Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/29bcf5fbb1019dbcbb69f3d3e78526cfbf6a60d0.roa
File:                     29bcf5fbb1019dbcbb69f3d3e78526cfbf6a60d0.roa (raw, json)
Hash identifier:          lYY4dvnJ5l+oAnY782aYaJEAKS+KH17Iaye5VVP0LlU=
Subject key identifier:   0E:E3:BA:63:34:6F:8C:30:79:FF:96:D9:81:10:E7:C1:30:EC:8F:5F
Certificate issuer:       /CN=fbfb66278713434fe3164de2e5226004347545cb
Certificate serial:       0B3059
Authority key identifier: 16:8B:5F:AF:17:07:14:89:49:85:89:36:15:75:65:C3:D7:05:03:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbfb66278713434fe3164de2e5226004347545cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/29bcf5fbb1019dbcbb69f3d3e78526cfbf6a60d0.roa
Signing time:             Wed 24 Mar 2021 14:41:22 +0000
ROA not before:           Wed 24 Mar 2021 14:41:22 +0000
ROA not after:            Tue 24 Mar 2026 14:41:22 +0000
asID:                     269848
IP address blocks:        2801:1f:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733273 (0xb3059)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbfb66278713434fe3164de2e5226004347545cb
        Validity
            Not Before: Mar 24 14:41:22 2021 GMT
            Not After : Mar 24 14:41:22 2026 GMT
        Subject: CN=29bcf5fbb1019dbcbb69f3d3e78526cfbf6a60d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:ba:dd:e3:19:b2:60:32:f1:ec:1c:a5:52:
                    e5:2c:1d:0f:da:79:22:d7:b9:72:a4:08:40:89:2f:
                    19:3d:72:28:d0:2b:56:ed:28:42:37:ef:1a:0c:09:
                    b2:70:fa:54:00:2d:ba:85:56:c5:23:6e:3e:ae:41:
                    95:a9:a2:73:cf:d8:18:ff:8e:8f:82:1b:ec:71:63:
                    4c:af:7f:f2:11:15:61:98:cd:c0:e2:72:37:ce:95:
                    8b:b8:94:f1:5e:10:8b:c0:40:72:ff:6d:94:e0:57:
                    af:d1:bd:ac:f0:22:f5:4a:38:82:f9:2a:d6:af:38:
                    54:06:2a:64:4d:83:6e:bd:2b:ce:72:95:07:7c:55:
                    41:07:fa:d8:fa:d8:34:d1:4f:b6:0f:b3:22:74:6a:
                    4b:62:dc:a2:ec:6f:ba:2f:cc:08:cf:ea:9b:ef:67:
                    ea:f6:fb:c8:bd:21:68:95:7c:8e:2e:f4:54:be:57:
                    e2:ed:e6:97:df:f3:4a:1d:38:ab:c6:bf:6d:aa:ca:
                    9c:db:2f:2b:1c:d5:1f:f6:57:64:04:1f:d0:41:94:
                    7e:a7:f9:69:c5:d5:76:87:90:d7:0f:60:1e:69:10:
                    6d:35:07:0d:63:06:4e:fe:84:d4:f6:15:82:8d:35:
                    cc:fd:d1:14:18:a1:69:1f:fb:af:71:b2:ac:54:a3:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:BA:63:34:6F:8C:30:79:FF:96:D9:81:10:E7:C1:30:EC:8F:5F
            X509v3 Authority Key Identifier:
