Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/fc7b00217625a36a81f285d34d6c1a7da65b94a1.roa
File:                     fc7b00217625a36a81f285d34d6c1a7da65b94a1.roa (raw, json)
Hash identifier:          LvBw2+KLGbiVHCTMKXa0fu64Pez0pXj+R8DGtM8XGcI=
Subject key identifier:   FA:00:3B:1C:B1:D7:C6:0E:76:86:91:55:51:19:C0:88:92:FC:84:41
Certificate issuer:       /CN=5b167a71215fda9fbeb96f856a1f2b9c72e00e85
Certificate serial:       28AD7E
Authority key identifier: 21:97:4C:BD:6A:1F:54:3F:50:7C:6C:6C:E8:63:4C:1E:7E:2A:D0:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/fc7b00217625a36a81f285d34d6c1a7da65b94a1.roa
Signing time:             Thu 04 Apr 2024 21:37:06 +0000
ROA not before:           Thu 04 Apr 2024 21:37:06 +0000
ROA not after:            Sat 04 Apr 2026 21:37:06 +0000
asID:                     6471
IP address blocks:        192.141.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665854 (0x28ad7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b167a71215fda9fbeb96f856a1f2b9c72e00e85
        Validity
            Not Before: Apr  4 21:37:06 2024 GMT
            Not After : Apr  4 21:37:06 2026 GMT
        Subject: CN=fc7b00217625a36a81f285d34d6c1a7da65b94a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:1a:11:0c:bd:08:a2:4c:86:44:e7:2d:f7:
                    ee:4c:ea:a5:32:a3:7e:92:37:bf:ac:7a:5d:b3:a1:
                    31:fa:50:04:ab:7e:37:b5:1a:36:cb:d2:93:b3:d2:
                    9d:a6:40:b5:38:da:84:ce:53:91:6a:87:ea:69:b1:
                    9a:b8:99:40:70:00:95:cb:74:46:c7:25:60:7d:c9:
                    37:3b:99:e2:d6:fd:37:20:b9:3a:93:17:07:d2:21:
                    10:24:7f:44:37:13:11:ef:cb:ac:ef:2d:5f:b6:6b:
                    99:7b:20:67:79:f9:eb:60:67:d9:23:11:96:33:82:
                    e9:95:1e:62:d6:92:9a:00:d5:ad:44:17:77:8a:32:
                    95:e0:fe:ad:63:4a:b3:4e:1f:f8:b8:80:b1:15:99:
                    da:5e:a5:eb:06:63:9a:c7:cc:8a:4d:84:08:53:4e:
                    e5:dd:15:e2:05:77:83:e5:15:ab:3f:c8:6b:fc:65:
                    1d:7a:11:3d:48:08:13:cc:a2:82:3e:2e:05:db:34:
                    d4:a4:0a:59:b5:b1:c0:2f:cb:78:9b:c8:88:05:d4:
                    f0:89:79:58:05:df:db:33:ac:0c:d5:10:88:98:7e:
                    d6:5e:a6:4f:68:f1:a7:d8:cf:49:d2:01:2c:a4:8f:
                    05:2c:54:0c:ce:59:c5:66:32:32:40:f9:55:ac:0f:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:3B:1C:B1:D7:C6:0E:76:86:91:55:51:19:C0:88:92:FC:84:41
            X509v3 Authority Key Identifier:
                keyid:21:97:4C:BD:6A:1F:54:3F:50:7C:6C:6C:E8:63:4C:1E:7E:2A:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/fc7b00217625a36a81f285d34d6c1a7da65b94a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:aa:fe:fe:30:26:87:34:5e:ce:3a:36:69:aa:80:95:2e:86:
