Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/fcdee5813c920d34d0cb37d4bf3ffed07728dfee.roa
File:                     fcdee5813c920d34d0cb37d4bf3ffed07728dfee.roa (raw, json)
Hash identifier:          YNQ341LhswXK9DwJdKKeM/eFDswAd6r4hBUs1BOIhiM=
Subject key identifier:   2B:7B:9E:60:BD:C5:E0:17:59:1D:85:53:5F:0B:DE:21:04:83:7E:E7
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E3580
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/fcdee5813c920d34d0cb37d4bf3ffed07728dfee.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     20321
IP address blocks:        201.216.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931200 (0xe3580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=fcdee5813c920d34d0cb37d4bf3ffed07728dfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:42:19:6a:24:75:ba:95:44:d5:95:31:ed:
                    82:a5:28:50:2c:ba:33:10:be:e4:50:81:12:04:91:
                    5a:4a:90:df:63:45:c5:64:59:69:35:7c:65:5e:81:
                    f1:6b:a5:d6:f1:a1:37:69:a9:1e:41:53:60:2e:a9:
                    fd:93:17:1c:3e:52:9c:75:ca:b9:5f:41:a7:6e:de:
                    0f:eb:ca:51:86:ae:ab:b5:37:f7:ef:8c:a2:7e:7f:
                    bf:5b:36:02:34:c2:78:76:17:07:fb:9a:fe:3a:01:
                    ba:ca:54:3c:64:4e:a7:2a:45:25:01:b7:7a:02:f5:
                    16:60:4e:e6:e0:8f:38:c7:e6:8a:73:6b:de:20:4e:
                    8d:68:f6:a4:83:04:83:c8:68:94:fc:65:71:63:25:
                    0e:ac:ea:e4:9f:cf:05:bc:cf:2d:6a:a3:64:b2:69:
                    8d:52:cc:ef:97:f6:5b:5c:65:11:ac:d3:4e:d4:04:
                    7b:15:46:4d:ef:83:38:48:6a:e0:3f:b5:e3:44:78:
                    13:0a:bd:77:60:59:54:31:bd:b4:30:14:bd:2f:2e:
                    4f:3c:dc:0b:1d:51:b8:2f:4d:d9:3f:ac:61:af:ba:
                    1d:d1:c2:11:79:80:59:86:11:93:74:e8:50:a3:ff:
                    df:3c:60:2c:f0:20:b3:22:16:c9:c5:d6:fd:89:94:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7B:9E:60:BD:C5:E0:17:59:1D:85:53:5F:0B:DE:21:04:83:7E:E7
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/fcdee5813c920d34d0cb37d4bf3ffed07728dfee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:a8:fd:b8:08:26:b2:7c:94:01:07:63:3d:2c:25:41:e0:
         02:5f:d2:73:9c:ea:79:6d:c2:41:cb:7a:2e:0b:69:e1:0a:95:
         11:77:a3:ab:c3:0e:be:26:b1:36:a0:54:1d:b0:bc:bd:ea:3c:
         5f:83:18:59:3f:27:40:f3:5a:1e:b1:af:06:48:33:15:98:28:
         d2:0e:9a:9b:78:2b:86:67:a1:d9:bf:a7:39:94:b1:19:07:82:
         e8:b2:10:79:cd:08:c6:43:1e:52:c2:43:d0:14:bf:74:b2:e6:
         29:49:52:56:0d:66:fe:ec:60:44:ce:43:f8:e6:68:94:e2:8d:
         f4:e6:9b:f5:1a:26:51:26:02:63:48:b5:9e:60:14:5f:2c:f6:
         c7:d7:ca:60:63:dc:d3:c6:ce:5d:da:32:28:55:85:68:8a:6a:
         40:dd:68:5d:32:9e:8d:c8:97:d6:ac:d2:30:af:41:6b:59:15:
         18:c6:5a:b8:9b:87:0d:e3:bd:5e:24:75:3c:87:f4:93:d2:bb:
         4e:1d:db:80:60:47:f6:80:28:c4:83:00:71:c2:eb:ff:e4:62:
         d0:2a:25:68:6d:f2:57:21:49:36:4f:fe:04:b8:d6:41:47:a3:
         56:7d:da:ac:2f:be:de:eb:36:e2:46:10:94:76:57:e3:d5:83:
         d5:42:48:13
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDjWAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjEwMzI0
MTQzMTM0WhcNMjYwMzI0MTQzMTM0WjAzMTEwLwYDVQQDEyhmY2RlZTU4MTNjOTIw
ZDM0ZDBjYjM3ZDRiZjNmZmVkMDc3MjhkZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAihVCGWokdbqVRNWVMe2CpShQLLozEL7kUIESBJFaSpDfY0XF
ZFlpNXxlXoHxa6XW8aE3aakeQVNgLqn9kxccPlKcdcq5X0Gnbt4P68pRhq6rtTf3
74yifn+/WzYCNMJ4dhcH+5r+OgG6ylQ8ZE6nKkUlAbd6AvUWYE7m4I84x+aKc2ve
IE6NaPakgwSDyGiU/GVxYyUOrOrkn88FvM8taqNksmmNUszvl/ZbXGURrNNO1AR7
FUZN74M4SGrgP7XjRHgTCr13YFlUMb20MBS9Ly5PPNwLHVG4L03ZP6xhr7od0cIR
eYBZhhGTdOhQo//fPGAs8CCzIhbJxdb9iZTVKQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCt7nmC9xeAXWR2FU18L3iEEg37nMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViL2ZjZGVlNTgxM2M5MjBkMzRkMGNiMzdkNGJmM2ZmZWQwNzcyOGRmZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnY5jANBgkqhkiG9w0BAQsFAAOCAQEALxGo/bgIJrJ8lAEH
Yz0sJUHgAl/Sc5zqeW3CQct6Lgtp4QqVEXejq8MOviaxNqBUHbC8veo8X4MYWT8n
QPNaHrGvBkgzFZgo0g6am3grhmeh2b+nOZSxGQeC6LIQec0IxkMeUsJD0BS/dLLm
KUlSVg1m/uxgRM5D+OZolOKN9Oab9RomUSYCY0i1nmAUXyz2x9fKYGPc08bOXdoy
KFWFaIpqQN1oXTKejciX1qzSMK9Ba1kVGMZauJuHDeO9XiR1PIf0k9K7Th3bgGBH
9oAoxIMAccLr/+Ri0ColaG3yVyFJNk/+BLjWQUejVn3arC++3us24kYQlHZX49WD
1UJIEw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org