                keyid:16:8B:5F:AF:17:07:14:89:49:85:89:36:15:75:65:C3:D7:05:03:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbfb66278713434fe3164de2e5226004347545cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/29bcf5fbb1019dbcbb69f3d3e78526cfbf6a60d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/fbfb66278713434fe3164de2e5226004347545cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:57:c9:23:c4:a3:1f:0a:06:ad:52:4f:4e:0d:40:e2:78:81:
         8f:bd:e2:83:6d:fe:0a:ee:c8:82:47:80:f5:50:d3:b0:b7:a3:
         31:bd:c7:02:e4:69:9a:da:c9:08:ec:52:c5:45:38:e1:26:c7:
         9a:b2:58:39:9f:f2:e4:45:24:a2:e8:6c:24:58:d3:c1:f9:f9:
         65:bf:88:b7:0b:26:27:a0:06:07:da:2b:21:c5:1e:e4:b0:08:
         86:d2:34:af:0b:3e:73:55:6b:53:31:c0:46:8b:69:6c:95:ca:
         29:4b:25:97:82:c7:56:00:db:76:99:49:b6:cd:eb:ef:2c:82:
         2f:01:96:c8:70:43:23:a0:b5:87:4e:ed:64:66:64:ba:15:c8:
         83:59:94:26:c4:cf:ba:8f:ed:e9:5a:bf:dd:32:30:b1:b6:6d:
         7e:60:e0:31:59:d3:a4:bd:41:70:02:41:7e:73:f0:fd:42:a6:
         dc:31:54:42:92:da:32:aa:c9:36:b0:62:63:49:94:5f:c8:20:
         47:9c:23:e2:99:37:bc:cf:ed:ac:3a:d0:38:04:02:ac:ee:bf:
         d7:4a:ca:2a:1e:04:97:bc:f2:ab:84:69:89:38:2b:9b:c3:a0:
         2c:84:86:65:57:02:ec:54:36:99:ba:95:f3:b4:b5:b6:b6:23:
         87:45:f7:a2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCzBZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
ZmI2NjI3ODcxMzQzNGZlMzE2NGRlMmU1MjI2MDA0MzQ3NTQ1Y2IwHhcNMjEwMzI0
MTQ0MTIyWhcNMjYwMzI0MTQ0MTIyWjAzMTEwLwYDVQQDEygyOWJjZjVmYmIxMDE5
ZGJjYmI2OWYzZDNlNzg1MjZjZmJmNmE2MGQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsUK63eMZsmAy8ewcpVLlLB0P2nki17lypAhAiS8ZPXIo0CtW
7ShCN+8aDAmycPpUAC26hVbFI24+rkGVqaJzz9gY/46PghvscWNMr3/yERVhmM3A
4nI3zpWLuJTxXhCLwEBy/22U4Fev0b2s8CL1SjiC+SrWrzhUBipkTYNuvSvOcpUH
fFVBB/rY+tg00U+2D7MidGpLYtyi7G+6L8wIz+qb72fq9vvIvSFolXyOLvRUvlfi
7eaX3/NKHTirxr9tqsqc2y8rHNUf9ldkBB/QQZR+p/lpxdV2h5DXD2AeaRBtNQcN
YwZO/oTU9hWCjTXM/dEUGKFpH/uvcbKsVKOCqQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFA7jumM0b4wwef+W2YEQ58Ew7I9fMB8GA1UdIwQYMBaAFBaLX68XBxSJSYWJ
NhV1ZcPXBQNiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmJmYjY2
Mjc4NzEzNDM0ZmUzMTY0ZGUyZTUyMjYwMDQzNDc1NDVjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTJhZGM0MzUtN2RlMC00OGQ3LThmOWMtN2EyYjNj
M2M3MDkyLzI5YmNmNWZiYjEwMTlkYmNiYjY5ZjNkM2U3ODUyNmNmYmY2YTYwZDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MmFkYzQzNS03ZGUwLTQ4ZDctOGY5Yy03YTJi
M2MzYzcwOTIvZmJmYjY2Mjc4NzEzNDM0ZmUzMTY0ZGUyZTUyMjYwMDQzNDc1NDVj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB9IADANBgkqhkiG9w0BAQsFAAOCAQEAIlfJI8SjHwoG
rVJPTg1A4niBj73ig23+Cu7IgkeA9VDTsLejMb3HAuRpmtrJCOxSxUU44SbHmrJY
OZ/y5EUkouhsJFjTwfn5Zb+ItwsmJ6AGB9orIcUe5LAIhtI0rws+c1VrUzHARotp
bJXKKUsll4LHVgDbdplJts3r7yyCLwGWyHBDI6C1h07tZGZkuhXIg1mUJsTPuo/t
6Vq/3TIwsbZtfmDgMVnTpL1BcAJBfnPw/UKm3DFUQpLaMqrJNrBiY0mUX8ggR5wj
4pk3vM/trDrQOAQCrO6/10rKKh4El7zyq4RpiTgrm8OgLISGZVcC7FQ2mbqV87S1
trYjh0X3og==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org