Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/c4fdb89848042e04844a8a3e148dc5ee7b49c000.roa
File:                     c4fdb89848042e04844a8a3e148dc5ee7b49c000.roa (raw, json)
Hash identifier:          obO11gHtYVblILr/bWdEuzXQFt25maiOdKxvahDmjXU=
Subject key identifier:   97:FE:41:1B:FD:5C:1C:EA:19:58:A2:A3:8E:0D:94:5D:AD:D4:02:5A
Certificate issuer:       /CN=600a05248a907def76410027882b2f4a8085c07a
Certificate serial:       21B02A
Authority key identifier: BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/c4fdb89848042e04844a8a3e148dc5ee7b49c000.roa
Signing time:             Wed 19 Jul 2023 16:21:46 +0000
ROA not before:           Tue 18 Jul 2023 16:21:46 +0000
ROA not after:            Sat 19 Jul 2025 16:21:46 +0000
asID:                     27831
IP address blocks:        177.252.0.0/14 maxlen: 14
                          179.12.0.0/14 maxlen: 14
                          181.205.0.0/16 maxlen: 16
                          186.97.0.0/18 maxlen: 18
                          186.97.64.0/18 maxlen: 18
                          186.97.128.0/17 maxlen: 17
                          186.180.0.0/16 maxlen: 16
                          186.181.0.0/16 maxlen: 16
                          190.102.192.0/20 maxlen: 20
                          190.102.208.0/20 maxlen: 20
                          190.120.128.0/20 maxlen: 20
                          191.88.0.0/13 maxlen: 13
                          2803:1800::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207786 (0x21b02a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600a05248a907def76410027882b2f4a8085c07a
        Validity
            Not Before: Jul 18 16:21:46 2023 GMT
            Not After : Jul 19 16:21:46 2025 GMT
        Subject: CN=c4fdb89848042e04844a8a3e148dc5ee7b49c000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:95:a0:fe:97:4c:e4:d5:07:35:3e:e4:6d:
                    b5:93:50:6b:5a:e5:d4:fc:b6:00:0c:cc:04:2a:aa:
                    4a:67:7f:7c:2d:19:13:be:d3:0e:15:f0:a6:dd:69:
                    0e:67:eb:1d:25:84:97:68:0a:ee:ae:60:47:d9:16:
                    ca:f1:d0:73:39:6b:dd:51:63:2a:c1:4e:3d:cd:f6:
                    bf:a7:18:e1:b3:99:8b:fc:bf:33:1c:3a:ac:0b:81:
                    44:ea:ef:fa:2c:85:05:a6:ef:69:a2:3c:0e:ce:bd:
                    7c:e6:5c:cc:92:c2:ef:84:c3:fa:83:f4:f4:76:69:
                    15:83:38:e9:2f:d7:b9:38:7f:da:37:2c:b3:b0:bb:
                    e6:fc:64:09:64:d8:c5:23:cd:2c:22:a7:ba:71:f8:
                    f9:3d:69:3d:48:ae:a1:bb:a3:0d:a9:b7:ed:65:c2:
                    ee:c5:ab:da:82:65:30:e3:b8:9a:ae:a9:cb:18:d0:
                    a4:2c:e4:2d:a3:bb:19:c6:24:56:e2:90:9b:fa:25:
                    de:aa:43:93:aa:51:39:e2:c1:61:7e:67:a8:77:45:
                    58:53:dc:d6:29:55:72:9a:ee:03:87:1c:14:7a:c6:
                    8d:9a:bf:dc:f0:86:6b:2a:94:07:c8:dd:2c:4a:e3:
                    f7:f9:b6:16:9d:94:a1:7d:63:6e:60:a3:92:fb:63:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FE:41:1B:FD:5C:1C:EA:19:58:A2:A3:8E:0D:94:5D:AD:D4:02:5A
            X509v3 Authority Key Identifier:
