Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1e3b12b32c73f74f0c49099657fe51ef4878d5c1.roa
File:                     1e3b12b32c73f74f0c49099657fe51ef4878d5c1.roa (raw, json)
Hash identifier:          nF++BkNI5v0MHGohQyc8IdgjMxdjgam6n+MhS3FQdqk=
Subject key identifier:   17:C1:83:6C:48:80:03:9B:99:18:71:77:21:AC:9D:56:C5:2E:FE:5D
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A6FEF
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1e3b12b32c73f74f0c49099657fe51ef4878d5c1.roa
Signing time:             Thu 18 Jan 2024 14:39:52 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     280001
IP address blocks:        200.0.88.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2781167 (0x2a6fef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=1e3b12b32c73f74f0c49099657fe51ef4878d5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:35:34:2e:c2:d5:70:b0:9e:48:71:ae:51:3c:
                    cc:30:41:9c:c5:a6:c5:43:a9:75:75:44:86:51:8b:
                    4d:fb:b2:82:68:c1:a7:29:ab:cf:70:22:30:f5:40:
                    57:47:99:df:ff:8b:35:29:8c:15:bc:f2:70:76:5c:
                    8f:da:80:be:6a:05:29:d6:70:07:fc:da:70:dc:16:
                    31:93:01:f8:2c:3c:07:ec:83:e2:14:3c:05:26:b2:
                    32:a6:59:d8:f5:33:b5:2c:da:68:02:77:24:90:dd:
                    fb:a3:f4:24:b9:0c:c9:78:cf:55:8a:cc:a4:bd:a5:
                    cf:be:9b:5c:42:0d:20:41:66:5d:4b:b8:4b:41:0f:
                    27:b4:47:0b:f5:a6:2a:bd:2b:03:42:16:3f:53:80:
                    ba:a2:c8:0e:10:e3:7c:ad:7e:50:d3:ed:99:45:6e:
                    67:e4:3c:7b:53:b6:a2:3c:b9:0a:c6:cb:c9:4e:83:
                    2e:d7:d5:23:9b:33:86:0f:c4:93:6f:0c:30:2d:b4:
                    6d:a6:ef:f5:15:5b:ce:98:2b:09:6f:5e:a3:7b:5e:
                    f0:00:41:4a:85:89:0e:7b:2a:c3:2f:74:12:86:97:
                    06:ed:45:86:da:35:7b:48:b3:02:01:f3:32:ac:df:
                    f6:43:76:b1:47:19:3d:9f:58:37:20:37:45:b8:ef:
                    95:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:83:6C:48:80:03:9B:99:18:71:77:21:AC:9D:56:C5:2E:FE:5D
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1e3b12b32c73f74f0c49099657fe51ef4878d5c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:db:eb:0a:1e:3d:d3:e1:e6:ed:c1:17:43:ca:67:4c:10:
         26:41:8e:f9:84:83:16:4d:f9:b6:b8:0a:7e:3c:ff:98:29:07:
         53:e3:fa:d0:5c:5b:5b:14:68:5e:62:c6:b1:ae:7a:4e:d0:cd:
         b7:ef:28:9d:5f:01:15:1d:1c:23:16:7b:e2:b9:7c:82:59:ff:
         58:ec:58:24:82:de:8d:80:cb:bd:6d:1a:39:c7:95:0c:a4:25:
         51:b6:ac:82:c4:0f:38:3b:03:86:63:87:a3:d0:0d:b0:ef:5e:
         fc:5a:44:62:5f:7c:fa:0a:59:ce:21:7f:9a:13:51:3e:dc:54:
         69:b6:61:86:58:ce:d4:a5:82:14:e4:3b:01:25:60:83:53:d8:
         2c:57:1b:bd:3a:14:2c:ff:27:ef:07:9b:97:44:3a:48:ce:d6:
         5c:f7:6b:11:15:2b:6c:b9:13:3e:79:24:b9:29:b0:76:80:b1:
         68:79:f9:c6:90:ff:16:df:fa:f0:27:04:89:5a:7a:77:56:e6:
         79:8f:90:c4:71:fd:dd:6f:1d:b0:2c:e8:57:3f:2b:0a:fd:3d:
         f4:3f:27:07:e7:ff:0b:0c:47:91:f8:2c:55:a5:32:1e:0b:78:
         31:45:50:96:e5:c9:9f:84:02:76:80:f9:6b:4f:a4:91:e4:8d:
         f5:20:dc:8c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKm/vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
MGYzMTRjMWQzYWU4YzhmYmQ2OWY5YzMxNjMzOTcyNDNmODc2NmUwHhcNMjQwMTE4
MTQzOTMxWhcNMjkwMTE4MTQzOTMxWjAzMTEwLwYDVQQDEygxZTNiMTJiMzJjNzNm
NzRmMGM0OTA5OTY1N2ZlNTFlZjQ4NzhkNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAizU0LsLVcLCeSHGuUTzMMEGcxabFQ6l1dUSGUYtN+7KCaMGn
KavPcCIw9UBXR5nf/4s1KYwVvPJwdlyP2oC+agUp1nAH/Npw3BYxkwH4LDwH7IPi
FDwFJrIyplnY9TO1LNpoAnckkN37o/QkuQzJeM9VisykvaXPvptcQg0gQWZdS7hL
QQ8ntEcL9aYqvSsDQhY/U4C6osgOEON8rX5Q0+2ZRW5n5Dx7U7aiPLkKxsvJToMu
19UjmzOGD8STbwwwLbRtpu/1FVvOmCsJb16je17wAEFKhYkOeyrDL3QShpcG7UWG
2jV7SLMCAfMyrN/2Q3axRxk9n1g3IDdFuO+VaQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBfBg2xIgAObmRhxdyGsnVbFLv5dMB8GA1UdIwQYMBaAFOcPkHEaK3GQ31qt
c0EWPfrhWCwoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2MwZjMx
NGMxZDNhZThjOGZiZDY5ZjljMzE2MzM5NzI0M2Y4NzY2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzFlM2IxMmIzMmM3M2Y3NGYwYzQ5MDk5NjU3ZmU1MWVmNDg3OGQ1YzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvN2MwZjMxNGMxZDNhZThjOGZiZDY5ZjljMzE2MzM5NzI0M2Y4NzY2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgAWDANBgkqhkiG9w0BAQsFAAOCAQEALHTb6woePdPh5u3B
F0PKZ0wQJkGO+YSDFk35trgKfjz/mCkHU+P60FxbWxRoXmLGsa56TtDNt+8onV8B
FR0cIxZ74rl8gln/WOxYJILejYDLvW0aOceVDKQlUbasgsQPODsDhmOHo9ANsO9e
/FpEYl98+gpZziF/mhNRPtxUabZhhljO1KWCFOQ7ASVgg1PYLFcbvToULP8n7web
l0Q6SM7WXPdrERUrbLkTPnkkuSmwdoCxaHn5xpD/Ft/68CcEiVp6d1bmeY+QxHH9
3W8dsCzoVz8rCv099D8nB+f/CwxHkfgsVaUyHgt4MUVQluXJn4QCdoD5a0+kkeSN
9SDcjA==
-----END CERTIFICATE-----
Generated at Fri Feb 16 02:55:53 2024 by rpki-client on console-fra.rpki-client.org