Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/fd415bc5bbb54e3c160a168eb273ba2cc6b99095.roa
File:                     fd415bc5bbb54e3c160a168eb273ba2cc6b99095.roa (raw, json)
Hash identifier:          Bn4h7IaoPqxayytEfWmFXsEG694EZoyEOWlkxh4C/9E=
Subject key identifier:   2F:2D:D2:AE:34:07:A4:47:5F:34:AB:F6:A5:7F:54:7B:5E:BF:69:F8
Certificate issuer:       /CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
Certificate serial:       2ECA
Authority key identifier: 5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/fd415bc5bbb54e3c160a168eb273ba2cc6b99095.roa
Signing time:             Sat 02 Mar 2024 13:56:14 +0000
ROA not before:           Sat 02 Mar 2024 13:56:14 +0000
ROA not after:            Mon 02 Mar 2026 13:56:14 +0000
asID:                     20473
IP address blocks:        2806:419:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11978 (0x2eca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
        Validity
            Not Before: Mar  2 13:56:14 2024 GMT
            Not After : Mar  2 13:56:14 2026 GMT
        Subject: CN=fd415bc5bbb54e3c160a168eb273ba2cc6b99095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:74:27:58:61:4a:93:7e:cd:d0:26:00:66:
                    f3:fc:ae:b9:5c:a8:9c:97:c1:82:57:69:6f:b2:6f:
                    8e:90:b4:40:cc:9b:58:db:d9:b0:ca:c0:58:b0:46:
                    f7:1f:4f:c6:a0:ff:61:34:15:09:3e:4f:98:d8:ed:
                    34:1b:c0:b9:4b:03:ac:c5:17:be:0a:bb:8c:eb:5c:
                    73:36:28:19:69:6f:f3:4d:fb:7c:dd:0a:9d:e4:ba:
                    ff:b1:98:ed:2c:0a:ad:09:41:d5:98:9b:dd:ad:05:
                    78:66:06:30:cd:ad:ce:22:fb:72:07:cd:5f:d8:90:
                    30:a9:45:77:0d:ee:09:59:ce:eb:33:60:18:b6:a6:
                    d6:fb:a0:78:45:83:1e:7b:55:7a:bc:42:ac:17:eb:
                    a3:75:10:6b:b7:a2:7f:bd:65:e2:d0:5f:f7:5b:6b:
                    df:8c:25:a4:65:62:49:50:a5:52:14:d9:d6:be:fc:
                    2d:20:0a:55:43:19:23:56:a5:64:d8:4a:56:79:88:
                    2b:6f:00:71:7a:8b:37:9d:f7:fa:7e:42:66:48:cf:
                    fb:f7:e2:cd:5f:ac:8e:a6:df:e5:1e:12:f0:73:ed:
                    95:cd:ee:79:90:04:ee:36:6e:92:e5:12:0a:49:0a:
                    00:2a:8c:8b:6c:9a:0d:28:10:12:4f:bb:a3:9e:37:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2D:D2:AE:34:07:A4:47:5F:34:AB:F6:A5:7F:54:7B:5E:BF:69:F8
            X509v3 Authority Key Identifier:
                keyid:5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/fd415bc5bbb54e3c160a168eb273ba2cc6b99095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:7a:92:1a:68:e2:37:7b:c8:47:f9:10:12:a3:a3:49:b0:1a:
