Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2edd07eabffe0be09a8e8e2643b5dfde58e0c433.roa
File:                     2edd07eabffe0be09a8e8e2643b5dfde58e0c433.roa (raw, json)
Hash identifier:          1XAuTEugXJ8dlvk4Lc8IpIGhElrnOp7vpMj4/2aDh3g=
Subject key identifier:   F8:16:AA:92:07:76:47:3A:D9:F3:29:CC:7A:33:E8:19:8C:16:97:55
Certificate issuer:       /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial:       277C39
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2edd07eabffe0be09a8e8e2643b5dfde58e0c433.roa
Signing time:             Tue 07 Nov 2023 16:00:48 +0000
ROA not before:           Tue 07 Nov 2023 16:00:38 +0000
ROA not after:            Tue 07 Nov 2028 16:00:38 +0000
asID:                     272885
IP address blocks:        200.123.50.0/24 maxlen: 24
                          200.123.34.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2587705 (0x277c39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
        Validity
            Not Before: Nov  7 16:00:38 2023 GMT
            Not After : Nov  7 16:00:38 2028 GMT
        Subject: CN=2edd07eabffe0be09a8e8e2643b5dfde58e0c433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:9f:d1:8b:c1:3a:66:28:ba:3d:ba:10:42:
                    a2:f2:01:35:a2:2f:fb:0c:d7:5a:81:15:cf:f9:d4:
                    d5:4f:53:44:81:d9:60:6e:4c:08:7e:88:b0:8b:8d:
                    e8:b6:da:f3:b8:b1:c7:9b:b0:ab:e9:a7:58:f1:f5:
                    40:f0:31:e3:7f:50:a9:9c:f5:a9:bb:5e:da:b7:4b:
                    bf:83:30:b2:9b:df:86:37:da:60:ce:66:ab:08:be:
                    9d:8b:5e:a9:cf:08:4d:a8:57:80:36:a6:3b:69:e8:
                    43:6c:49:0a:dc:61:65:79:33:55:2a:54:71:82:8e:
                    cd:34:d1:09:fb:c0:4a:50:8a:fa:3b:03:97:f1:f4:
                    43:8c:97:3c:6b:2f:5e:eb:c5:f9:13:b7:a5:26:98:
                    72:de:bd:bf:36:5e:3b:28:4d:d1:e7:b5:a1:13:60:
                    47:d6:5e:f9:bc:0c:16:14:e0:ce:fc:cf:44:42:97:
                    7d:b7:e3:03:00:94:97:ca:51:29:53:b0:59:33:d6:
                    a4:18:c6:85:b3:fa:ea:76:86:ce:ac:b8:28:47:73:
                    37:c3:05:74:37:49:19:50:a3:a4:8a:57:04:e5:41:
                    1c:19:42:d4:14:04:bd:d7:1c:10:74:9e:b6:3e:dc:
                    da:22:e7:0c:4a:e1:51:fa:66:00:26:7f:72:3c:4b:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:16:AA:92:07:76:47:3A:D9:F3:29:CC:7A:33:E8:19:8C:16:97:55
            X509v3 Authority Key Identifier:
                keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2edd07eabffe0be09a8e8e2643b5dfde58e0c433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.34.0/23
                  200.123.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:82:f3:87:a9:47:c7:ad:ba:eb:8b:3e:8c:be:1f:e4:e2:ab:
         bc:8e:33:57:f6:3f:f1:b2:10:2d:7b:3e:1f:e9:5f:c8:28:ad:
         b2:b2:c0:1c:58:a4:10:9a:6d:ed:49:a4:9c:ca:c1:48:98:48:
         e0:ea:33:e5:b6:da:0a:23:6a:5b:52:cb:3d:02:3d:b6:f1:bb:
         fa:5e:f6:8d:10:79:74:3f:d7:0d:bf:06:93:4d:52:4e:76:c0:
         fc:3a:e0:81:97:dc:53:4a:2a:fe:59:9f:5f:58:5a:9e:01:c2:
         0a:f0:1d:3e:90:e2:15:34:d9:7d:b1:4c:1f:b7:be:33:b8:cc:
         8b:02:df:66:be:12:c4:56:3c:76:9c:58:f8:15:74:b7:c8:7e:
         2d:17:cb:5e:7b:b4:fe:d4:a4:3a:ff:8b:32:55:f9:be:4e:21:
         f4:4a:dc:de:80:3a:f0:83:62:9d:b6:c9:97:fa:bd:d9:27:25:
         55:a9:7e:dd:7b:7f:a9:7e:d0:43:e5:45:99:5c:b8:64:c3:93:
         60:d8:1e:51:90:42:33:2e:1d:e7:fc:05:8b:08:26:f2:96:92:
         63:97:40:66:17:42:b3:b0:03:c8:58:4a:db:6b:3f:48:34:38:
         41:ce:c5:a6:3e:f6:e2:53:63:52:a9:85:a0:71:77:20:76:66:
         65:de:d6:02
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJ3w5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
ZTRlMjI1ZThiMTRlMmUxYzc0MjBmYjRjZDJmYWQxYTAwOWUyY2UwHhcNMjMxMTA3
MTYwMDM4WhcNMjgxMTA3MTYwMDM4WjAzMTEwLwYDVQQDEygyZWRkMDdlYWJmZmUw
YmUwOWE4ZThlMjY0M2I1ZGZkZTU4ZTBjNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj/yf0YvBOmYouj26EEKi8gE1oi/7DNdagRXP+dTVT1NEgdlg
bkwIfoiwi43ottrzuLHHm7Cr6adY8fVA8DHjf1CpnPWpu17at0u/gzCym9+GN9pg
zmarCL6di16pzwhNqFeANqY7aehDbEkK3GFleTNVKlRxgo7NNNEJ+8BKUIr6OwOX
8fRDjJc8ay9e68X5E7elJphy3r2/Nl47KE3R57WhE2BH1l75vAwWFODO/M9EQpd9
t+MDAJSXylEpU7BZM9akGMaFs/rqdobOrLgoR3M3wwV0N0kZUKOkilcE5UEcGULU
FAS91xwQdJ62PtzaIucMSuFR+mYAJn9yPEu+9QIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFPgWqpIHdkc62fMpzHoz6BmMFpdVMB8GA1UdIwQYMBaAFIErJnL9fh/G3Qel
w/csCsDI66wdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjRlNGUy
MjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzJlZGQwN2VhYmZmZTBiZTA5YThlOGUyNjQzYjVkZmRlNThlMGM0MzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvYjRlNGUyMjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAch7IgMEAMh7MjANBgkqhkiG9w0BAQsFAAOCAQEABYLzh6lH
x62664s+jL4f5OKrvI4zV/Y/8bIQLXs+H+lfyCitsrLAHFikEJpt7UmknMrBSJhI
4Ooz5bbaCiNqW1LLPQI9tvG7+l72jRB5dD/XDb8Gk01STnbA/DrggZfcU0oq/lmf
X1hangHCCvAdPpDiFTTZfbFMH7e+M7jMiwLfZr4SxFY8dpxY+BV0t8h+LRfLXnu0
/tSkOv+LMlX5vk4h9Erc3oA68INinbbJl/q92SclVal+3Xt/qX7QQ+VFmVy4ZMOT
YNgeUZBCMy4d5/wFiwgm8paSY5dAZhdCs7ADyFhK22s/SDQ4Qc7Fpj724lNjUqmF
oHF3IHZmZd7WAg==
-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:32 2023 by rpki-client on console-fra.rpki-client.org