Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b278c5493578f4da06cb5da3bdd7d00b9ba8f7da.roa
File:                     b278c5493578f4da06cb5da3bdd7d00b9ba8f7da.roa (raw, json)
Hash identifier:          Q0VRj9YSlKsp99JqlMR91WuvS2EfPBVhPvHMiP5H+hU=
Subject key identifier:   8F:64:30:D5:49:30:9B:1D:7F:B8:A9:E1:DA:A7:59:45:25:7F:20:DD
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27D204
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b278c5493578f4da06cb5da3bdd7d00b9ba8f7da.roa
Signing time:             Wed 08 Nov 2023 15:00:47 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     272885
IP address blocks:        200.123.50.0/24 maxlen: 24
                          200.123.34.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2609668 (0x27d204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=b278c5493578f4da06cb5da3bdd7d00b9ba8f7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:ad:d8:24:fa:35:07:f4:2d:5c:6e:4f:73:
                    e9:7d:1b:b2:79:68:9a:f1:d2:52:7b:95:68:1a:1f:
                    f6:eb:65:f4:6d:8a:5f:e7:35:a3:9f:94:9b:a4:a7:
                    04:14:db:46:9f:f9:84:35:c3:67:00:8d:05:dd:47:
                    c8:62:13:5e:e1:95:04:35:bd:a8:4b:48:8b:14:b1:
                    0e:35:2d:fc:83:c5:b6:fc:0e:9e:0a:3d:5a:1f:73:
                    fe:e1:e3:c8:63:b7:c4:19:0d:f2:84:20:fd:ae:62:
                    1f:8a:61:9c:6d:f1:10:89:46:7d:e7:eb:e9:5c:66:
                    e4:c9:77:00:fb:03:24:ab:a1:51:7f:05:a8:84:9e:
                    ab:e4:92:16:42:cc:51:73:be:f3:16:02:cd:c6:4b:
                    b6:a8:80:5d:75:0e:6c:21:96:40:3d:c9:ad:94:cf:
                    47:a9:ee:cf:cb:b2:93:f7:0f:29:b5:40:9d:52:02:
                    c9:29:53:98:2c:93:cf:48:f9:84:7c:53:91:af:af:
                    10:19:2a:49:e2:0b:27:47:a7:17:eb:66:68:a9:5b:
                    0f:08:4e:43:d2:67:5a:26:91:10:98:aa:a3:35:7e:
                    67:99:6b:16:56:f9:39:d9:88:50:b9:ad:af:f5:3c:
                    f3:45:c4:b5:3c:0d:4f:87:c7:d6:86:eb:73:26:89:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:64:30:D5:49:30:9B:1D:7F:B8:A9:E1:DA:A7:59:45:25:7F:20:DD
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b278c5493578f4da06cb5da3bdd7d00b9ba8f7da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.34.0/23
                  200.123.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:0f:8d:a7:58:39:5a:79:2f:47:9d:19:64:fe:4b:43:9c:be:
         e2:62:af:08:6f:46:3b:ad:44:be:df:3e:9e:f3:3d:05:ad:c6:
         f6:58:0f:78:bd:70:ec:2e:f8:1d:ce:bf:d4:9d:76:f3:02:32:
         22:d6:b2:5e:ba:09:e8:52:c6:c3:ce:f9:f1:78:85:19:d4:db:
         15:db:38:70:4a:5e:87:23:73:c3:bb:66:f6:ee:20:53:a6:e6:
         d1:19:80:00:b4:1f:3d:3b:b3:d2:12:d3:e4:d4:8f:fb:d4:a0:
         24:4c:ea:a8:c5:55:73:d0:a0:ba:1d:db:70:12:2a:14:cc:cc:
         4e:d4:76:8f:64:d1:93:9c:1e:33:0a:1a:00:57:44:64:57:99:
         87:38:c4:8b:16:f7:99:54:bb:7d:93:5c:5e:da:13:99:d3:b5:
         62:d7:38:6f:1b:4b:1b:2b:e4:e0:8a:8a:84:e9:03:e6:ff:6d:
         e2:f4:aa:8b:a6:d9:c1:d2:5b:b3:b4:a7:37:b9:34:53:9f:1e:
         7f:f4:8a:cd:5a:8c:24:58:51:cd:59:d3:93:6d:cb:24:fd:41:
         29:06:e5:09:69:67:a5:7c:86:1a:67:9c:36:96:f2:55:4d:fc:
         da:d9:9d:04:bd:03:06:3a:ee:bb:4f:c9:ac:8a:db:f3:5e:29:
         d7:3c:ee:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org