Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/73a56241e3b8d181b71562079f7534d84e176c67.roa
File:                     73a56241e3b8d181b71562079f7534d84e176c67.roa (raw, json)
Hash identifier:          hrlvB98lGLec4Br2OkXUb/2V/aoLpsXJprFyNV4SunU=
Subject key identifier:   27:80:A3:10:43:78:7F:3A:ED:E5:45:69:98:1F:B1:B7:ED:FE:56:0B
Certificate issuer:       /CN=f73d4be60effa74299e0c554b1c14532e561c6fb
Certificate serial:       B6B5
Authority key identifier: 50:EE:F5:72:C4:C4:8A:56:90:99:40:05:F9:F6:57:C1:23:C5:02:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f73d4be60effa74299e0c554b1c14532e561c6fb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/73a56241e3b8d181b71562079f7534d84e176c67.roa
Signing time:             Thu 04 Jan 2024 19:40:09 +0000
ROA not before:           Thu 04 Jan 2024 19:40:09 +0000
ROA not after:            Sun 04 Jan 2026 19:40:09 +0000
asID:                     273140
IP address blocks:        2803:8c50:8000::/33 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46773 (0xb6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73d4be60effa74299e0c554b1c14532e561c6fb
        Validity
            Not Before: Jan  4 19:40:09 2024 GMT
            Not After : Jan  4 19:40:09 2026 GMT
        Subject: CN=73a56241e3b8d181b71562079f7534d84e176c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:b3:69:b1:fe:ba:1e:3d:33:33:5f:c2:9d:
                    fa:3b:7e:c8:39:39:30:e2:13:42:65:9b:92:a0:82:
                    79:28:bf:01:1e:70:72:2f:9f:1d:01:2e:49:31:0e:
                    d9:08:37:bb:59:99:7e:9e:59:88:16:0f:70:06:5d:
                    34:37:f6:01:f0:ce:4f:06:ee:91:23:8d:b0:89:aa:
                    56:e7:23:2a:78:22:03:03:53:ab:d9:ea:c4:98:5f:
                    7a:a7:84:62:65:13:ce:cf:68:a1:e9:ee:42:44:4e:
                    cb:dc:98:70:6c:27:40:87:85:0e:30:28:f3:9c:11:
                    ca:da:67:e9:be:71:16:02:2c:f2:85:e0:33:01:6b:
                    23:d5:a1:25:52:c2:ce:f8:65:87:d1:9c:2d:9c:56:
                    03:13:58:cc:9b:81:bf:6e:33:8c:4e:0e:ce:42:65:
                    c6:0c:59:70:22:15:4c:44:48:14:6a:3d:4e:33:05:
                    6b:ee:d4:97:91:34:37:e4:eb:f2:42:e2:ed:95:fb:
                    1a:da:4d:11:23:9e:0e:02:8e:29:08:e6:29:ca:07:
                    6d:ee:0d:45:d2:d4:c9:bb:74:aa:45:13:93:4b:ca:
                    1d:9b:f2:1f:c5:1e:64:81:1d:ed:54:05:c7:de:3c:
                    35:f5:fe:0e:06:f9:c1:bb:b0:91:4a:53:1d:d2:87:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:80:A3:10:43:78:7F:3A:ED:E5:45:69:98:1F:B1:B7:ED:FE:56:0B
            X509v3 Authority Key Identifier:
                keyid:50:EE:F5:72:C4:C4:8A:56:90:99:40:05:F9:F6:57:C1:23:C5:02:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f73d4be60effa74299e0c554b1c14532e561c6fb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/73a56241e3b8d181b71562079f7534d84e176c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/f73d4be60effa74299e0c554b1c14532e561c6fb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c50:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:b3:20:83:d0:87:c7:15:bc:99:da:3d:f8:b9:fb:8f:7e:
         18:5a:c3:87:ad:32:5e:80:90:fa:c4:83:3c:b4:71:3d:40:2e:
         09:38:2b:9c:ff:0f:86:0c:2f:9f:79:e0:84:b1:23:d3:6f:6b:
         cc:da:90:07:f8:28:b5:f2:14:28:c1:bd:bc:fc:e1:94:7c:d2:
         0f:ff:16:7d:0b:75:73:6a:d7:ef:01:ee:d4:26:d7:a9:98:f6:
         bc:f4:27:7e:29:c2:68:c5:57:16:b8:3d:69:20:8a:4a:cc:94:
         74:b1:5c:cf:f6:93:48:0e:8a:42:32:41:ae:d3:96:43:33:4f:
         c8:a2:7d:4a:86:59:5d:8e:59:a4:61:df:4b:67:55:d2:68:a8:
         fa:18:34:51:ea:8c:8b:b9:d6:50:18:bb:f0:29:c4:2d:68:e8:
         b4:92:77:c7:4e:89:cb:1c:d3:d6:ae:ec:54:f9:46:f6:fc:21:
         2c:f7:12:3d:62:5b:fb:a5:30:04:6a:3d:d1:67:e5:82:37:a2:
         d6:4c:dc:ff:12:ec:9c:5b:fc:64:45:2d:93:9d:b5:6a:37:88:
         6d:cf:a5:5d:8b:40:23:27:99:b8:18:17:f8:be:e2:40:f5:02:
         c6:24:cd:27:95:5f:8d:54:d3:42:be:dd:68:11:c7:3e:db:f3:
         b3:74:d6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org