                keyid:BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/c4fdb89848042e04844a8a3e148dc5ee7b49c000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/600a05248a907def76410027882b2f4a8085c07a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.252.0.0/14
                  179.12.0.0/14
                  181.205.0.0/16
                  186.97.0.0/16
                  186.180.0.0/15
                  190.102.192.0/19
                  190.120.128.0/20
                  191.88.0.0/13
                IPv6:
                  2803:1800::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:07:93:ac:93:05:6d:95:64:8c:6c:61:91:78:c4:9d:d5:6c:
         01:67:3c:07:b5:4a:77:b6:c6:51:3b:c5:01:7a:ca:15:d7:19:
         81:df:a5:5d:ee:3f:ed:1a:05:ba:3e:99:d5:99:e6:ae:80:60:
         c6:fd:61:cb:ea:7c:66:e9:85:66:71:ab:45:94:71:b6:72:cb:
         32:61:b9:7a:aa:62:0f:d5:d9:8c:d1:55:bb:ed:53:c4:63:41:
         ac:02:c5:96:1f:ea:e1:61:71:80:0e:ee:c8:f2:4e:55:94:a7:
         e8:39:6f:6e:9f:09:53:51:fd:57:9f:d5:88:0d:62:52:84:c2:
         54:85:0b:a1:14:08:a0:71:97:6a:de:ac:13:9f:6a:78:e3:9a:
         29:f1:d2:f5:02:51:1e:e4:75:b9:ef:d8:75:6d:ed:d5:26:4c:
         08:f3:85:25:86:d4:6e:c4:43:d7:cc:ae:f5:e4:40:61:b3:c4:
         85:74:32:12:f6:b7:53:63:de:fb:2d:46:56:a1:ec:8b:dc:2f:
         8a:a7:d2:bc:21:dc:01:b3:26:92:70:1f:17:3b:7a:b1:c1:5f:
         68:e2:f2:0a:ae:32:f9:09:a4:7e:d5:d1:2d:e9:37:98:17:03:
         58:73:74:70:72:4e:78:76:46:2a:35:b4:5b:36:d8:ad:64:f6:
         5e:e8:f2:1d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIDIbAqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw
MGEwNTI0OGE5MDdkZWY3NjQxMDAyNzg4MmIyZjRhODA4NWMwN2EwHhcNMjMwNzE4
MTYyMTQ2WhcNMjUwNzE5MTYyMTQ2WjAzMTEwLwYDVQQDEyhjNGZkYjg5ODQ4MDQy
ZTA0ODQ0YThhM2UxNDhkYzVlZTdiNDljMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAokqVoP6XTOTVBzU+5G21k1BrWuXU/LYADMwEKqpKZ398LRkT
vtMOFfCm3WkOZ+sdJYSXaArurmBH2RbK8dBzOWvdUWMqwU49zfa/pxjhs5mL/L8z
HDqsC4FE6u/6LIUFpu9pojwOzr185lzMksLvhMP6g/T0dmkVgzjpL9e5OH/aNyyz
sLvm/GQJZNjFI80sIqe6cfj5PWk9SK6hu6MNqbftZcLuxavagmUw47iarqnLGNCk
LOQto7sZxiRW4pCb+iXeqkOTqlE54sFhfmeod0VYU9zWKVVymu4DhxwUesaNmr/c
8IZrKpQHyN0sSuP3+bYWnZShfWNuYKOS+2OU1QIDAQABo4ICjjCCAoowHQYDVR0O
BBYEFJf+QRv9XBzqGViio44NlF2t1AJaMB8GA1UdIwQYMBaAFLw7/0tdqAv1RCeu
JaVAuwwRfNLKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjAwYTA1
MjQ4YTkwN2RlZjc2NDEwMDI3ODgyYjJmNGE4MDg1YzA3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWJlYTZjYWQtMjlkNi00Mzg1LWE0ZjktY2JlNGJh
M2QxMjFmL2M0ZmRiODk4NDgwNDJlMDQ4NDRhOGEzZTE0OGRjNWVlN2I0OWMwMDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YmVhNmNhZC0yOWQ2LTQzODUtYTRmOS1jYmU0
YmEzZDEyMWYvNjAwYTA1MjQ4YTkwN2RlZjc2NDEwMDI3ODgyYjJmNGE4MDg1YzA3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBSBggrBgEFBQcBBwEB/wRD
MEEwMAQCAAEwKgMDArH8AwMCswwDAwC1zQMDALphAwMBurQDBAW+ZsADBAS+eIAD
AwO/WDANBAIAAjAHAwUAKAMYADANBgkqhkiG9w0BAQsFAAOCAQEASQeTrJMFbZVk
jGxhkXjEndVsAWc8B7VKd7bGUTvFAXrKFdcZgd+lXe4/7RoFuj6Z1ZnmroBgxv1h
y+p8ZumFZnGrRZRxtnLLMmG5eqpiD9XZjNFVu+1TxGNBrALFlh/q4WFxgA7uyPJO
VZSn6Dlvbp8JU1H9V5/ViA1iUoTCVIULoRQIoHGXat6sE59qeOOaKfHS9QJRHuR1
ue/YdW3t1SZMCPOFJYbUbsRD18yu9eRAYbPEhXQyEva3U2Pe+y1GVqHsi9wviqfS
vCHcAbMmknAfFzt6scFfaOLyCq4y+QmkftXRLek3mBcDWHN0cHJOeHZGKjW0WzbY
rWT2XujyHQ==
-----END CERTIFICATE-----