Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b8b8b02fa442e022f61b079e9c2cd5156f8c5169.roa
File:                     b8b8b02fa442e022f61b079e9c2cd5156f8c5169.roa (raw, json)
Hash identifier:          ABOrKUj8pZ7A2fDg0lmvVMOJKpD+ZeSZQek3GQGM5ME=
Subject key identifier:   BB:3B:8F:62:44:96:5F:7E:EB:DE:65:FE:6B:9C:3E:69:35:74:7A:3A
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2A9EC9
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b8b8b02fa442e022f61b079e9c2cd5156f8c5169.roa
Signing time:             Thu 15 Feb 2024 20:41:35 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     52328
IP address blocks:        200.123.52.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2793161 (0x2a9ec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=b8b8b02fa442e022f61b079e9c2cd5156f8c5169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:2e:d3:24:dc:95:4d:c7:18:0a:14:16:b5:
                    44:aa:df:81:e5:a2:3e:a7:b7:6d:51:a3:6e:7e:8a:
                    0c:6e:7b:22:d9:d4:25:e6:16:a5:10:19:67:51:ad:
                    e6:35:f2:dc:9d:f9:61:35:f4:7c:f2:4e:ce:09:cb:
                    a7:1b:ab:b3:16:15:c4:04:22:0b:e1:69:95:17:ce:
                    31:6a:f5:5f:ba:1c:a3:db:97:cd:a9:08:d9:d9:4e:
                    18:df:97:9e:17:eb:7d:cf:29:f7:cd:94:a0:28:62:
                    fe:fc:d3:36:7f:56:4f:74:eb:2a:a4:c6:40:af:47:
                    8e:f2:75:42:a5:68:ac:b9:d8:eb:ab:75:00:02:15:
                    25:23:04:a2:64:93:f2:71:91:c1:19:65:c8:94:f0:
                    79:2b:1e:63:ac:0c:11:c9:78:cc:a6:81:b9:9b:ac:
                    d4:4e:c1:14:c3:8a:79:9d:45:7b:50:08:c8:96:89:
                    70:3a:8f:67:bd:db:67:53:49:3d:2f:25:5f:b9:67:
                    ae:e2:e6:71:ab:ce:0d:a0:6e:6b:11:c2:ce:e2:ef:
                    44:8b:e7:7d:02:6d:1d:36:3e:5c:a7:b4:4b:5f:64:
                    27:fd:d1:c1:9c:0a:ed:c6:aa:21:76:d2:bf:75:7f:
                    7f:c2:c1:4d:dc:da:3b:b8:c0:af:40:71:58:b9:65:
                    e6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3B:8F:62:44:96:5F:7E:EB:DE:65:FE:6B:9C:3E:69:35:74:7A:3A
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b8b8b02fa442e022f61b079e9c2cd5156f8c5169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:9d:84:2d:55:1d:6f:c1:ea:ac:90:36:28:fc:8e:a9:c9:3a:
         e3:8c:61:2c:d4:09:42:c3:ca:46:62:30:8e:b6:fa:4e:60:44:
         fa:c6:ae:e9:92:3d:89:b6:9c:37:8f:cf:ec:4d:b1:71:6d:85:
         d0:4f:70:52:2f:6e:06:b2:c0:92:cc:47:04:69:8c:75:ca:0b:
         4e:4c:9c:b9:b0:86:8f:09:41:39:3e:64:4a:03:7a:1f:9f:3b:
         cf:c4:68:1c:3a:4f:69:fd:cd:17:48:72:67:9f:84:f0:ef:1f:
         86:52:b6:2d:0b:f5:91:88:1e:35:2e:e8:46:d0:b0:c4:2d:d2:
         c9:9b:77:37:b8:70:18:d3:6f:de:83:9f:2e:d7:99:f7:a8:85:
         19:35:52:e2:c9:e2:9f:f1:84:41:ac:e3:43:e0:bd:d9:56:0e:
         4f:de:6e:90:8e:ab:94:97:6e:7c:17:b3:30:ef:80:36:24:bf:
         9f:ba:c1:de:97:94:3f:65:3f:8c:cb:fa:01:23:07:78:89:73:
         0f:10:f2:55:72:c5:96:64:22:07:3b:a2:ca:c3:d0:5a:18:14:
         83:60:45:2d:bc:96:f5:fc:bd:d4:dd:61:ad:33:d1:ca:1e:c3:
         70:db:a4:e0:0d:04:4c:ab:15:cb:af:02:06:2c:29:cc:b5:5f:
         7e:50:fa:50
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKp7JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NzhlNzM1Y2JhM2VlNmRlNGQ3Nzg5MjQ3Y2MwOWE2YWQ5YmMyYjIwHhcNMjQwMjE1
MjA0MTI0WhcNMjkwMjE1MjA0MTI0WjAzMTEwLwYDVQQDEyhiOGI4YjAyZmE0NDJl
MDIyZjYxYjA3OWU5YzJjZDUxNTZmOGM1MTY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkFou0yTclU3HGAoUFrVEqt+B5aI+p7dtUaNufooMbnsi2dQl
5halEBlnUa3mNfLcnflhNfR88k7OCcunG6uzFhXEBCIL4WmVF84xavVfuhyj25fN
qQjZ2U4Y35eeF+t9zyn3zZSgKGL+/NM2f1ZPdOsqpMZAr0eO8nVCpWisudjrq3UA
AhUlIwSiZJPycZHBGWXIlPB5Kx5jrAwRyXjMpoG5m6zUTsEUw4p5nUV7UAjIlolw
Oo9nvdtnU0k9LyVfuWeu4uZxq84NoG5rEcLO4u9Ei+d9Am0dNj5cp7RLX2Qn/dHB
nArtxqohdtK/dX9/wsFN3No7uMCvQHFYuWXm6QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLs7j2JEll9+695l/mucPmk1dHo6MB8GA1UdIwQYMBaAFMCCc9M3OBeeSXY/
BckTmZOOOXWwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE3OGU3
MzVjYmEzZWU2ZGU0ZDc3ODkyNDdjYzA5YTZhZDliYzJiMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2I4YjhiMDJmYTQ0MmUwMjJmNjFiMDc5ZTljMmNkNTE1NmY4YzUxNjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvYzE3OGU3MzVjYmEzZWU2ZGU0ZDc3ODkyNDdjYzA5YTZhZDliYzJi
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAch7NDANBgkqhkiG9w0BAQsFAAOCAQEAUJ2ELVUdb8HqrJA2
KPyOqck644xhLNQJQsPKRmIwjrb6TmBE+sau6ZI9ibacN4/P7E2xcW2F0E9wUi9u
BrLAksxHBGmMdcoLTkycubCGjwlBOT5kSgN6H587z8RoHDpPaf3NF0hyZ5+E8O8f
hlK2LQv1kYgeNS7oRtCwxC3SyZt3N7hwGNNv3oOfLteZ96iFGTVS4snin/GEQazj
Q+C92VYOT95ukI6rlJdufBezMO+ANiS/n7rB3peUP2U/jMv6ASMHeIlzDxDyVXLF
lmQiBzuiysPQWhgUg2BFLbyW9fy91N1hrTPRyh7DcNuk4A0ETKsVy68CBiwpzLVf
flD6UA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org