Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/bae39324c2fcec2dc9734203008ebcecb0b286fb.roa
File:                     bae39324c2fcec2dc9734203008ebcecb0b286fb.roa (raw, json)
Hash identifier:          75vgPNWEJX02/UJEJ+0kwXFKATyONmmE2v13d+H0nDU=
Subject key identifier:   B1:23:2C:23:2C:D0:BC:66:3F:8B:2B:33:2A:6D:91:4C:FE:48:9D:99
Certificate issuer:       /CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
Certificate serial:       272D35
Authority key identifier: 44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/bae39324c2fcec2dc9734203008ebcecb0b286fb.roa
Signing time:             Thu 11 Jan 2024 23:16:30 +0000
ROA not before:           Thu 11 Jan 2024 23:16:30 +0000
ROA not after:            Sun 11 Jan 2026 23:16:30 +0000
asID:                     265657
IP address blocks:        170.246.84.0/22 maxlen: 24
                          2803:46c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2567477 (0x272d35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
        Validity
            Not Before: Jan 11 23:16:30 2024 GMT
            Not After : Jan 11 23:16:30 2026 GMT
        Subject: CN=bae39324c2fcec2dc9734203008ebcecb0b286fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:ce:8e:71:25:8a:be:d0:7b:32:52:dc:4c:
                    5e:b0:cb:ee:2d:99:4f:86:81:c9:51:a9:38:b4:a3:
                    08:84:91:96:a9:0b:9a:48:96:07:c7:91:c7:57:0d:
                    ce:b9:8a:32:96:8f:23:ac:83:3f:88:d6:f0:24:35:
                    70:03:a0:c2:08:48:26:5a:02:d7:8f:75:9a:55:77:
                    00:31:46:88:c1:f2:14:2b:bd:36:d9:6a:27:c1:ea:
                    8d:42:52:fa:9d:b0:03:d1:98:3b:37:33:86:da:ae:
                    59:29:b1:a8:8b:f0:68:d5:b7:fa:ea:3d:61:76:5a:
                    fa:4a:1c:fa:e5:0a:03:a2:1c:c6:66:53:54:3a:ec:
                    ce:93:0a:0c:ec:aa:0f:1e:00:17:c9:b7:14:68:b1:
                    0c:12:23:d1:ad:8a:36:75:ec:e0:60:f0:6d:d8:20:
                    51:70:4c:5e:8e:7f:05:13:3b:b7:37:ee:e9:3c:ec:
                    eb:2b:a2:06:cb:a7:93:58:f2:33:f4:e5:ee:c5:57:
                    34:17:79:a2:85:f0:38:01:bc:6c:3e:b7:66:d6:fb:
                    3e:e2:38:b5:fe:3a:8b:f0:4c:13:bf:5c:c9:c0:30:
                    b2:7c:97:ce:92:1a:1b:66:d4:eb:58:7c:71:8d:df:
                    14:8c:42:44:31:14:a1:4a:1b:60:8b:0e:d6:b3:79:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:23:2C:23:2C:D0:BC:66:3F:8B:2B:33:2A:6D:91:4C:FE:48:9D:99
            X509v3 Authority Key Identifier:
                keyid:44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/bae39324c2fcec2dc9734203008ebcecb0b286fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.84.0/22
                IPv6:
