Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/a4727cc2536244a7c103c1b1ba8ced8aeb1d20b5.roa
File:                     a4727cc2536244a7c103c1b1ba8ced8aeb1d20b5.roa (raw, json)
Hash identifier:          +HD3t62E94+4B9fD5Pc7+oPKnJj/HlJRk1t609unGls=
Subject key identifier:   89:93:BC:17:72:8C:A5:67:F1:B1:F0:04:29:5E:39:B2:BC:15:93:45
Certificate issuer:       /CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
Certificate serial:       2513A7
Authority key identifier: 48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/a4727cc2536244a7c103c1b1ba8ced8aeb1d20b5.roa
Signing time:             Fri 03 Nov 2023 19:07:22 +0000
ROA not before:           Fri 03 Nov 2023 19:07:22 +0000
ROA not after:            Mon 03 Nov 2025 19:07:22 +0000
asID:                     263781
IP address blocks:        200.123.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429863 (0x2513a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
        Validity
            Not Before: Nov  3 19:07:22 2023 GMT
            Not After : Nov  3 19:07:22 2025 GMT
        Subject: CN=a4727cc2536244a7c103c1b1ba8ced8aeb1d20b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:3e:8e:3f:96:05:52:08:71:56:0c:fb:4c:
                    90:79:a4:11:2d:46:9e:88:33:43:26:51:83:5a:c7:
                    a5:04:a7:d9:ab:fb:1b:55:ec:fa:07:15:05:8b:20:
                    23:73:32:a5:f3:5c:31:d8:45:28:03:03:0d:b0:6a:
                    43:3e:be:4e:3a:ab:8e:26:2b:31:d0:7d:56:ee:24:
                    bc:23:59:0e:5d:9e:8b:a0:69:43:df:e9:01:f6:27:
                    f9:28:8e:1e:0c:00:16:4d:f8:e5:7f:31:6a:05:5e:
                    87:77:23:97:ff:d8:63:7d:29:78:59:04:23:b2:5b:
                    55:2c:2b:93:6f:73:35:3b:e6:05:a1:f7:17:09:c5:
                    e9:71:0f:76:4b:f3:0b:0a:3a:3c:25:b8:16:16:8a:
                    1f:e2:59:37:7a:21:b3:84:07:08:ee:3d:84:84:b4:
                    13:1b:f4:71:10:ae:d5:8d:c5:0f:4e:f4:1e:02:e4:
                    a9:f6:e8:33:18:18:30:2f:e9:ab:06:f0:e4:d0:c2:
                    69:04:1d:d5:8f:20:7d:2e:00:98:05:e5:9d:83:bc:
                    36:82:0c:81:f8:ea:31:ad:0c:cf:d4:6e:cf:83:3c:
                    30:4a:8f:90:05:88:ef:d5:19:21:a5:f8:af:86:e0:
                    8a:43:70:d7:46:bd:b2:85:13:b0:85:6a:d5:07:91:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:93:BC:17:72:8C:A5:67:F1:B1:F0:04:29:5E:39:B2:BC:15:93:45
            X509v3 Authority Key Identifier:
                keyid:48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/a4727cc2536244a7c103c1b1ba8ced8aeb1d20b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/29194fbdbd11c97181ad21546cc92fc2d0e3857a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:bc:ef:8f:54:47:86:0a:30:3e:3b:9a:3c:2b:28:e4:e7:
         cc:71:8a:0c:12:6f:0e:c1:0f:33:a0:60:da:94:4a:ca:62:de:
         fb:a3:cc:40:25:06:cc:40:c3:7b:e0:3b:f6:31:f1:32:af:6a:
         60:3b:f5:5d:42:62:1c:0a:8f:c0:5d:4e:cc:e8:a6:e1:03:ed:
         24:c7:21:ab:be:81:25:8a:cd:cd:4e:0c:8f:9d:fe:cf:30:07:
         6f:3d:30:03:ef:57:ae:d7:ee:f0:3e:d7:98:a8:c7:1d:f4:dd:
         73:15:4e:7b:83:21:60:89:33:40:cd:d9:d7:b5:e0:b4:aa:de:
         1a:27:87:60:78:45:fd:c0:c6:61:27:80:60:aa:ff:1f:90:3d:
         cd:d0:91:d2:b6:41:e4:c3:d0:dd:79:bd:be:48:c0:c3:d6:7a:
         e4:ae:fe:5d:dd:aa:95:e4:d8:81:74:92:45:3a:f5:22:6f:31:
         5f:00:53:28:a4:20:d6:b1:b0:3e:86:bf:60:4b:08:70:f7:7a:
         38:8a:9f:03:16:80:b8:db:c7:58:49:e3:5f:23:ba:8a:a5:7c:
         50:e6:a8:b4:7a:2a:cf:96:08:b4:e1:08:09:ef:23:c2:8d:8e:
         2c:08:fe:a7:7e:2b:77:7b:b2:a6:a0:a8:5b:2f:62:cb:ce:93:
         d1:ec:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org