Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3bf82865-a874-4a86-b014-aadc5a7fd9f1/fa03509e8225e5f5da834376eff90bc5557671f0.roa
File:                     fa03509e8225e5f5da834376eff90bc5557671f0.roa (raw, json)
Hash identifier:          muNjNoxqI90mAQC6LL+fCGvurf6OAmUeAM7WoA0CUIs=
Subject key identifier:   F7:28:58:8D:4F:41:BD:6F:A2:FA:FD:65:98:D6:2F:FD:59:1E:D2:86
Certificate issuer:       /CN=b2b659f946197c75a1a126fbc14cbc8ced673e19
Certificate serial:       031239
Authority key identifier: 26:A5:5D:01:1F:6B:32:83:8F:E1:9D:6B:3B:72:BC:6A:69:01:05:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b2b659f946197c75a1a126fbc14cbc8ced673e19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3bf82865-a874-4a86-b014-aadc5a7fd9f1/fa03509e8225e5f5da834376eff90bc5557671f0.roa
Signing time:             Wed 31 Jan 2024 18:39:02 +0000
ROA not before:           Wed 31 Jan 2024 18:39:02 +0000
ROA not after:            Sat 31 Jan 2026 18:39:02 +0000
asID:                     27950
IP address blocks:        200.49.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201273 (0x31239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b659f946197c75a1a126fbc14cbc8ced673e19
        Validity
            Not Before: Jan 31 18:39:02 2024 GMT
            Not After : Jan 31 18:39:02 2026 GMT
        Subject: CN=fa03509e8225e5f5da834376eff90bc5557671f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:cd:5d:5a:3e:cf:ee:1d:78:8b:8f:6f:96:
                    0c:10:ef:81:03:c0:34:22:35:d1:88:40:3c:af:29:
                    bf:95:71:82:fc:b6:0f:10:86:ca:00:e7:af:08:21:
                    a7:3c:3c:25:18:6e:d8:8c:05:47:e1:4d:b6:f6:30:
                    c4:84:82:f3:36:36:65:92:eb:da:22:bb:90:76:5d:
                    6e:25:5e:56:78:a6:d0:42:82:4b:99:ab:9c:72:01:
                    5e:2d:89:25:4c:4c:4a:62:43:04:bd:2a:bc:0f:9e:
                    a8:b2:51:f3:5d:97:83:66:08:13:0f:7f:47:b4:e3:
                    36:f2:fe:bc:c6:11:f2:ce:95:1c:fd:54:86:1e:d7:
                    bc:ad:ff:d6:38:42:4b:73:e4:75:5c:7d:fa:d1:85:
                    c0:16:de:ca:e8:2a:f8:68:e9:69:4b:85:c2:11:e4:
                    0a:b9:58:ca:de:72:69:20:4d:dc:3d:f3:25:43:22:
                    ff:8f:a6:79:19:8b:12:52:85:4c:03:d6:6c:2c:f2:
                    65:ff:fd:91:47:b4:bc:8f:c2:fc:ff:42:b4:74:71:
                    d4:56:55:0f:31:f9:b7:77:3a:ef:c9:cf:80:45:ea:
                    6a:5e:33:ba:22:82:6e:3f:11:e9:3d:80:81:c9:1d:
                    43:5f:65:a6:a1:d0:1a:f7:9b:24:01:84:97:6f:06:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:58:8D:4F:41:BD:6F:A2:FA:FD:65:98:D6:2F:FD:59:1E:D2:86
            X509v3 Authority Key Identifier:
