Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/88dcff98aa2f11fe2382993d06f87b51b607cbff.roa
File:                     88dcff98aa2f11fe2382993d06f87b51b607cbff.roa (raw, json)
Hash identifier:          Gb66jVWC7ExCfaGjfnpJh9uv0L7YLt1iTjYjbor1kFI=
Subject key identifier:   99:6B:8E:EF:39:03:47:D0:F6:9D:B2:B7:3B:EC:09:B7:E8:E4:FE:8A
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27E26D
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/88dcff98aa2f11fe2382993d06f87b51b607cbff.roa
Signing time:             Wed 08 Nov 2023 15:00:55 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     10697
IP address blocks:        200.123.48.0/24 maxlen: 24
                          200.50.160.0/23 maxlen: 24
                          200.50.164.0/24 maxlen: 24
                          200.50.168.0/24 maxlen: 24
                          200.50.173.0/24 maxlen: 24
                          2800:820::/32 maxlen: 48
                          2800:820:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2613869 (0x27e26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=88dcff98aa2f11fe2382993d06f87b51b607cbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:be:35:aa:ac:72:31:29:54:56:c2:15:63:
                    2a:38:61:4a:f1:2a:bd:de:91:15:5a:04:11:e8:8f:
                    ea:7a:99:e8:31:91:2f:5a:bd:8b:47:a2:4a:c8:19:
                    2d:84:4a:0d:fe:2f:0e:4b:98:00:e6:35:e2:89:3f:
                    c6:2b:d5:ef:59:0e:41:c0:a6:1d:0e:96:d4:5d:fb:
                    d9:6b:9a:16:b6:2b:1a:57:6d:a9:2a:75:9f:78:c6:
                    38:e3:c3:f8:39:0b:52:e7:80:3b:67:2d:1f:c9:f1:
                    08:94:e3:fa:9b:d5:5f:fd:32:c4:85:6d:9c:8b:e2:
                    63:a5:dc:24:5b:a8:39:6b:d3:79:04:bd:f1:57:8c:
                    6d:bf:06:e3:1b:53:dc:17:ef:ca:af:76:f2:37:0b:
                    d3:78:3b:b6:c7:4f:6b:da:c7:a0:94:88:94:b1:79:
                    71:e4:65:85:7a:22:e6:7d:b5:ea:ba:3c:d6:7e:54:
                    a1:b0:ab:76:6f:92:d7:c1:69:8e:69:25:d1:98:19:
                    b9:f1:98:d6:1d:77:53:17:46:55:fa:3c:89:3e:bc:
                    46:b9:71:71:9a:60:40:1a:91:8f:ba:bc:98:92:d0:
                    1b:de:db:14:6d:4a:7d:ff:a6:3f:cb:ba:65:a6:05:
                    a7:68:59:6f:8b:0b:d2:7e:2c:2b:66:46:85:7c:48:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6B:8E:EF:39:03:47:D0:F6:9D:B2:B7:3B:EC:09:B7:E8:E4:FE:8A
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/88dcff98aa2f11fe2382993d06f87b51b607cbff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.160.0/23
                  200.50.164.0/24
                  200.50.168.0/24
                  200.50.173.0/24
                  200.123.48.0/24
                IPv6:
                  2800:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:f4:c2:39:bf:9b:92:d2:ec:2a:fa:cc:69:94:89:c4:ff:
         f8:25:a4:a5:41:a8:4a:af:cd:c3:bd:6a:28:9e:96:78:ff:be:
         eb:ff:27:37:bf:b2:1a:d3:9f:58:20:f7:4a:ae:d0:dd:69:22:
         a9:54:3a:e6:b4:77:5a:fd:91:01:34:80:d9:9e:c2:33:18:2f:
         ac:a8:40:de:ed:23:45:68:b8:15:52:f8:d4:ff:5b:4a:5c:fe:
         d9:3e:0f:10:bb:dd:eb:3f:12:8b:a6:74:42:e7:a9:0b:2e:3e:
         81:ea:c2:41:fd:b0:83:62:4b:06:04:ae:9b:76:48:f6:08:a2:
         f5:a7:42:d0:f5:05:b2:a3:f5:e3:19:61:65:85:26:50:43:3a:
         33:fb:07:2e:b8:4a:9d:fc:01:05:8e:4a:32:22:e3:d4:67:11:
         a7:bf:59:ac:0b:14:30:7a:0d:1b:0d:2c:2c:0b:3c:6f:d3:a2:
         4a:1a:ed:c5:c3:50:d2:2d:1c:f0:3a:2b:3c:c8:9d:b0:e1:dd:
         a3:dc:71:d7:a9:b5:85:f2:54:f2:4e:82:f7:fb:7b:65:e1:fc:
         15:74:5b:b9:e9:c4:59:bb:e4:4c:30:bb:4a:2c:d7:b3:16:9b:
         b6:92:55:86:16:21:bc:4c:31:22:83:21:c7:a2:e5:14:66:eb:
         08:a6:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----