Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e1fa23c892aed5d2243fab55b36696631f703b15.roa
File:                     e1fa23c892aed5d2243fab55b36696631f703b15.roa (raw, json)
Hash identifier:          2C7ZDvX5WwW9J3zr1rMGUAkwbz3iDBihJtvyQyRN4gE=
Subject key identifier:   84:D5:BE:6E:6D:63:3F:58:5D:55:A9:24:D9:E9:41:70:A9:FB:A0:10
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       2418C7
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e1fa23c892aed5d2243fab55b36696631f703b15.roa
Signing time:             Mon 17 Jul 2023 16:09:00 +0000
ROA not before:           Sun 16 Jul 2023 16:08:49 +0000
ROA not after:            Thu 17 Jul 2025 16:08:49 +0000
asID:                     265776
IP address blocks:        200.50.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365639 (0x2418c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Jul 16 16:08:49 2023 GMT
            Not After : Jul 17 16:08:49 2025 GMT
        Subject: CN=e1fa23c892aed5d2243fab55b36696631f703b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:1c:1c:e6:10:7a:3f:2c:5e:6f:d0:84:16:
                    4b:45:6f:8a:6d:d9:40:53:32:38:80:b9:8b:de:a1:
                    79:ed:2d:31:d4:58:9b:ff:5d:db:c0:35:5b:ba:ab:
                    f3:70:47:d5:98:84:56:f6:a3:13:e6:f6:a8:c7:c3:
                    97:e0:79:75:a0:bc:6f:c2:06:67:63:fa:68:b6:ca:
                    04:a1:9d:dd:ac:b1:e4:40:d3:67:0c:2a:a8:d0:d8:
                    e6:b8:8d:f5:d2:68:85:23:cc:f7:30:0b:36:95:6c:
                    a6:5b:39:6d:2c:be:a9:dc:c4:a8:9d:17:69:5c:50:
                    72:a6:4e:ca:98:79:77:ec:26:a6:6a:d5:3d:a6:9a:
                    fa:f1:53:93:db:b2:f1:85:4b:89:56:1e:22:47:54:
                    5f:01:59:b9:ec:82:4b:3a:b1:5d:c6:78:cc:99:f6:
                    6b:d1:f9:f5:31:00:df:9a:2d:a9:f2:82:93:72:71:
                    34:67:09:6e:75:e0:7f:31:6e:7e:92:17:36:6d:f8:
                    eb:87:8a:a9:c3:c3:3a:b9:38:10:dd:ff:b8:55:bd:
                    21:85:e8:45:c8:9b:1d:8c:80:5e:23:66:66:2a:90:
                    16:f2:47:c4:8e:92:51:ec:da:d2:f6:ac:c3:d4:27:
                    d9:fa:30:af:70:c0:2d:5c:2e:0e:51:74:d1:a5:24:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D5:BE:6E:6D:63:3F:58:5D:55:A9:24:D9:E9:41:70:A9:FB:A0:10
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e1fa23c892aed5d2243fab55b36696631f703b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:5a:92:c1:af:a5:5f:54:b9:4f:4c:02:fd:aa:ba:4f:52:48:
         11:91:e6:b2:84:8d:3a:ca:9a:24:59:65:61:9b:b0:10:77:54:
         cf:4c:8c:82:c5:76:a9:07:ac:6c:84:11:9b:94:fb:18:ee:fb:
         fb:64:e9:66:3b:fa:a2:d6:9f:54:e2:9a:fc:94:95:03:8d:e0:
         2c:76:a5:93:06:8e:dd:e0:8e:0f:3e:31:1d:15:ba:3b:94:49:
         c7:df:02:6b:46:3f:fb:f8:d4:d0:31:06:97:4a:86:6f:c0:41:
         56:75:a7:50:34:e2:43:62:d8:d4:a5:4b:1e:a5:66:ad:ca:ab:
         63:7f:76:95:32:4a:9c:2b:99:fe:a2:bd:d0:2d:aa:77:9a:61:
         01:e8:7a:d1:d0:09:1c:5e:8c:b1:13:1e:b8:57:7f:0f:78:d9:
         c4:bc:8e:49:7c:2c:37:69:f0:36:3a:9d:68:38:9a:1c:e0:3d:
         16:e2:47:bf:b8:33:83:7f:5e:73:d2:b1:df:3a:c2:76:d5:ea:
         32:bf:99:15:11:46:cb:b2:81:fb:a4:02:10:7e:6c:44:30:87:
         b9:b8:3d:73:c6:e6:f0:5b:a3:69:49:80:60:db:21:57:fd:0e:
         d6:6f:e4:72:38:81:c0:69:1e:1e:83:a4:d5:fd:5d:be:1d:47:
         ec:a7:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:46:42 2023 by rpki-client on console-ams.rpki-client.org