Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/83d5300cb72f30d1ebc898a18e7217aaa2a3317e.roa
File:                     83d5300cb72f30d1ebc898a18e7217aaa2a3317e.roa (raw, json)
Hash identifier:          mr06xBZGp7AAWPAgdzYhNNHgtROCJXq7QFjWVCMNk4U=
Subject key identifier:   1D:8C:18:E0:95:21:C5:0B:F8:02:D0:16:F5:75:7C:E3:69:D6:31:37
Certificate issuer:       /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial:       2A078C
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/83d5300cb72f30d1ebc898a18e7217aaa2a3317e.roa
Signing time:             Tue 30 Jan 2024 15:01:05 +0000
ROA not before:           Tue 30 Jan 2024 15:00:49 +0000
ROA not after:            Tue 30 Jan 2029 15:00:49 +0000
asID:                     265776
IP address blocks:        200.50.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2754444 (0x2a078c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
        Validity
            Not Before: Jan 30 15:00:49 2024 GMT
            Not After : Jan 30 15:00:49 2029 GMT
        Subject: CN=83d5300cb72f30d1ebc898a18e7217aaa2a3317e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:5b:09:b2:a6:0a:fe:95:2c:7c:f3:f1:8e:
                    7a:88:cc:63:ce:f0:d5:1e:c5:6b:cc:ff:b2:22:dd:
                    2a:78:a7:f3:19:9d:c6:e1:50:27:c2:b0:7e:61:dd:
                    13:6d:04:12:02:68:17:64:f5:ee:74:5e:e0:ba:ab:
                    38:06:5e:1c:b8:32:c5:f0:f8:82:d0:c9:58:99:d9:
                    37:88:c9:43:c1:fe:8f:e9:99:c1:a1:b9:e0:b7:84:
                    89:4a:e6:22:03:0e:f5:8b:31:c0:16:fb:54:96:eb:
                    e6:ea:7a:d5:d9:81:67:d0:c2:71:f9:a2:ce:35:6c:
                    4d:47:b5:d2:85:bc:6c:40:61:4b:0d:4b:9e:8e:de:
                    0c:fa:47:c0:1b:16:8b:38:16:d8:a3:e9:16:44:4f:
                    19:65:34:f5:93:fe:b3:6c:54:6f:ae:d5:c8:84:79:
                    09:0c:af:4b:39:de:1b:59:e2:5c:c4:a0:bb:df:a2:
                    95:5b:f4:1b:47:49:c7:7c:0c:f6:43:43:29:af:cc:
                    83:b9:d2:e1:f2:cc:80:cd:bc:95:c4:1c:65:b4:d9:
                    6d:cb:98:b2:3e:43:23:83:1f:77:ae:97:a8:9e:05:
                    dd:77:18:00:11:42:6f:50:71:14:e7:1c:d7:55:85:
                    19:9a:40:05:76:fc:2b:4a:ff:92:cd:60:7d:19:e0:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8C:18:E0:95:21:C5:0B:F8:02:D0:16:F5:75:7C:E3:69:D6:31:37
            X509v3 Authority Key Identifier:
                keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/83d5300cb72f30d1ebc898a18e7217aaa2a3317e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:14:36:37:a0:f0:45:91:de:07:e4:3d:aa:79:34:ca:4b:07:
         c2:10:31:b9:51:ae:43:b5:ca:2e:e8:05:37:f4:66:85:1f:e5:
         b0:7c:85:f8:0d:77:96:1a:85:48:15:35:6c:0a:9a:e1:7c:32:
         97:9c:8f:7a:62:51:fb:ba:b6:82:32:df:1d:75:88:92:ea:c8:
         49:bc:eb:b6:52:40:23:45:22:4c:12:ba:e9:4b:88:a0:b1:d0:
         41:5d:8f:72:23:dd:83:34:fd:13:13:79:15:b4:1f:4e:95:78:
         a6:2f:8a:fe:87:f5:f1:20:18:b8:a7:c0:b7:9e:37:f1:55:63:
         17:97:56:b7:ad:b2:80:ea:87:37:b8:0c:52:4a:66:d6:f9:f8:
         b8:20:de:8d:79:1d:e8:80:4e:87:ab:15:ba:41:ff:6a:18:39:
         a0:f0:9f:bc:5b:4b:85:f2:bf:b7:c7:0e:d3:b5:92:9e:4a:71:
         77:e2:1e:95:f8:1f:8f:fa:c1:56:b5:bb:66:2e:93:43:24:8a:
         8d:60:01:17:fd:44:45:65:32:47:51:be:8f:3c:96:33:01:09:
         f9:1d:77:4c:85:4c:39:68:58:d9:4e:16:fa:dd:0e:e8:e2:3a:
         87:ca:b9:c4:d2:34:9c:c9:2d:06:19:85:4e:16:32:58:52:a8:
         48:65:a5:da
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKgeMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy
OWQyOGE1NzY5YWYxZTE5ODdhYWRhNTJkNGQ5YWMzYmVjMzliNjgwHhcNMjQwMTMw
MTUwMDQ5WhcNMjkwMTMwMTUwMDQ5WjAzMTEwLwYDVQQDEyg4M2Q1MzAwY2I3MmYz
MGQxZWJjODk4YTE4ZTcyMTdhYWEyYTMzMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAseZbCbKmCv6VLHzz8Y56iMxjzvDVHsVrzP+yIt0qeKfzGZ3G
4VAnwrB+Yd0TbQQSAmgXZPXudF7guqs4Bl4cuDLF8PiC0MlYmdk3iMlDwf6P6ZnB
obngt4SJSuYiAw71izHAFvtUluvm6nrV2YFn0MJx+aLONWxNR7XShbxsQGFLDUue
jt4M+kfAGxaLOBbYo+kWRE8ZZTT1k/6zbFRvrtXIhHkJDK9LOd4bWeJcxKC736KV
W/QbR0nHfAz2Q0Mpr8yDudLh8syAzbyVxBxltNlty5iyPkMjgx93rpeongXddxgA
EUJvUHEU5xzXVYUZmkAFdvwrSv+SzWB9GeCO/wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB2MGOCVIcUL+ALQFvV1fONp1jE3MB8GA1UdIwQYMBaAFEN2esi5xEbkE92i
tcmFOhdopOHFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTI5ZDI4
YTU3NjlhZjFlMTk4N2FhZGE1MmQ0ZDlhYzNiZWMzOWI2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzgzZDUzMDBjYjcyZjMwZDFlYmM4OThhMThlNzIxN2FhYTJhMzMxN2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvNTI5ZDI4YTU3NjlhZjFlMTk4N2FhZGE1MmQ0ZDlhYzNiZWMzOWI2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgyqjANBgkqhkiG9w0BAQsFAAOCAQEASBQ2N6DwRZHeB+Q9
qnk0yksHwhAxuVGuQ7XKLugFN/RmhR/lsHyF+A13lhqFSBU1bAqa4Xwyl5yPemJR
+7q2gjLfHXWIkurISbzrtlJAI0UiTBK66UuIoLHQQV2PciPdgzT9ExN5FbQfTpV4
pi+K/of18SAYuKfAt5438VVjF5dWt62ygOqHN7gMUkpm1vn4uCDejXkd6IBOh6sV
ukH/ahg5oPCfvFtLhfK/t8cO07WSnkpxd+Ielfgfj/rBVrW7Zi6TQySKjWABF/1E
RWUyR1G+jzyWMwEJ+R13TIVMOWhY2U4W+t0O6OI6h8q5xNI0nMktBhmFThYyWFKo
SGWl2g==
-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:32 2024 by rpki-client on console-fra.rpki-client.org