Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ac3da986cb103022905627b1e02c9c15f0a29b1e.roa
File:                     ac3da986cb103022905627b1e02c9c15f0a29b1e.roa (raw, json)
Hash identifier:          GjGUTm6UlJfJf600r/GFxZ1dDanNSnf7QSADD4ZmJvo=
Subject key identifier:   18:0C:C7:CD:F6:02:AE:D5:B7:92:4C:24:A2:81:A8:C8:8F:28:F7:69
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       250F87
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ac3da986cb103022905627b1e02c9c15f0a29b1e.roa
Signing time:             Thu 10 Aug 2023 18:00:52 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     265776
IP address blocks:        200.50.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2428807 (0x250f87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=ac3da986cb103022905627b1e02c9c15f0a29b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:3c:66:83:4b:0f:ff:8c:6a:c7:be:a3:35:
                    d5:25:d6:81:6b:c1:f3:8d:53:8f:85:27:c6:76:bc:
                    74:09:fe:0f:9e:fe:b5:c8:d4:00:2a:6b:4d:4a:39:
                    2a:bd:7c:df:6d:7a:e1:86:24:cc:0b:73:4a:6f:d3:
                    c3:ca:c5:a3:29:8b:ff:0d:60:94:35:6f:0a:b3:62:
                    41:23:d2:b9:aa:d7:3a:f8:60:c5:54:21:c3:eb:50:
                    6c:85:b4:60:77:8a:d9:84:cb:81:44:5b:e7:83:dd:
                    dd:c3:90:cc:89:9c:74:81:03:dd:32:ab:04:84:0e:
                    75:38:7b:12:f4:19:77:9d:ad:49:3d:1a:6f:f4:ac:
                    df:14:c9:37:41:46:6c:0c:12:f2:e3:4a:d2:b4:89:
                    4a:cd:37:b9:d7:fd:a0:ec:dc:e4:64:eb:e9:b0:ad:
                    1b:40:47:c8:c4:96:a1:a4:9a:70:e5:26:3f:5d:05:
                    a7:fc:69:f2:4e:88:aa:99:a2:ff:fa:b9:04:eb:bd:
                    da:1c:1a:47:78:a7:2d:c9:89:59:db:f9:02:01:fd:
                    d6:0d:5c:eb:bf:8c:bf:29:60:b8:14:c1:fc:39:90:
                    ce:7a:34:f2:5b:b9:70:e4:d7:ba:83:9a:4a:9f:85:
                    d5:fd:8b:ad:49:11:31:bc:e6:de:72:24:d8:f9:39:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0C:C7:CD:F6:02:AE:D5:B7:92:4C:24:A2:81:A8:C8:8F:28:F7:69
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ac3da986cb103022905627b1e02c9c15f0a29b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:0c:d7:18:26:be:fa:d1:de:ba:74:bf:4f:b1:18:6d:a8:aa:
         5b:ee:7a:ef:7c:ed:ef:c9:4c:c9:f3:25:c1:96:5e:c8:00:61:
         ff:6f:68:8a:d7:a5:10:51:64:fc:60:04:79:ec:6b:60:52:c6:
         38:fc:1a:2e:d8:83:3b:3c:85:e8:cf:f5:bd:55:2c:c2:c1:8d:
         1e:e4:a0:1d:9b:0b:7a:3c:08:ba:d0:61:d1:f1:bb:38:10:e4:
         fd:2c:8f:4f:52:73:38:95:65:f2:64:73:a2:10:f0:dd:c0:49:
         6e:1f:ba:da:28:55:83:3a:f7:a1:99:d6:d9:72:60:b6:14:dc:
         74:a9:31:56:81:c4:6e:c0:e1:66:eb:68:0f:d1:a7:71:3e:30:
         64:3e:6a:80:3b:9e:7d:08:a8:a3:43:6c:83:b9:18:46:82:ae:
         9c:ff:39:d2:e7:20:e7:fe:e5:da:13:05:ce:90:ba:dd:e8:5e:
         75:6e:9a:7a:e7:a5:65:17:e9:51:59:39:71:f3:57:9e:71:09:
         c5:70:40:8e:98:22:b1:af:e9:90:b9:19:85:55:9e:b9:0c:8d:
         83:9b:9d:f8:a9:df:e7:6f:c6:9f:f0:bb:3b:b0:47:0e:5e:56:
         76:ea:b0:3e:6c:22:9d:83:8c:8b:88:08:10:7d:ae:22:16:ab:
         74:e4:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org