Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/1628331ef5b63a36809d506d36a81b6d5ba0ff09.roa
File:                     1628331ef5b63a36809d506d36a81b6d5ba0ff09.roa (raw, json)
Hash identifier:          +3CTeBuchj3Hfs7tfn2GdYV6qeAgSqCwd/YolGI17B0=
Subject key identifier:   BF:7E:74:3A:E2:19:A4:C2:AD:90:74:62:AD:48:8E:D1:52:B2:FC:E2
Certificate issuer:       /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial:       084175
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/1628331ef5b63a36809d506d36a81b6d5ba0ff09.roa
Signing time:             Tue 27 Feb 2024 00:40:59 +0000
ROA not before:           Tue 27 Feb 2024 00:40:50 +0000
ROA not after:            Tue 27 Feb 2029 00:40:50 +0000
asID:                     6503
IP address blocks:        200.23.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541045 (0x84175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
        Validity
            Not Before: Feb 27 00:40:50 2024 GMT
            Not After : Feb 27 00:40:50 2029 GMT
        Subject: CN=1628331ef5b63a36809d506d36a81b6d5ba0ff09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:ca:aa:b8:dc:68:2b:b2:18:e0:4f:88:25:
                    68:77:a8:c3:ec:a2:6b:6e:d4:db:25:f2:45:7a:d5:
                    9c:9d:bd:b7:3d:e7:cb:1a:aa:4c:45:51:1f:b7:ee:
                    07:f1:70:40:a9:88:ba:d3:06:9c:6a:f2:47:27:83:
                    f0:2f:b8:be:51:78:6b:29:2f:ac:e2:53:98:a4:50:
                    98:27:6c:e2:91:0b:ce:b3:04:59:2f:52:20:ec:32:
                    86:3d:ca:f2:91:8a:81:73:4e:93:3c:62:1f:a8:a1:
                    4f:ba:ad:62:df:37:ca:c3:60:04:86:f0:cb:0d:70:
                    77:f6:6d:ea:39:58:60:e0:fa:2e:81:ca:91:4d:62:
                    1e:fa:42:d6:27:f4:86:fe:13:ed:a6:f8:12:ec:5b:
                    01:ac:71:42:c5:71:72:69:7f:2c:1b:c2:68:f9:71:
                    a0:2b:a9:33:e4:68:d9:d3:64:93:e5:9d:20:61:ba:
                    40:e8:ed:83:3f:9c:76:83:1b:40:c0:36:95:72:45:
                    aa:e9:21:ab:19:59:ff:7a:10:2a:b6:18:d8:c2:eb:
                    d7:11:3d:33:64:a8:91:d9:93:a6:38:76:49:40:ea:
                    bc:37:b9:1e:14:30:fc:f4:bf:05:68:e7:f6:6c:d8:
                    3a:cc:5b:5b:ae:46:7c:e2:29:5f:76:dc:e2:42:c1:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7E:74:3A:E2:19:A4:C2:AD:90:74:62:AD:48:8E:D1:52:B2:FC:E2
            X509v3 Authority Key Identifier:
                keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/1628331ef5b63a36809d506d36a81b6d5ba0ff09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:59:6c:a5:78:94:b2:a5:ab:89:ef:79:42:80:11:66:a7:05:
         96:8d:01:07:94:74:9a:46:5d:87:14:d3:7d:3c:46:78:ff:4e:
         16:37:02:75:66:7f:47:9f:cc:66:77:fb:67:a6:87:15:ae:2a:
         b1:bb:96:69:de:79:fc:8c:89:a1:b6:61:b1:e7:d2:07:71:bf:
         c0:95:79:b4:ed:8a:90:47:a6:6c:6f:1d:b4:32:5a:1e:3f:48:
         3e:eb:71:af:e5:8d:1b:fe:1a:80:a1:9d:d6:e1:b3:f0:c8:4d:
         bc:79:88:c3:e2:b3:53:b7:ad:d8:78:55:dc:7f:47:37:a0:c8:
         26:32:b2:63:de:30:e9:59:cd:dc:f0:25:ca:fb:08:c7:82:e8:
         27:3d:c0:34:9d:ca:0e:96:1c:d0:72:dc:52:b2:51:3d:63:c0:
         65:4d:04:01:f6:ac:27:83:9e:b4:49:e2:14:9b:7f:62:ff:05:
         8f:86:59:ec:00:ea:95:3e:f2:b8:7d:4b:49:6b:87:f1:5a:31:
         f2:52:60:d9:d6:35:4d:35:63:64:b9:24:c8:27:f2:d6:13:ad:
         c2:5e:5c:eb:72:2a:1f:d9:12:8e:42:1f:a9:f9:71:7e:b6:3e:
         cb:c8:95:24:2b:1a:da:76:72:92:3f:fb:5b:ed:30:0d:f9:4f:
         0b:24:e9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:18 2024 by rpki-client on console-fra.rpki-client.org