Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/020de16c455a5d753700567e0895999ef2ae80a9.roa
File:                     020de16c455a5d753700567e0895999ef2ae80a9.roa (raw, json)
Hash identifier:          bO+GFv5Rt05cZqAxPtqoJzPBKe5zg6gcNT/qO7suI4c=
Subject key identifier:   43:49:5F:B5:31:25:65:50:10:6F:4D:74:1A:93:02:F5:C2:B9:EE:69
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DCA59
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/020de16c455a5d753700567e0895999ef2ae80a9.roa
Signing time:             Thu 07 Dec 2023 12:42:32 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     265630
IP address blocks:        181.81.246.0/23 maxlen: 24
                          181.94.192.0/22 maxlen: 24
                          181.93.244.0/24 maxlen: 24
                          181.93.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3000921 (0x2dca59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=020de16c455a5d753700567e0895999ef2ae80a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:ee:f0:9b:7f:48:58:0c:dc:61:42:80:b9:
                    15:40:df:29:52:a8:cb:c3:6a:8c:ec:45:4f:19:a7:
                    bd:b7:6c:a5:a6:d4:98:91:83:ff:fe:ec:b5:f5:d1:
                    6c:f5:0e:9a:09:af:f7:a6:07:3d:db:04:d3:d8:78:
                    3a:d1:84:cc:72:55:41:44:c0:c4:29:f9:98:1b:cc:
                    a0:2e:ff:55:8a:d6:3a:41:fb:ef:6c:98:77:51:bc:
                    7f:0e:f7:f4:29:b8:06:8f:26:1e:30:f7:32:42:b6:
                    44:62:7d:2d:1c:b1:9e:dd:ce:db:6d:da:10:2b:cd:
                    2f:51:65:5b:7e:66:1c:de:c6:57:5f:49:83:89:37:
                    0e:81:38:72:66:77:57:b5:39:f2:cc:2e:65:3d:89:
                    27:af:ba:f0:5d:e5:e8:b6:3e:7f:c0:3d:d1:8d:85:
                    e2:a5:76:bc:cb:53:c9:12:f8:62:d0:31:0c:72:3b:
                    a4:fa:d0:53:f8:cc:df:e3:f9:e8:f9:9b:30:f5:6e:
                    cd:c7:61:2d:3a:38:d8:d9:2e:49:a1:f9:81:7b:f2:
                    46:de:f8:cf:ba:a1:ef:e9:b9:64:3e:61:0e:3a:68:
                    8e:f0:8f:49:88:7c:8d:7e:1a:be:78:2d:6f:eb:45:
                    d6:4a:25:8c:e7:11:79:ab:b7:52:b8:3c:c7:0a:5a:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:49:5F:B5:31:25:65:50:10:6F:4D:74:1A:93:02:F5:C2:B9:EE:69
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/020de16c455a5d753700567e0895999ef2ae80a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.81.246.0/23
                  181.93.244.0/24
                  181.93.248.0/24
                  181.94.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:58:e8:50:4a:f2:28:3f:4f:c7:70:d1:d0:cb:16:3d:7f:64:
         49:02:38:ae:b2:ef:34:b1:5d:30:73:35:93:b6:94:20:a3:38:
         33:8f:60:62:b3:e2:35:bd:ee:47:c1:47:07:8f:a9:af:b2:3c:
         58:26:3c:72:d7:b0:33:65:3a:23:9d:0f:da:40:cb:1f:80:30:
         f3:2a:99:70:66:b2:34:3b:a2:c4:60:6f:e7:27:18:a7:7b:bf:
         3e:da:af:51:cc:f5:f7:af:76:3f:01:7b:fa:aa:ff:59:ed:0b:
         f3:b0:d6:b6:fe:66:d3:4d:ce:68:19:f2:8e:78:f0:dc:8c:6e:
         0e:e6:a6:69:2f:d8:50:c1:2b:b4:3f:5a:21:98:b1:8c:4d:e1:
         68:6d:d9:1c:cd:29:38:14:d3:be:75:b0:98:39:c8:54:a6:83:
         35:0c:79:84:78:f7:d4:37:f8:e5:c8:3b:d3:73:ba:7b:66:89:
         5f:63:f5:e0:4a:05:78:54:c7:1b:f1:78:34:24:61:e1:43:d6:
         2c:dc:a6:54:6e:af:6e:98:bf:9a:c5:c2:68:f4:e5:5d:70:07:
         6a:85:62:eb:98:45:8e:80:59:50:f0:95:fe:dd:66:f8:08:9b:
         9c:69:b1:22:de:e1:8e:a1:9a:0f:d4:09:6f:ad:c6:83:d9:16:
         42:5f:30:5c
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDLcpZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEygwMjBkZTE2YzQ1NWE1
ZDc1MzcwMDU2N2UwODk1OTk5ZWYyYWU4MGE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyJ/u8Jt/SFgM3GFCgLkVQN8pUqjLw2qM7EVPGae9t2ylptSY
kYP//uy19dFs9Q6aCa/3pgc92wTT2Hg60YTMclVBRMDEKfmYG8ygLv9VitY6Qfvv
bJh3Ubx/Dvf0KbgGjyYeMPcyQrZEYn0tHLGe3c7bbdoQK80vUWVbfmYc3sZXX0mD
iTcOgThyZndXtTnyzC5lPYknr7rwXeXotj5/wD3RjYXipXa8y1PJEvhi0DEMcjuk
+tBT+Mzf4/no+Zsw9W7Nx2EtOjjY2S5JofmBe/JG3vjPuqHv6blkPmEOOmiO8I9J
iHyNfhq+eC1v60XWSiWM5xF5q7dSuDzHClrwiwIDAQABo4ICbTCCAmkwHQYDVR0O
BBYEFENJX7UxJWVQEG9NdBqTAvXCue5pMB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzAyMGRlMTZjNDU1YTVkNzUzNzAwNTY3ZTA4OTU5OTllZjJhZTgwYTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQi
MCAwHgQCAAEwGAMEAbVR9gMEALVd9AMEALVd+AMEArVewDANBgkqhkiG9w0BAQsF
AAOCAQEAMVjoUEryKD9Px3DR0MsWPX9kSQI4rrLvNLFdMHM1k7aUIKM4M49gYrPi
Nb3uR8FHB4+pr7I8WCY8ctewM2U6I50P2kDLH4Aw8yqZcGayNDuixGBv5ycYp3u/
PtqvUcz19692PwF7+qr/We0L87DWtv5m003OaBnyjnjw3IxuDuamaS/YUMErtD9a
IZixjE3haG3ZHM0pOBTTvnWwmDnIVKaDNQx5hHj31Df45cg703O6e2aJX2P14EoF
eFTHG/F4NCRh4UPWLNymVG6vbpi/msXCaPTlXXAHaoVi65hFjoBZUPCV/t1m+Aib
nGmxIt7hjqGaD9QJb63Gg9kWQl8wXA==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org