Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d20681cf185c8e2b15a9ae79cb261d5afc1ece06.roa
File:                     d20681cf185c8e2b15a9ae79cb261d5afc1ece06.roa (raw, json)
Hash identifier:          TfW2xNW5MeUgx9GRLKlWE3jsZqZyDmPcGEL22sRtxV0=
Subject key identifier:   0D:D7:29:3D:55:74:89:D9:A6:18:05:08:E4:D1:37:1B:2B:BD:49:FF
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2AA0DE
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d20681cf185c8e2b15a9ae79cb261d5afc1ece06.roa
Signing time:             Thu 15 Feb 2024 20:41:37 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     264716
IP address blocks:        200.123.62.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2793694 (0x2aa0de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=d20681cf185c8e2b15a9ae79cb261d5afc1ece06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:5a:19:51:7b:83:15:1d:0e:03:9b:d3:e8:
                    c4:b2:1f:c2:94:a0:47:d2:b7:58:0f:35:6e:37:09:
                    06:43:d9:78:43:df:9b:ba:65:4f:1f:c0:56:44:6a:
                    eb:5e:fe:df:a2:b3:e2:6b:29:80:33:c9:53:17:99:
                    93:87:cc:4f:55:37:65:53:75:2d:fd:f9:d3:50:17:
                    1a:bb:a7:53:3d:9e:ec:b0:03:11:bc:4f:b5:73:e5:
                    cf:44:35:c5:cd:03:87:81:65:87:05:26:df:d6:69:
                    10:8a:12:e0:a4:86:90:ee:57:45:92:64:67:5b:19:
                    cc:88:2e:73:11:61:83:1b:86:20:8b:0f:85:9e:39:
                    06:36:91:42:28:3d:21:46:f1:54:e7:b1:66:ad:f3:
                    eb:1b:6e:3d:e1:2b:b4:1d:ff:32:03:7f:50:d2:49:
                    81:d5:a7:86:ba:04:21:f6:77:3f:c0:67:c9:93:17:
                    bf:c0:d5:78:32:f1:3d:10:a5:26:1d:65:be:16:e6:
                    ab:fb:34:6c:d8:76:f1:96:55:86:e1:76:20:34:d3:
                    af:a7:1b:38:26:5b:cc:17:a9:34:10:8b:ab:b2:3e:
                    a5:d0:ce:6e:da:06:e2:af:36:f4:ff:0f:ce:a6:67:
                    bd:49:0e:24:16:50:00:44:f3:54:c0:32:31:52:7e:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D7:29:3D:55:74:89:D9:A6:18:05:08:E4:D1:37:1B:2B:BD:49:FF
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d20681cf185c8e2b15a9ae79cb261d5afc1ece06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:63:20:c3:69:4f:30:0e:78:4e:f2:57:db:f1:06:21:f9:
         da:b8:cc:a8:3b:0f:32:a2:a6:54:6d:3d:70:fa:bf:4c:2a:99:
         b0:b5:75:45:d8:f6:9a:e7:87:b7:68:b2:86:b3:be:92:1a:8f:
         3a:af:8e:8d:1a:53:94:81:dc:8e:04:17:f2:e4:f6:17:21:3d:
         1e:65:c2:c8:19:f1:64:70:a2:26:55:f8:dd:ef:cf:14:a9:ac:
         a4:e2:8f:dd:19:d1:0a:b8:61:50:5b:23:45:b4:73:98:fb:a3:
         ad:0c:81:74:08:7c:3f:cf:b5:0b:c5:50:65:9f:53:58:1f:47:
         21:81:b6:f4:08:35:de:ad:cc:5b:48:d1:9d:be:97:e7:05:3c:
         c2:6a:22:f9:66:e0:cc:81:45:ff:df:89:66:61:e1:01:16:81:
         39:92:b1:e8:7e:7b:c6:63:80:13:cd:61:b7:6c:51:b3:9d:c7:
         4b:07:e9:8a:fa:37:9e:54:33:22:d1:f1:ef:3b:d1:03:5c:e7:
         a2:ed:53:1d:39:67:62:00:3e:90:bb:4f:2c:af:e1:9b:7f:14:
         30:98:87:7b:2e:01:33:3c:9b:ff:ae:1b:6a:7b:78:11:b1:b3:
         14:fe:85:7d:ca:6a:17:a6:aa:64:f4:48:86:ae:43:b5:86:e7:
         d9:64:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org