         38:3b:16:18:e0:a0:33:df:98:4f:4b:f8:6d:68:32:08:ac:e9:
         1c:bd:ae:07:45:59:1b:c4:61:1f:98:c1:e6:d6:13:c3:12:2f:
         6b:70:1e:13:fd:6f:f6:6b:0e:ce:49:21:53:ec:fa:d0:7d:bf:
         ea:8d:cd:74:8c:47:e7:92:ff:8a:cd:a4:f7:0d:19:ab:b6:fd:
         10:9f:0c:2a:5e:32:77:85:f3:ec:f3:69:3b:7b:88:66:13:a0:
         3e:cf:c3:ce:80:d9:7b:0d:85:3e:6b:5f:15:51:30:e4:15:3a:
         cf:40:d7:15:50:aa:65:40:ce:26:ce:04:70:fa:21:a2:41:97:
         b3:a2:9f:bd:63:10:cd:b1:dd:1f:94:09:67:57:42:40:69:c5:
         f7:6a:ee:85:2b:f3:1d:45:0b:6f:83:15:48:80:f3:98:15:e4:
         cb:9d:bd:11:a5:50:4e:17:24:e0:44:f7:2c:3e:ec:d5:28:2f:
         fc:a1:ef:f9:b3:77:f4:4d:97:03:eb:2d:2c:35:e8:7d:ec:9a:
         f6:c8:01:4d:45:61:21:d5:c1:24:2d:21:c2:f9:2c:a4:ee:67:
         eb:f9:a7:f5:63:dc:98:1f:46:bd:76:3e:4d:59:34:3d:74:25:
         9b:bd:a8:da
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICLsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTRh
YTIyNmYzZTgyODZlMjFiZjJlYzkzN2MyYzYxNTllYWJmZGE0ZjAeFw0yNDAzMDIx
MzU2MTRaFw0yNjAzMDIxMzU2MTRaMDMxMTAvBgNVBAMTKGZkNDE1YmM1YmJiNTRl
M2MxNjBhMTY4ZWIyNzNiYTJjYzZiOTkwOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCa2XQnWGFKk37N0CYAZvP8rrlcqJyXwYJXaW+yb46QtEDMm1jb
2bDKwFiwRvcfT8ag/2E0FQk+T5jY7TQbwLlLA6zFF74Ku4zrXHM2KBlpb/NN+3zd
Cp3kuv+xmO0sCq0JQdWYm92tBXhmBjDNrc4i+3IHzV/YkDCpRXcN7glZzuszYBi2
ptb7oHhFgx57VXq8QqwX66N1EGu3on+9ZeLQX/dba9+MJaRlYklQpVIU2da+/C0g
ClVDGSNWpWTYSlZ5iCtvAHF6ized9/p+QmZIz/v34s1frI6m3+UeEvBz7ZXN7nmQ
BO42bpLlEgpJCgAqjItsmg0oEBJPu6OeN/EHAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQULy3SrjQHpEdfNKv2pX9Ue16/afgwHwYDVR0jBBgwFoAUW9XFFPSovwp/8Og1
EyRZ7iTov8swDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xNGFhMjI2
ZjNlODI4NmUyMWJmMmVjOTM3YzJjNjE1OWVhYmZkYTRmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wZjBmNzU1MS0xZDViLTQ0NzQtYmUxMi1iMDE0YTMz
NzcwZjcvZmQ0MTViYzViYmI1NGUzYzE2MGExNjhlYjI3M2JhMmNjNmI5OTA5NS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzBmMGY3NTUxLTFkNWItNDQ3NC1iZTEyLWIwMTRh
MzM3NzBmNy8xNGFhMjI2ZjNlODI4NmUyMWJmMmVjOTM3YzJjNjE1OWVhYmZkYTRm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAYEGQABMA0GCSqGSIb3DQEBCwUAA4IBAQAwepIaaOI3e8hH
+RASo6NJsBo4OxYY4KAz35hPS/htaDIIrOkcva4HRVkbxGEfmMHm1hPDEi9rcB4T
/W/2aw7OSSFT7PrQfb/qjc10jEfnkv+KzaT3DRmrtv0QnwwqXjJ3hfPs82k7e4hm
E6A+z8POgNl7DYU+a18VUTDkFTrPQNcVUKplQM4mzgRw+iGiQZezop+9YxDNsd0f
lAlnV0JAacX3au6FK/MdRQtvgxVIgPOYFeTLnb0RpVBOFyTgRPcsPuzVKC/8oe/5
s3f0TZcD6y0sNeh97Jr2yAFNRWEh1cEkLSHC+Syk7mfr+af1Y9yYH0a9dj5NWTQ9
dCWbvaja
-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:35 2024 by rpki-client on console-fra.rpki-client.org