:ef:43:15:a8:75:9f:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:F3:06:79:6F:9F:E0:5D:99:80:6E:49:34:72:34:B7:1C:EE:EC
            X509v3 Authority Key Identifier:
                keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/94d9bc193193b46d5ba384c4408af3b125768073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.56.0-200.123.58.255

    Signature Algorithm: sha256WithRSAEncryption
         03:5e:7a:11:ad:6b:44:c4:aa:9a:4a:ca:9d:67:d1:c9:d8:6c:
         ad:1d:f9:6f:04:20:a5:01:ac:11:84:eb:fa:26:a7:2a:21:00:
         2d:58:d0:f0:b1:15:25:2b:5f:af:d8:3e:fe:54:34:a6:9f:9e:
         e8:57:ae:3a:40:56:55:60:69:11:98:ce:ce:b0:e8:8c:9b:2b:
         3c:ef:c0:15:47:0a:47:27:71:85:bd:57:35:f7:ef:e6:cf:c5:
         d4:f6:39:63:31:03:6d:2f:7e:1b:a9:f6:c9:0c:ea:19:12:9c:
         b9:a1:0d:fb:2e:79:5c:9d:02:58:96:31:0f:61:d7:49:57:ec:
         f5:df:f0:5b:c0:2d:50:13:b5:9e:99:59:1c:fc:03:c1:8d:c1:
         50:f7:da:e1:3e:c6:6c:4b:dd:8c:56:8e:73:07:0d:e2:dd:bd:
         b6:1c:be:2f:78:ee:45:0e:02:6a:8a:93:5d:29:62:d3:ca:72:
         74:e0:28:80:90:b4:3b:03:a6:14:9e:09:58:3f:a1:92:38:23:
         1b:a9:66:f2:94:b5:6f:02:54:3c:6a:0a:be:1f:7e:6a:08:6e:
         b4:37:3e:a4:79:d7:04:a4:a2:c2:74:24:19:93:36:c5:d7:1f:
         df:02:39:c0:82:67:83:cc:0a:04:30:ab:4d:ed:f5:00:1c:9d:
         14:50:46:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:33 2023 by rpki-client on console-fra.rpki-client.org