                  2803:46c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:c2:72:79:e8:9e:dc:61:f5:74:18:06:2f:b0:18:3e:90:91:
         e9:54:25:1a:ac:06:ee:88:8a:6d:8b:dd:9d:02:e7:40:24:4b:
         3f:5a:e6:eb:18:53:b7:95:cd:52:53:33:8e:2e:d9:57:f9:6d:
         49:01:3c:af:75:8a:bb:25:ca:04:6c:e1:ae:e1:fe:ba:71:f5:
         e3:7f:30:39:22:7a:23:22:f9:7b:cb:6d:c5:ad:18:b8:4d:06:
         e3:94:ab:c9:a6:a5:35:e4:c5:78:94:5f:50:79:d4:e3:5d:6b:
         ac:b1:ee:79:b9:03:44:0b:08:be:01:31:6f:f6:3b:1e:1c:39:
         c5:44:2d:a0:b5:18:34:49:81:36:2a:79:ea:c8:6f:00:36:85:
         55:c4:39:b0:a9:fd:56:eb:0f:b7:ec:aa:0f:04:ef:ec:c8:e4:
         5d:81:54:d1:33:be:f4:53:f4:cf:26:13:a2:84:67:e2:22:d3:
         77:e9:dc:24:41:e6:38:c2:91:ad:4f:d3:1b:30:98:6d:a9:d2:
         83:d5:88:b9:17:13:9d:95:56:e3:0e:09:99:20:db:fc:fc:5f:
         fb:22:28:db:d0:86:9a:16:06:4e:ac:33:46:79:16:d3:4c:61:
         3d:14:95:a6:84:a4:bb:41:93:82:70:c9:ae:8f:2d:7a:47:9f:
         73:11:9b:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJy01MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg3
N2FjNDA5YzE1YWI5YWZiMjNlYTBlMmQzZjFjN2M2M2I3NmM5OGIwHhcNMjQwMTEx
MjMxNjMwWhcNMjYwMTExMjMxNjMwWjAzMTEwLwYDVQQDEyhiYWUzOTMyNGMyZmNl
YzJkYzk3MzQyMDMwMDhlYmNlY2IwYjI4NmZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArRPOjnElir7QezJS3ExesMvuLZlPhoHJUak4tKMIhJGWqQua
SJYHx5HHVw3OuYoylo8jrIM/iNbwJDVwA6DCCEgmWgLXj3WaVXcAMUaIwfIUK702
2WonweqNQlL6nbAD0Zg7NzOG2q5ZKbGoi/Bo1bf66j1hdlr6Shz65QoDohzGZlNU
OuzOkwoM7KoPHgAXybcUaLEMEiPRrYo2dezgYPBt2CBRcExejn8FEzu3N+7pPOzr
K6IGy6eTWPIz9OXuxVc0F3mihfA4AbxsPrdm1vs+4ji1/jqL8EwTv1zJwDCyfJfO
khobZtTrWHxxjd8UjEJEMRShShtgiw7Ws3nltwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFLEjLCMs0LxmP4srMyptkUz+SJ2ZMB8GA1UdIwQYMBaAFEQzr0ysMsCHxxgO
bc42QZn7QTE5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODc3YWM0
MDljMTVhYjlhZmIyM2VhMGUyZDNmMWM3YzYzYjc2Yzk4Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTBkMzc5OTItODZiNy00NGU4LWIwOTctNDc3ZGQz
NWQzNWY0L2JhZTM5MzI0YzJmY2VjMmRjOTczNDIwMzAwOGViY2VjYjBiMjg2ZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MGQzNzk5Mi04NmI3LTQ0ZTgtYjA5Ny00Nzdk
ZDM1ZDM1ZjQvODc3YWM0MDljMTVhYjlhZmIyM2VhMGUyZDNmMWM3YzYzYjc2Yzk4
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqr2VDANBAIAAjAHAwUAKANGwDANBgkqhkiG9w0BAQsFAAOC
AQEAKcJyeeie3GH1dBgGL7AYPpCR6VQlGqwG7oiKbYvdnQLnQCRLP1rm6xhTt5XN
UlMzji7ZV/ltSQE8r3WKuyXKBGzhruH+unH1438wOSJ6IyL5e8ttxa0YuE0G45Sr
yaalNeTFeJRfUHnU411rrLHuebkDRAsIvgExb/Y7Hhw5xUQtoLUYNEmBNip56shv
ADaFVcQ5sKn9VusPt+yqDwTv7MjkXYFU0TO+9FP0zyYTooRn4iLTd+ncJEHmOMKR
rU/TGzCYbanSg9WIuRcTnZVW4w4JmSDb/Pxf+yIo29CGmhYGTqwzRnkW00xhPRSV
poSku0GTgnDJro8tekefcxGbyQ==
-----END CERTIFICATE-----