Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37856c56-6989-4714-a8e6-213ada98c64c/dade146fd56fc0979fb04e4e903b7c16cc5ab0dc.roa
File:                     dade146fd56fc0979fb04e4e903b7c16cc5ab0dc.roa (raw, json)
Hash identifier:          afE6BJfOtJ5jHl6KSWDiWXY2NdCYdnboRsMFZSePluM=
Subject key identifier:   DF:86:AE:03:1B:FC:E2:9E:E3:54:8A:4B:0B:04:1A:E2:A0:65:45:20
Certificate issuer:       /CN=75646578c3fee9765e952e1114e099b387860daa
Certificate serial:       01D6B0
Authority key identifier: 3A:A1:30:66:30:C0:15:25:36:09:17:0C:44:7C:D2:74:14:CC:09:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75646578c3fee9765e952e1114e099b387860daa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37856c56-6989-4714-a8e6-213ada98c64c/dade146fd56fc0979fb04e4e903b7c16cc5ab0dc.roa
Signing time:             Fri 02 Jul 2021 20:23:03 +0000
ROA not before:           Fri 02 Jul 2021 03:00:00 +0000
ROA not after:            Sun 02 Jul 2023 03:00:00 +0000
asID:                     262186
IP address blocks:        2801:1e:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120496 (0x1d6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75646578c3fee9765e952e1114e099b387860daa
        Validity
            Not Before: Jul  2 03:00:00 2021 GMT
            Not After : Jul  2 03:00:00 2023 GMT
        Subject: CN=dade146fd56fc0979fb04e4e903b7c16cc5ab0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ae:cf:46:6c:1e:48:20:bc:41:b4:fe:e7:09:
                    21:b9:34:67:37:7c:c5:28:af:c2:b1:8e:64:7d:b1:
                    ec:d6:d2:6b:87:d4:f7:6e:24:9a:02:be:b7:96:92:
                    d8:38:98:25:da:17:7e:9e:f7:e6:ec:6c:62:31:fb:
                    39:09:e7:2c:84:c8:ee:7c:62:4f:a4:d2:66:ab:4d:
                    4a:c0:6a:3a:71:23:99:e5:76:40:9d:ab:b6:5e:aa:
                    6d:c9:2a:2d:49:a0:ee:d2:20:2d:48:c2:d3:61:10:
                    c1:a9:6b:fc:91:56:0d:ad:87:de:43:ac:11:f6:70:
                    dd:da:27:3a:4e:cc:a5:67:f6:74:89:93:36:52:44:
                    3d:cd:52:09:66:78:16:f2:d3:05:96:75:ba:bd:41:
                    9e:bf:8c:8e:a9:c6:cf:2f:ad:0f:d2:81:89:1f:aa:
                    9f:31:f7:0d:f3:3c:53:f9:c8:d6:f6:b4:f2:4b:7e:
                    6f:31:ca:8e:ab:7b:15:66:93:dc:34:2b:2c:75:a9:
                    83:66:49:a9:2f:75:63:2e:37:0d:46:ea:ac:e9:a0:
                    91:67:ef:c6:8d:af:81:46:34:97:4e:24:13:29:ee:
                    86:23:e5:5d:06:32:f2:c9:b1:95:32:eb:9d:3e:08:
                    02:6e:e9:d8:db:7f:5d:66:3b:4f:5b:1a:79:64:ef:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:86:AE:03:1B:FC:E2:9E:E3:54:8A:4B:0B:04:1A:E2:A0:65:45:20
            X509v3 Authority Key Identifier:
                keyid:3A:A1:30:66:30:C0:15:25:36:09:17:0C:44:7C:D2:74:14:CC:09:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75646578c3fee9765e952e1114e099b387860daa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37856c56-6989-4714-a8e6-213ada98c64c/dade146fd56fc0979fb04e4e903b7c16cc5ab0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37856c56-6989-4714-a8e6-213ada98c64c/75646578c3fee9765e952e1114e099b387860daa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:ab:09:a2:ea:27:54:2f:89:a6:04:43:b8:31:8d:ae:e5:33:
         97:10:c8:96:f3:e8:eb:cf:11:2c:86:71:dd:0b:3e:17:65:44:
         52:42:05:e2:84:66:26:26:41:ad:50:a5:d8:6a:28:e4:46:89:
         d2:d0:6b:cf:8d:10:2d:a4:4a:a8:43:44:7b:2d:2f:d5:41:27:
         0b:45:e7:0c:ca:36:2f:36:06:35:37:17:6c:c3:f3:ce:6a:b6:
         03:c5:01:6d:13:9c:3c:35:5c:59:c2:79:89:93:fb:49:7f:54:
         18:07:de:69:35:2f:dd:d0:8f:a4:89:8b:94:e4:b5:06:d8:f6:
         8a:74:c6:9e:89:34:44:04:81:4f:66:4c:1a:5c:2e:3f:f6:29:
         7f:41:e7:4b:7c:eb:cb:2c:2f:78:da:46:8f:7f:5d:50:46:9c:
         74:8f:ff:cc:02:f9:3a:82:16:8b:64:a0:81:9e:aa:8d:27:23:
         c6:ad:c6:1a:b3:f8:41:7b:99:c6:02:22:be:95:9b:3b:04:d1:
         61:71:70:52:0a:20:c7:b0:30:a3:43:de:ee:3b:2f:bb:91:a1:
         f2:40:7d:2e:74:c5:6b:c0:bf:73:43:46:4a:7f:76:3f:f7:9f:
         3a:94:3e:f8:e0:05:00:30:65:f9:b2:65:23:a1:0c:1a:00:b2:
         d7:63:34:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org