         03:a0:65:e4:5f:6d:ba:d6:52:c1:d6:de:41:7f:e4:6d:3e:68:
         79:c3:d4:ae:c8:24:3e:c4:0a:40:9c:83:62:19:1a:03:2d:a3:
         7c:72:c5:00:f6:fe:4c:49:16:6e:1b:f3:80:cc:7d:60:7f:68:
         4a:14:fc:4b:91:91:fb:61:1c:94:e2:c8:ae:b1:14:59:30:61:
         f0:f2:27:36:3a:10:59:28:66:7a:65:5b:a2:ec:a9:a9:c1:0b:
         45:b4:1e:09:c4:99:b7:69:06:48:97:eb:44:48:5c:ae:27:99:
         42:c1:39:50:cd:6f:d2:33:a2:6c:ff:d0:55:92:32:79:2c:95:
         3e:50:fd:68:24:36:04:e6:15:5f:c1:b1:7b:c1:b2:0a:b7:60:
         1f:3b:cf:17:2c:8b:b3:71:05:6f:51:f7:0d:d6:34:7b:f2:f9:
         af:6a:59:b9:45:b6:ab:b5:a0:98:6f:fc:10:f7:f5:c9:5f:d8:
         fe:a7:f6:7e:04:aa:fa:b3:08:78:ec:74:ee:36:73:ef:e0:42:
         b7:cd:3c:0b:a5:1d:b1:2c:09:36:03:a6:11:ed:3a:c7:39:3e:
         8f:51:df:5c:5f:07:7f:43:7f:b3:65:18:c6:99:54:77:7f:d2:
         5f:b3:1f:25
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKK1+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
MTY3YTcxMjE1ZmRhOWZiZWI5NmY4NTZhMWYyYjljNzJlMDBlODUwHhcNMjQwNDA0
MjEzNzA2WhcNMjYwNDA0MjEzNzA2WjAzMTEwLwYDVQQDEyhmYzdiMDAyMTc2MjVh
MzZhODFmMjg1ZDM0ZDZjMWE3ZGE2NWI5NGExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr4waEQy9CKJMhkTnLffuTOqlMqN+kje/rHpds6Ex+lAEq343
tRo2y9KTs9KdpkC1ONqEzlORaofqabGauJlAcACVy3RGxyVgfck3O5ni1v03ILk6
kxcH0iEQJH9ENxMR78us7y1ftmuZeyBnefnrYGfZIxGWM4LplR5i1pKaANWtRBd3
ijKV4P6tY0qzTh/4uICxFZnaXqXrBmOax8yKTYQIU07l3RXiBXeD5RWrP8hr/GUd
ehE9SAgTzKKCPi4F2zTUpApZtbHAL8t4m8iIBdTwiXlYBd/bM6wM1RCImH7WXqZP
aPGn2M9J0gEspI8FLFQMzlnFZjIyQPlVrA+htwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPoAOxyx18YOdoaRVVEZwIiS/IRBMB8GA1UdIwQYMBaAFCGXTL1qH1Q/UHxs
bOhjTB5+KtAgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWIxNjdh
NzEyMTVmZGE5ZmJlYjk2Zjg1NmExZjJiOWM3MmUwMGU4NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVhZmI5OTMtOWNlYS00ZjhjLTg1NWMtMTU3MGVj
MDZlNjRjL2ZjN2IwMDIxNzYyNWEzNmE4MWYyODVkMzRkNmMxYTdkYTY1Yjk0YTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWFmYjk5My05Y2VhLTRmOGMtODU1Yy0xNTcw
ZWMwNmU2NGMvNWIxNjdhNzEyMTVmZGE5ZmJlYjk2Zjg1NmExZjJiOWM3MmUwMGU4
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsCNqDANBgkqhkiG9w0BAQsFAAOCAQEAdKr+/jAmhzRezjo2
aaqAlS6GA6Bl5F9tutZSwdbeQX/kbT5oecPUrsgkPsQKQJyDYhkaAy2jfHLFAPb+
TEkWbhvzgMx9YH9oShT8S5GR+2EclOLIrrEUWTBh8PInNjoQWShmemVbouypqcEL
RbQeCcSZt2kGSJfrREhcrieZQsE5UM1v0jOibP/QVZIyeSyVPlD9aCQ2BOYVX8Gx
e8GyCrdgHzvPFyyLs3EFb1H3DdY0e/L5r2pZuUW2q7WgmG/8EPf1yV/Y/qf2fgSq
+rMIeOx07jZz7+BCt808C6UdsSwJNgOmEe06xzk+j1HfXF8Hf0N/s2UYxplUd3/S
X7MfJQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:48 2024 by rpki-client on console-fra.rpki-client.org