                keyid:26:A5:5D:01:1F:6B:32:83:8F:E1:9D:6B:3B:72:BC:6A:69:01:05:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b2b659f946197c75a1a126fbc14cbc8ced673e19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3bf82865-a874-4a86-b014-aadc5a7fd9f1/fa03509e8225e5f5da834376eff90bc5557671f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3bf82865-a874-4a86-b014-aadc5a7fd9f1/b2b659f946197c75a1a126fbc14cbc8ced673e19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:64:b7:af:6f:e0:45:2d:e3:8e:73:3d:69:a2:fc:89:31:af:
         ac:59:db:e0:5b:d6:a3:3d:d6:4a:68:fc:55:24:1c:29:89:9a:
         e8:33:2d:a4:d2:af:32:8e:b8:31:f8:6d:6d:f2:33:34:24:8a:
         aa:d6:18:bb:4e:99:64:68:aa:f7:eb:f7:ae:d6:8b:41:1d:44:
         f7:d2:38:8f:fd:76:f0:87:e2:88:28:92:14:52:45:21:cd:57:
         90:93:33:b1:17:4a:84:08:cb:4e:42:30:74:7a:54:18:58:85:
         e8:ae:63:50:18:1f:ef:66:2e:dd:5f:7f:8c:a2:2c:c7:31:f1:
         ef:4f:7e:74:c7:70:ed:dd:15:de:ff:44:e3:5d:f0:d0:3f:45:
         40:d9:77:75:fc:09:0a:6f:13:f4:ae:60:6c:56:6f:43:9a:13:
         16:c4:2f:97:b5:44:e3:c9:85:49:d9:d7:57:2c:ca:08:55:4e:
         1a:61:bc:fb:56:52:10:0f:79:97:7d:86:11:11:ea:b2:ae:b0:
         77:3d:ec:bb:3f:88:35:ad:ec:46:92:e0:5b:d8:28:b7:1b:03:
         78:ad:78:9d:82:dd:81:cc:31:3d:92:66:7d:02:21:3d:21:d9:
         14:f6:77:15:e8:bf:3c:bd:84:83:07:17:a8:4d:1a:0f:d5:a6:
         ee:90:ba:c4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAxI5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIy
YjY1OWY5NDYxOTdjNzVhMWExMjZmYmMxNGNiYzhjZWQ2NzNlMTkwHhcNMjQwMTMx
MTgzOTAyWhcNMjYwMTMxMTgzOTAyWjAzMTEwLwYDVQQDEyhmYTAzNTA5ZTgyMjVl
NWY1ZGE4MzQzNzZlZmY5MGJjNTU1NzY3MWYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxGjNXVo+z+4deIuPb5YMEO+BA8A0IjXRiEA8rym/lXGC/LYP
EIbKAOevCCGnPDwlGG7YjAVH4U229jDEhILzNjZlkuvaIruQdl1uJV5WeKbQQoJL
mauccgFeLYklTExKYkMEvSq8D56oslHzXZeDZggTD39HtOM28v68xhHyzpUc/VSG
Hte8rf/WOEJLc+R1XH360YXAFt7K6Cr4aOlpS4XCEeQKuVjK3nJpIE3cPfMlQyL/
j6Z5GYsSUoVMA9ZsLPJl//2RR7S8j8L8/0K0dHHUVlUPMfm3dzrvyc+ARepqXjO6
IoJuPxHpPYCByR1DX2WmodAa95skAYSXbwaaZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPcoWI1PQb1vovr9ZZjWL/1ZHtKGMB8GA1UdIwQYMBaAFCalXQEfazKDj+Gd
aztyvGppAQUOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjJiNjU5
Zjk0NjE5N2M3NWExYTEyNmZiYzE0Y2JjOGNlZDY3M2UxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2JmODI4NjUtYTg3NC00YTg2LWIwMTQtYWFkYzVh
N2ZkOWYxL2ZhMDM1MDllODIyNWU1ZjVkYTgzNDM3NmVmZjkwYmM1NTU3NjcxZjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zYmY4Mjg2NS1hODc0LTRhODYtYjAxNC1hYWRj
NWE3ZmQ5ZjEvYjJiNjU5Zjk0NjE5N2M3NWExYTEyNmZiYzE0Y2JjOGNlZDY3M2Ux
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8gxcDANBgkqhkiG9w0BAQsFAAOCAQEAFmS3r2/gRS3jjnM9
aaL8iTGvrFnb4FvWoz3WSmj8VSQcKYma6DMtpNKvMo64MfhtbfIzNCSKqtYYu06Z
ZGiq9+v3rtaLQR1E99I4j/128IfiiCiSFFJFIc1XkJMzsRdKhAjLTkIwdHpUGFiF
6K5jUBgf72Yu3V9/jKIsxzHx709+dMdw7d0V3v9E413w0D9FQNl3dfwJCm8T9K5g
bFZvQ5oTFsQvl7VE48mFSdnXVyzKCFVOGmG8+1ZSEA95l32GERHqsq6wdz3suz+I
Na3sRpLgW9gotxsDeK14nYLdgcwxPZJmfQIhPSHZFPZ3Fei/PL2EgwcXqE0aD9Wm
7pC6xA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org