Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/27b61b6014b6ae0fbe4733b97715656b24dd62a1.roa
File:                     27b61b6014b6ae0fbe4733b97715656b24dd62a1.roa (raw, json)
Hash identifier:          XPEMRvM4zzDqDVIScwtvbjUtJFSH8FGBs2x6FM/9HFI=
Subject key identifier:   63:0D:AD:1B:46:EE:84:A3:0A:87:7F:C4:01:C9:13:4F:DA:63:4C:7D
Certificate issuer:       /CN=e023bb317eecb014b8f7048b5b30535732897c94
Certificate serial:       0619BF
Authority key identifier: B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/27b61b6014b6ae0fbe4733b97715656b24dd62a1.roa
Signing time:             Fri 08 Dec 2023 20:00:35 +0000
ROA not before:           Fri 08 Dec 2023 20:00:34 +0000
ROA not after:            Fri 08 Dec 2028 20:00:34 +0000
asID:                     6503
IP address blocks:        200.23.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399807 (0x619bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e023bb317eecb014b8f7048b5b30535732897c94
        Validity
            Not Before: Dec  8 20:00:34 2023 GMT
            Not After : Dec  8 20:00:34 2028 GMT
        Subject: CN=27b61b6014b6ae0fbe4733b97715656b24dd62a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:ca:97:0c:86:e8:2d:2b:fe:ca:8b:d0:56:
                    a9:3e:00:12:b9:16:b1:6d:6e:7f:89:97:c0:32:a9:
                    28:f2:d3:76:7c:a7:a7:64:4e:5e:24:a8:2e:ad:25:
                    0b:aa:00:1d:6d:58:32:27:13:75:60:d5:70:56:ee:
                    28:b9:b9:01:b3:f4:ad:f6:cf:c2:f1:59:5f:69:a5:
                    46:67:b5:0c:7e:37:5b:b4:17:5c:ae:0f:60:2e:b3:
                    4e:87:17:af:a4:2f:8e:ed:c0:fb:0c:11:e4:53:cd:
                    e0:af:fa:0f:71:64:d5:3c:17:a9:d1:c0:98:b9:7d:
                    85:58:27:7f:a3:64:d3:00:6d:3c:2e:35:42:af:9a:
                    fc:f2:44:6b:3b:27:74:3e:9b:d0:1f:71:6b:6b:53:
                    26:7e:d5:91:24:13:6d:43:89:fd:ae:80:a2:cc:45:
                    09:07:b4:d2:c7:c0:e0:52:e5:33:4f:46:88:a0:6b:
                    93:9d:6a:5f:a0:e2:ee:31:01:32:82:37:75:8e:03:
                    84:ed:55:fe:3f:f4:2d:ed:ae:03:4d:f9:51:c4:11:
                    c2:c8:1e:5b:52:63:59:b9:6f:41:4a:69:2a:4b:38:
                    fa:e3:af:de:9b:e2:78:c6:d4:01:2c:e4:9c:d7:c3:
                    dd:62:e6:83:27:35:8f:fa:f9:67:42:19:3a:6d:c7:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0D:AD:1B:46:EE:84:A3:0A:87:7F:C4:01:C9:13:4F:DA:63:4C:7D
            X509v3 Authority Key Identifier:
                keyid:B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/27b61b6014b6ae0fbe4733b97715656b24dd62a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:e1:ab:23:ed:e6:5f:16:2d:ca:2c:78:e5:1c:03:14:8f:50:
         2b:4c:bb:60:23:89:f5:70:3c:db:5a:9b:a0:1e:36:f2:0d:2c:
         f4:4c:39:11:ab:ab:a3:73:4e:c4:d9:a6:7f:b6:4b:8b:73:c7:
         ea:59:96:fd:36:aa:de:23:ef:06:b4:76:7b:8a:c1:f9:74:81:
         b8:59:97:41:8e:68:af:9d:0f:81:37:2e:9a:17:b1:34:1a:b5:
         d9:14:36:06:c8:18:ab:64:db:d7:d9:0b:e1:5f:59:27:3f:44:
         06:eb:fe:42:fe:d6:dd:95:64:d3:14:03:13:f1:ad:f0:42:e8:
         f6:8b:38:ff:87:eb:6b:75:11:fb:08:34:f4:cb:69:62:fd:a3:
         c7:09:b3:9e:60:57:f9:e9:fa:a5:37:e9:83:45:7f:fd:9b:13:
         88:c8:06:39:af:4c:f3:d9:1d:23:f0:b1:af:8b:d7:d4:9f:95:
         8c:c1:a2:65:ba:33:17:9c:ec:f8:35:3d:1e:4f:00:e9:93:dc:
         55:4d:db:c9:19:54:76:2d:8e:21:33:fc:7a:1e:65:c5:99:4d:
         77:1f:d5:3e:7d:91:16:3e:5c:f2:51:b1:05:e0:a7:34:eb:1f:
         21:1f:53:ab:cd:15:7d:d4:67:5d:ea:18:35:31:fe:e1:a7:f5:
         43:bb:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 04:44:17 2024 by rpki-client on console-ams.rpki-client.org