Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e005e0c3e5a5dde77fa8c64c0f89d08773990e30.roa
File:                     e005e0c3e5a5dde77fa8c64c0f89d08773990e30.roa (raw, json)
Hash identifier:          DXQbmodfMS3fCcOPcEB9m4zxYJiGLPl4D+t5EJadxvE=
Subject key identifier:   90:F9:84:9A:C4:7A:44:7A:F7:0B:0E:2C:DE:CC:F5:32:60:B6:E5:CF
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       251D14
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e005e0c3e5a5dde77fa8c64c0f89d08773990e30.roa
Signing time:             Thu 10 Aug 2023 18:00:57 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     272114
IP address blocks:        200.123.32.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432276 (0x251d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=e005e0c3e5a5dde77fa8c64c0f89d08773990e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:33:07:ce:96:0c:dc:e8:f5:b4:62:18:71:
                    1a:7e:cf:47:d5:c4:72:f2:1d:63:af:fd:19:d9:82:
                    25:25:81:35:11:45:30:91:81:20:20:84:0c:5b:a6:
                    e2:85:46:a3:1e:7b:71:36:44:df:6b:f4:54:c5:c1:
                    5d:96:31:0d:2f:7a:7f:4a:c5:92:53:6b:b5:a7:fc:
                    17:01:71:11:f0:24:1e:60:bd:fe:79:33:ef:fd:c5:
                    30:b8:f2:bb:9c:d1:a0:ed:92:2a:4a:a4:19:d8:70:
                    5a:9d:26:f3:45:44:6f:38:13:b4:b3:1e:98:92:35:
                    5d:03:f0:7b:e4:69:ec:ed:3a:a4:71:81:6d:70:bd:
                    c1:fa:34:6b:dd:99:d4:a5:f3:8a:b7:bf:30:82:a3:
                    96:e0:66:d5:b4:07:f5:df:5b:bb:8c:60:bc:00:68:
                    bd:f9:30:97:6e:00:a8:1f:2f:65:10:ed:7e:c4:29:
                    af:f4:01:24:9f:4f:54:4b:51:4c:51:97:23:60:31:
                    8a:41:74:45:ef:ff:14:d2:2a:13:0c:93:39:f7:0e:
                    cd:d6:b7:db:e7:13:8e:b2:6c:1d:38:9c:bd:ee:7a:
                    bd:30:7d:db:47:ef:8f:6d:4d:60:e8:0e:5e:31:2c:
                    05:97:c4:0c:c6:3b:64:b5:71:d4:85:5a:16:67:bc:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F9:84:9A:C4:7A:44:7A:F7:0B:0E:2C:DE:CC:F5:32:60:B6:E5:CF
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e005e0c3e5a5dde77fa8c64c0f89d08773990e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:f3:80:3c:e0:7a:84:a9:fb:98:e1:9b:c6:5a:be:bc:9c:66:
         e3:8f:d6:26:9b:62:cb:2e:3d:6a:e4:29:e5:b4:b1:d5:48:e0:
         b9:cd:b5:bc:cd:7c:c7:38:87:16:d7:f7:49:64:10:3d:55:98:
         21:bb:88:43:dd:b6:a7:c3:bb:4b:01:2f:9c:7a:fa:23:b6:bc:
         16:c5:c6:66:77:5d:2b:64:99:a4:58:f8:62:6a:5e:6d:4d:9b:
         fb:4d:37:5e:ea:09:20:4a:09:75:f4:44:78:4f:60:28:11:97:
         ab:7f:46:03:f1:34:ba:ae:d6:34:ad:4c:97:81:45:e9:e2:2d:
         fc:70:cd:cc:c0:39:e1:e9:0c:0a:02:69:75:2e:69:4b:f1:14:
         54:37:51:3c:d9:35:53:46:c0:e2:75:f7:71:f1:75:23:e1:a1:
         ca:37:11:cc:46:b4:27:cb:a4:57:63:1b:13:e6:23:ea:39:fd:
         56:48:2c:18:0d:86:ef:e9:fa:8e:a4:b2:ae:53:07:89:18:49:
         8d:24:75:a0:33:26:1b:29:51:df:1c:3e:f2:39:04:5f:46:4b:
         16:75:4b:2a:b8:54:dc:b8:3c:a7:c9:77:9c:63:db:35:42:1c:
         88:21:15:d3:3e:fe:45:99:04:bf:71:4b:d4:75:3d:2e:34:24:
         ec:94:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:27:49 2023 by rpki-client on console-fra.rpki-client.org