Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/0e3af7db983747efdd1a386b79b9a738c7cabedb.roa
File:                     0e3af7db983747efdd1a386b79b9a738c7cabedb.roa (raw, json)
Hash identifier:          C95dpGkffJJBVB6l6SUWkOtoajlXiM7xAU8gyW8r+pw=
Subject key identifier:   D8:A0:28:CD:C5:3E:99:FE:B6:05:5E:3F:11:3F:A3:8F:5E:7F:17:E0
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       2733AC
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/0e3af7db983747efdd1a386b79b9a738c7cabedb.roa
Signing time:             Mon 17 Apr 2023 13:00:38 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     265877
IP address blocks:        200.43.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569132 (0x2733ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=0e3af7db983747efdd1a386b79b9a738c7cabedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:44:84:52:3b:a9:8c:3a:71:f9:3a:b3:70:1b:
                    d5:09:4b:4b:4f:bf:2b:db:29:0a:3e:9f:1d:65:7b:
                    e8:3b:07:05:24:b5:a9:46:1b:be:74:a2:ef:27:5f:
                    28:ba:5c:05:83:4f:ce:95:17:2f:0d:e9:a4:da:53:
                    e9:da:59:54:f9:fc:18:3e:b3:9a:2e:cf:e7:36:5a:
                    e8:57:37:c5:23:0b:a3:10:3c:87:0f:bb:40:e6:d6:
                    1d:bc:77:6b:d3:e3:7f:f9:b8:e3:62:8c:a0:05:fe:
                    3a:c4:15:35:ca:ca:da:61:c1:e8:b3:02:5a:57:b7:
                    82:b6:63:5f:a6:48:50:89:17:f0:a1:7b:bc:96:dd:
                    45:f0:87:f7:46:8e:ad:a0:7b:20:6e:23:6f:92:42:
                    12:60:41:c3:05:88:2c:1c:f0:6e:5c:5a:53:b6:f2:
                    d8:9f:d5:ed:cd:13:cd:62:86:6c:5f:65:ea:72:2d:
                    49:d4:ee:ad:c4:96:78:8d:7a:08:6b:21:fc:77:40:
                    cf:54:73:1d:10:0e:f9:c4:67:bf:04:3e:af:16:de:
                    0c:3a:df:9f:a0:61:90:71:78:3a:66:5d:23:44:9e:
                    53:52:7a:08:e1:1f:1b:d2:03:ab:9c:ac:87:82:83:
                    c1:75:00:1c:85:cf:5c:26:a4:85:c0:12:e3:5c:55:
                    a7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A0:28:CD:C5:3E:99:FE:B6:05:5E:3F:11:3F:A3:8F:5E:7F:17:E0
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/0e3af7db983747efdd1a386b79b9a738c7cabedb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:b5:e7:31:85:2d:19:10:d8:04:cb:ac:da:0e:cd:aa:f5:6a:
         01:1e:1f:17:7a:21:fd:f9:e6:83:7b:1c:db:b0:40:c3:94:bf:
         f8:04:6c:7e:49:9e:c5:f3:9d:41:2c:40:b0:db:f2:e7:82:b0:
         82:b6:2b:ac:3e:ae:ff:67:b5:57:6b:96:5e:6c:35:e4:dd:b2:
         b3:d5:d6:59:8a:ca:e0:0c:65:98:b3:16:12:ab:cd:0b:13:c9:
         7b:b8:73:e7:ea:9d:a2:64:ee:f8:4e:43:26:c5:3f:e3:ff:36:
         5c:29:63:66:c3:e9:c9:3c:6a:cc:87:98:b6:94:d7:5e:f4:e8:
         7d:92:b5:ac:9b:1e:45:84:b8:27:e5:61:98:83:6d:d5:02:71:
         1b:b0:3d:f6:31:66:2b:d6:b5:90:8c:35:f8:13:85:66:17:45:
         56:78:51:cf:6b:ad:8d:f6:e9:d9:19:64:a9:76:72:47:b1:74:
         a5:9c:d3:4e:df:b6:e1:6e:27:9f:2c:cf:61:13:9d:10:a3:cc:
         96:7b:8a:67:68:58:07:37:f6:76:32:1c:1d:73:91:75:4a:7c:
         1c:fe:23:67:85:75:ff:ed:90:26:16:77:40:64:aa:c2:4e:af:
         9b:3b:06:3b:0f:10:85:aa:e3:3c:99:21:b0:86:9d:b8:f9:c3:
         d5:8d:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org