Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/987880d354ec3579ec3e609f9b2b3eaaabf4499e.roa
File:                     987880d354ec3579ec3e609f9b2b3eaaabf4499e.roa (raw, json)
Hash identifier:          Wfig1iSPz0uvi0aW7r6KPQPJc/iIp4pWKBfNYhul85Q=
Subject key identifier:   D6:B8:E9:F9:78:F0:7D:F7:2D:AC:B8:D8:FD:D0:D9:07:9C:AB:91:15
Certificate issuer:       /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial:       278FB8
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/987880d354ec3579ec3e609f9b2b3eaaabf4499e.roa
Signing time:             Tue 07 Nov 2023 16:00:56 +0000
ROA not before:           Tue 07 Nov 2023 16:00:38 +0000
ROA not after:            Tue 07 Nov 2028 16:00:38 +0000
asID:                     265776
IP address blocks:        200.50.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2592696 (0x278fb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
        Validity
            Not Before: Nov  7 16:00:38 2023 GMT
            Not After : Nov  7 16:00:38 2028 GMT
        Subject: CN=987880d354ec3579ec3e609f9b2b3eaaabf4499e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:39:8f:4d:ee:1f:b3:e6:a8:e3:76:5e:8f:
                    7f:a4:b7:8c:11:55:ff:ab:7c:55:4c:7a:ed:b8:61:
                    a2:31:42:44:19:21:c9:22:90:a2:0f:86:11:e9:36:
                    9d:73:87:27:47:eb:4e:ac:43:79:6c:1d:08:51:ea:
                    3c:74:a5:c3:23:1f:de:b7:96:40:7a:46:7f:77:f7:
                    1f:9d:d1:dc:44:83:f8:9d:1d:0f:b1:a9:15:10:53:
                    62:f8:70:8c:74:d4:36:70:f1:5e:9f:b6:3e:88:2f:
                    ba:42:77:3e:ff:61:62:49:fc:ba:39:64:81:80:f4:
                    77:3e:ba:7c:ad:ce:ac:8e:fe:0a:d6:4b:f4:45:bf:
                    f5:9c:1b:cf:09:17:fb:b0:38:c3:48:91:20:7e:d8:
                    a9:a4:bd:b9:01:3f:a2:d2:32:57:41:b2:7e:2b:b5:
                    2c:74:ef:85:3b:24:19:3f:1f:7c:02:ee:30:50:92:
                    62:08:4a:52:e2:e6:25:8b:f3:a9:46:dc:12:a9:68:
                    f0:cc:79:b6:8e:48:f0:be:34:8c:07:43:14:87:57:
                    b7:7b:15:b0:7f:e6:19:d6:ba:c8:bd:e3:9b:88:0d:
                    4a:bb:a2:d5:0f:1f:fc:bb:01:cc:23:76:32:3d:23:
                    4d:09:69:d4:1d:1e:65:09:b9:93:76:5f:dc:e1:8e:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:E9:F9:78:F0:7D:F7:2D:AC:B8:D8:FD:D0:D9:07:9C:AB:91:15
            X509v3 Authority Key Identifier:
                keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/987880d354ec3579ec3e609f9b2b3eaaabf4499e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:44:65:ba:f7:a0:eb:60:c9:bb:e3:93:e7:2d:a2:89:01:a2:
         cc:cf:43:06:a8:e9:aa:43:9c:d7:9b:3a:18:13:13:be:78:b2:
         00:ba:8e:ae:26:09:36:f5:fb:c6:06:1b:ec:16:93:a1:b6:29:
         5b:19:a7:35:f1:b7:95:fa:dd:b3:d8:cd:61:ee:5d:df:40:8c:
         11:7d:f5:57:3e:ff:46:89:3a:6d:ff:fc:ee:4b:f6:cf:3a:9c:
         45:93:04:be:a1:ef:69:68:8e:ac:52:87:34:9c:ab:72:3b:03:
         e2:04:56:c3:a0:63:13:58:3e:a0:e3:75:f0:ab:6e:58:21:53:
         3d:f4:e9:e3:5d:46:33:8b:1b:24:69:46:20:ef:74:8b:c3:a9:
         8a:90:07:4e:d1:43:ab:42:7e:cc:c9:37:20:c6:98:b5:c2:69:
         a6:83:a1:42:dd:3c:6e:8e:58:a6:2e:2a:85:69:f5:7b:87:a2:
         2f:ee:42:fe:2c:f0:f5:23:be:c2:ba:96:dc:50:4d:66:e8:52:
         cd:06:32:66:07:23:80:3c:89:ec:2a:f3:e5:75:e9:dd:3e:dd:
         60:14:77:7e:67:e2:ef:cb:0f:67:9a:86:8f:c9:f2:ac:b3:48:
         56:9c:c3:d5:5f:71:20:9b:54:ac:67:ef:cb:e6:2a:d2:6c:28:
         eb:8d:a2:bc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ4+4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
ZTRlMjI1ZThiMTRlMmUxYzc0MjBmYjRjZDJmYWQxYTAwOWUyY2UwHhcNMjMxMTA3
MTYwMDM4WhcNMjgxMTA3MTYwMDM4WjAzMTEwLwYDVQQDEyg5ODc4ODBkMzU0ZWMz
NTc5ZWMzZTYwOWY5YjJiM2VhYWFiZjQ0OTllMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnKg5j03uH7PmqON2Xo9/pLeMEVX/q3xVTHrtuGGiMUJEGSHJ
IpCiD4YR6Tadc4cnR+tOrEN5bB0IUeo8dKXDIx/et5ZAekZ/d/cfndHcRIP4nR0P
sakVEFNi+HCMdNQ2cPFen7Y+iC+6Qnc+/2FiSfy6OWSBgPR3Prp8rc6sjv4K1kv0
Rb/1nBvPCRf7sDjDSJEgftippL25AT+i0jJXQbJ+K7UsdO+FOyQZPx98Au4wUJJi
CEpS4uYli/OpRtwSqWjwzHm2jkjwvjSMB0MUh1e3exWwf+YZ1rrIveObiA1Ku6LV
Dx/8uwHMI3YyPSNNCWnUHR5lCbmTdl/c4Y6ilwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNa46fl48H33Lay42P3Q2Qecq5EVMB8GA1UdIwQYMBaAFIErJnL9fh/G3Qel
w/csCsDI66wdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjRlNGUy
MjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzk4Nzg4MGQzNTRlYzM1NzllYzNlNjA5ZjliMmIzZWFhYWJmNDQ5OWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvYjRlNGUyMjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgyqjANBgkqhkiG9w0BAQsFAAOCAQEAeURluveg62DJu+OT
5y2iiQGizM9DBqjpqkOc15s6GBMTvniyALqOriYJNvX7xgYb7BaTobYpWxmnNfG3
lfrds9jNYe5d30CMEX31Vz7/Rok6bf/87kv2zzqcRZMEvqHvaWiOrFKHNJyrcjsD
4gRWw6BjE1g+oON18KtuWCFTPfTp411GM4sbJGlGIO90i8OpipAHTtFDq0J+zMk3
IMaYtcJppoOhQt08bo5Ypi4qhWn1e4eiL+5C/izw9SO+wrqW3FBNZuhSzQYyZgcj
gDyJ7Crz5XXp3T7dYBR3fmfi78sPZ5qGj8nyrLNIVpzD1V9xIJtUrGfvy+Yq0mwo
642ivA==
-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:33 2023 by rpki-client on console-fra.rpki-client.org