Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f172f7c206250ef251f24d0844f8941a6c2028e7.roa
File:                     f172f7c206250ef251f24d0844f8941a6c2028e7.roa (raw, json)
Hash identifier:          6vuRDifpMWOLS9v3FXXyOyb6gNh/NyZCRYZ2S/goV90=
Subject key identifier:   04:8F:B1:2B:1C:C7:5E:B0:40:E8:98:C7:16:EC:B0:B0:06:1B:99:4D
Certificate issuer:       /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial:       29F88D
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f172f7c206250ef251f24d0844f8941a6c2028e7.roa
Signing time:             Tue 30 Jan 2024 15:01:01 +0000
ROA not before:           Tue 30 Jan 2024 15:00:49 +0000
ROA not after:            Tue 30 Jan 2029 15:00:49 +0000
asID:                     52328
IP address blocks:        200.123.52.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2750605 (0x29f88d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
        Validity
            Not Before: Jan 30 15:00:49 2024 GMT
            Not After : Jan 30 15:00:49 2029 GMT
        Subject: CN=f172f7c206250ef251f24d0844f8941a6c2028e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:79:61:f3:76:ee:10:b8:4e:99:07:79:82:
                    49:9c:fa:b1:1f:01:dd:84:b6:83:83:70:35:1d:f3:
                    5e:d9:38:7c:36:66:54:ba:e1:33:75:03:2b:9b:ea:
                    48:58:bd:44:51:b0:b6:7a:77:f9:66:02:02:c1:63:
                    66:42:7e:ed:20:3c:8d:db:4d:08:e5:df:70:7b:b4:
                    68:00:00:7f:17:bc:8a:d6:23:9d:02:51:40:5f:73:
                    55:4e:83:be:59:cc:43:7b:97:03:eb:79:ac:f7:32:
                    b0:d7:52:a9:a2:e1:2a:dc:9f:37:47:00:36:a3:67:
                    78:f6:bf:5a:50:3c:d4:e2:c2:38:15:ad:54:bb:fd:
                    9b:e6:00:ea:b5:5b:b5:d5:c7:e2:46:fb:ce:00:fa:
                    53:fa:d4:81:e5:01:76:ea:18:01:4f:58:7b:be:86:
                    68:2c:e6:2f:ed:a7:90:3d:85:70:af:6b:ec:0a:2b:
                    a2:9e:a2:93:62:33:72:75:7a:19:c2:1b:0b:9e:c3:
                    cf:c5:28:84:67:4d:fd:b7:60:ad:1a:31:3e:17:87:
                    b1:ac:24:f9:99:09:62:33:2e:af:05:6a:ee:e2:44:
                    24:11:2f:61:ea:64:92:51:3a:8a:9b:c2:08:bd:b3:
                    ab:57:80:90:84:fd:5f:67:6d:79:75:ff:ca:ff:41:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:B1:2B:1C:C7:5E:B0:40:E8:98:C7:16:EC:B0:B0:06:1B:99:4D
            X509v3 Authority Key Identifier:
                keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f172f7c206250ef251f24d0844f8941a6c2028e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:c4:b0:54:4b:9f:5a:37:b5:af:8e:53:90:23:85:e5:9b:54:
         15:7f:bd:83:46:e5:08:7a:58:13:8d:76:51:4f:29:c0:5b:0e:
         c0:d2:58:e6:40:c5:79:f0:bc:6d:01:a7:d0:15:67:b0:42:ca:
         ff:10:86:a2:00:f3:eb:a7:ca:cb:77:0a:5f:b4:0c:9e:7b:e7:
         44:a6:c1:b6:e7:b2:c8:7b:b0:96:22:5a:70:6a:58:35:4a:f8:
         0f:ea:5b:f0:84:01:32:9a:47:9a:96:f8:9f:15:29:d1:85:f4:
         06:5b:7b:e1:e1:57:7d:4e:60:31:8e:92:1b:cc:39:24:a1:8a:
         7f:fe:18:db:ce:78:41:f7:3b:81:bc:e0:49:5a:b7:3d:d3:f8:
         ef:0f:6d:b6:21:00:7d:8e:33:6d:79:51:a3:a2:a7:8d:91:21:
         bd:24:19:1b:a8:aa:11:c6:75:11:e4:f1:ed:7a:7b:b9:29:e8:
         1b:b2:8c:e6:7f:3b:0b:43:e3:f0:2d:42:67:97:6d:fd:5b:2e:
         69:6c:7a:de:ef:aa:45:d1:b7:cb:48:47:bd:98:6c:98:3d:a7:
         5e:bf:47:66:9f:c1:6b:73:26:8b:91:33:07:3c:df:f2:e9:b7:
         bd:05:2e:0c:cb:02:c2:c9:26:7f:86:d6:47:b1:a4:52:3f:99:
         6f:0f:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:32 2024 by rpki-client on console-fra.rpki-client.org