Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8c8118af17b5f391b0d88f72b2cba05f08cfa9a7.roa
File:                     8c8118af17b5f391b0d88f72b2cba05f08cfa9a7.roa (raw, json)
Hash identifier:          873NhkLyNgGDfWxV9WxiYdC5scJnTZFB2tEiGy2Vxtg=
Subject key identifier:   53:01:92:E3:87:AB:36:3C:76:69:7E:C2:F3:1C:0B:10:B8:CE:2F:50
Certificate issuer:       /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial:       2A0A17
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8c8118af17b5f391b0d88f72b2cba05f08cfa9a7.roa
Signing time:             Tue 30 Jan 2024 15:01:07 +0000
ROA not before:           Tue 30 Jan 2024 15:00:49 +0000
ROA not after:            Tue 30 Jan 2029 15:00:49 +0000
asID:                     10697
IP address blocks:        200.123.48.0/24 maxlen: 24
                          200.50.160.0/23 maxlen: 24
                          200.50.164.0/24 maxlen: 24
                          200.50.168.0/24 maxlen: 24
                          200.50.173.0/24 maxlen: 24
                          2800:820::/32 maxlen: 48
                          2800:820:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2755095 (0x2a0a17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
        Validity
            Not Before: Jan 30 15:00:49 2024 GMT
            Not After : Jan 30 15:00:49 2029 GMT
        Subject: CN=8c8118af17b5f391b0d88f72b2cba05f08cfa9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a4:f4:f1:c6:3d:c7:06:59:b7:63:a1:b1:08:
                    c2:32:b8:e9:fc:5b:00:c8:ce:ac:8d:cd:4f:8a:53:
                    59:d4:96:e4:21:f1:f0:1d:d6:85:4e:02:0c:13:92:
                    01:cf:3b:44:01:7d:9a:68:8b:27:08:a4:03:18:20:
                    eb:d2:38:c8:c3:ed:36:b5:4a:e5:58:bb:c2:24:32:
                    41:ee:1e:8b:ca:70:53:52:cf:06:70:aa:5b:f0:0e:
                    5d:d9:16:fe:90:b4:8e:f2:56:58:06:74:8e:45:d9:
                    6a:f3:73:13:97:59:e8:85:4b:bc:3c:f8:fe:6a:58:
                    de:6b:b3:56:fb:95:96:6a:6a:c2:9b:6d:5a:06:4f:
                    e3:d8:e2:a9:9c:84:bb:77:75:a6:b2:67:df:65:4e:
                    f7:4c:48:a3:fa:5b:71:ec:8c:64:e0:97:8b:b9:d5:
                    9b:c8:f2:0c:2e:af:58:2e:82:e1:b8:e2:7f:49:bf:
                    f0:25:85:39:53:57:b4:6d:5d:bd:0e:7d:1e:6c:8e:
                    e7:83:44:98:aa:da:d5:96:24:f1:dc:da:a8:ee:56:
                    52:b9:b8:ea:8c:be:21:de:b4:d5:d7:ca:78:99:da:
                    19:ba:61:52:47:a0:34:f3:ce:75:95:ea:71:5a:57:
                    34:a6:ce:13:ed:a6:7f:c0:91:a6:e3:0e:67:eb:9e:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:01:92:E3:87:AB:36:3C:76:69:7E:C2:F3:1C:0B:10:B8:CE:2F:50
            X509v3 Authority Key Identifier:
                keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8c8118af17b5f391b0d88f72b2cba05f08cfa9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.160.0/23
                  200.50.164.0/24
                  200.50.168.0/24
                  200.50.173.0/24
                  200.123.48.0/24
                IPv6:
                  2800:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:68:b8:42:49:ab:86:e3:9c:fb:1c:5e:3c:95:4d:d5:fc:e8:
         56:18:4c:4b:35:1c:56:47:d0:75:fd:50:61:94:dd:48:17:32:
         53:33:30:96:a1:7d:32:70:ad:47:05:a0:8a:b1:f1:1e:cc:55:
         1c:8a:7a:ca:1a:0d:05:20:58:88:3a:5e:a0:0a:c2:8b:6b:15:
         c4:12:e8:9d:05:81:90:9f:5b:bc:dc:cd:fc:63:15:86:b2:bc:
         25:5c:2f:ab:61:58:dd:0a:a1:1a:73:53:be:28:fa:b4:61:82:
         c5:d5:c5:a4:fc:2a:d2:08:2c:e5:48:28:88:e6:e2:da:31:70:
         a5:7e:61:85:d0:c5:16:75:f7:62:90:ef:da:6a:11:43:15:d6:
         34:b5:2e:cd:fb:29:7c:63:ee:47:b6:b7:97:f1:33:29:8d:25:
         fa:b8:0a:4b:bc:d1:91:0e:84:b3:a5:cf:bd:8b:6d:cb:2e:aa:
         a9:58:81:a1:c1:f9:f3:62:6d:b6:97:6e:b6:0c:46:4b:8f:21:
         79:53:b0:ae:9f:87:da:8a:10:4d:31:38:81:87:70:44:5b:23:
         35:89:b4:b1:8f:bf:ff:c1:cd:bb:ce:02:47:2d:d4:c1:dd:63:
         4b:93:cf:db:06:34:2e:57:5b:ae:b8:1c:4c:27:35:98:39:2a:
         84:7e:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----