Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/fbbc055b196114e0a520d95c90581f12696d100a.roa
File:                     fbbc055b196114e0a520d95c90581f12696d100a.roa (raw, json)
Hash identifier:          H6IDDMAiZYv7ZVRSBcg4IghgZT0jHmTDfjHs5bfCzn4=
Subject key identifier:   B8:A9:6D:B5:C9:9F:78:BC:73:5C:40:74:84:80:07:67:C9:E0:94:B9
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       05A060
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/fbbc055b196114e0a520d95c90581f12696d100a.roa
Signing time:             Thu 12 Oct 2023 14:50:45 +0000
ROA not before:           Wed 11 Oct 2023 14:50:45 +0000
ROA not after:            Sun 12 Oct 2025 14:50:45 +0000
asID:                     15311
IP address blocks:        186.103.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368736 (0x5a060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Oct 11 14:50:45 2023 GMT
            Not After : Oct 12 14:50:45 2025 GMT
        Subject: CN=fbbc055b196114e0a520d95c90581f12696d100a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:30:40:3f:5e:f9:8b:4b:5d:42:2d:94:e8:
                    33:cc:07:f4:0a:5a:ee:c6:a6:bc:ea:f6:57:48:9b:
                    fb:67:8a:04:65:dc:86:ce:d2:fb:7a:8f:33:d2:1c:
                    34:e4:0c:c3:3a:27:56:33:8e:1b:67:c2:b1:2d:f0:
                    e2:a5:de:25:19:cc:7f:2f:ca:1e:71:60:ef:31:40:
                    f2:27:37:78:7e:51:aa:be:4c:c3:2d:f8:fa:3f:5f:
                    59:c6:07:5f:68:15:f5:6f:45:94:18:55:14:20:4d:
                    84:ac:ae:ed:53:09:00:77:81:b1:66:dc:af:ce:91:
                    76:4f:e6:9f:6f:ba:fd:71:42:85:cc:09:fe:15:dd:
                    a2:28:9e:89:da:8b:43:e8:dc:27:30:ed:5b:01:70:
                    15:1c:60:87:22:b7:0d:79:e6:99:82:0f:b7:d8:75:
                    ba:86:04:db:32:48:88:17:a8:eb:c5:20:8e:8f:5b:
                    30:1d:4c:f5:e3:ad:43:55:e9:99:b2:9a:3f:a9:a0:
                    a4:0a:73:d6:5b:f1:8c:eb:6c:6b:6e:77:66:3a:d3:
                    5b:aa:fc:a6:0b:e7:cd:e4:d0:9a:88:60:c0:38:aa:
                    d3:f4:3d:f3:79:df:11:b3:29:87:c3:9a:ce:94:e0:
                    2e:19:f7:79:3e:37:ab:28:ae:f3:14:24:9f:49:d9:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A9:6D:B5:C9:9F:78:BC:73:5C:40:74:84:80:07:67:C9:E0:94:B9
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/fbbc055b196114e0a520d95c90581f12696d100a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         91:2e:3b:45:b7:bb:c3:30:fb:82:4b:8d:db:79:dc:3c:16:e1:
         0e:31:81:7f:b6:cf:dd:8a:fe:38:bf:77:84:62:26:da:1a:b2:
         38:7d:61:ea:00:41:4b:41:8b:fd:eb:4b:35:1a:0c:d4:15:fd:
         10:c2:f0:f1:99:00:bb:c1:06:76:bf:49:7f:ff:ae:03:42:88:
         be:c4:ca:0e:5a:46:d4:0e:c6:f2:56:1b:d5:64:51:c0:11:8b:
         8b:20:97:fc:74:da:4c:39:c4:67:6c:c0:3e:90:35:b9:49:93:
         3c:53:f6:58:8f:f8:75:88:7d:e7:11:fc:7a:d2:6b:d3:6e:44:
         71:0b:db:95:15:92:53:ee:72:fc:9e:63:e3:55:fe:30:4e:4b:
         93:d0:53:cd:e3:cc:48:ce:ec:63:e0:8b:4d:e6:9e:7d:a4:cf:
         2f:13:c6:1d:d8:19:76:a3:84:61:2e:b4:91:53:20:48:d4:18:
         bb:50:59:be:33:e5:c8:ec:54:23:f9:10:4f:bb:0a:76:90:ac:
         cd:6d:6a:ae:0f:e3:0b:db:17:0a:4c:fb:06:ca:b0:c1:7e:45:
         32:34:96:00:8f:4f:b9:22:a9:54:ed:80:fa:e0:0e:7c:a0:50:
         65:b6:8a:c1:50:cf:5e:b9:15:af:c2:14:84:95:56:10:39:b0:
         ec:eb:a3:84
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBaBgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMxMDEx
MTQ1MDQ1WhcNMjUxMDEyMTQ1MDQ1WjAzMTEwLwYDVQQDEyhmYmJjMDU1YjE5NjEx
NGUwYTUyMGQ5NWM5MDU4MWYxMjY5NmQxMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtPgwQD9e+YtLXUItlOgzzAf0Clruxqa86vZXSJv7Z4oEZdyG
ztL7eo8z0hw05AzDOidWM44bZ8KxLfDipd4lGcx/L8oecWDvMUDyJzd4flGqvkzD
Lfj6P19ZxgdfaBX1b0WUGFUUIE2ErK7tUwkAd4GxZtyvzpF2T+afb7r9cUKFzAn+
Fd2iKJ6J2otD6NwnMO1bAXAVHGCHIrcNeeaZgg+32HW6hgTbMkiIF6jrxSCOj1sw
HUz1461DVemZspo/qaCkCnPWW/GM62xrbndmOtNbqvymC+fN5NCaiGDAOKrT9D3z
ed8RsymHw5rOlOAuGfd5PjerKK7zFCSfSdn25QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLipbbXJn3i8c1xAdISAB2fJ4JS5MB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkL2ZiYmMwNTViMTk2MTE0ZTBhNTIwZDk1YzkwNTgxZjEyNjk2ZDEwMGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB7pngDANBgkqhkiG9w0BAQsFAAOCAQEAkS47Rbe7wzD7gkuN
23ncPBbhDjGBf7bP3Yr+OL93hGIm2hqyOH1h6gBBS0GL/etLNRoM1BX9EMLw8ZkA
u8EGdr9Jf/+uA0KIvsTKDlpG1A7G8lYb1WRRwBGLiyCX/HTaTDnEZ2zAPpA1uUmT
PFP2WI/4dYh95xH8etJr025EcQvblRWSU+5y/J5j41X+ME5Lk9BTzePMSM7sY+CL
TeaefaTPLxPGHdgZdqOEYS60kVMgSNQYu1BZvjPlyOxUI/kQT7sKdpCszW1qrg/j
C9sXCkz7BsqwwX5FMjSWAI9PuSKpVO2A+uAOfKBQZbaKwVDPXrkVr8IUhJVWEDmw
7OujhA==
-----END CERTIFICATE-----