Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/f28cb52ff5f61da83220e69f06d5f8df4d792f02.roa
File:                     f28cb52ff5f61da83220e69f06d5f8df4d792f02.roa (raw, json)
Hash identifier:          K7xxhkziL/HONjOjwZ5BLRnKpwd0z/k89gGxDpgd3Fw=
Subject key identifier:   0A:62:D3:65:91:84:4B:6E:A5:4F:8C:9C:A4:CE:6F:AB:01:E3:54:33
Certificate issuer:       /CN=f73d4be60effa74299e0c554b1c14532e561c6fb
Certificate serial:       B943
Authority key identifier: 50:EE:F5:72:C4:C4:8A:56:90:99:40:05:F9:F6:57:C1:23:C5:02:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f73d4be60effa74299e0c554b1c14532e561c6fb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/f28cb52ff5f61da83220e69f06d5f8df4d792f02.roa
Signing time:             Thu 04 Jan 2024 19:45:05 +0000
ROA not before:           Thu 04 Jan 2024 19:45:04 +0000
ROA not after:            Sun 04 Jan 2026 19:45:04 +0000
asID:                     273079
IP address blocks:        2803:8c50:7f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47427 (0xb943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73d4be60effa74299e0c554b1c14532e561c6fb
        Validity
            Not Before: Jan  4 19:45:04 2024 GMT
            Not After : Jan  4 19:45:04 2026 GMT
        Subject: CN=f28cb52ff5f61da83220e69f06d5f8df4d792f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:4a:24:66:43:8f:cd:4b:98:a0:c5:37:b2:
                    9b:f5:8d:22:0a:6f:69:8b:b8:b6:99:64:4a:b1:c6:
                    14:10:eb:3a:4f:23:5a:a5:6a:01:38:5c:98:9f:f6:
                    07:93:08:af:27:c2:ee:2d:6e:7c:21:1f:7d:2c:8c:
                    13:98:37:f5:7a:e7:1a:ea:a5:1c:01:51:34:e2:2b:
                    84:6f:d9:1e:9a:fd:61:59:d8:e0:8c:61:99:ea:19:
                    73:4c:d3:23:b1:c4:17:56:16:f7:53:dc:d3:bb:6e:
                    97:58:fe:85:51:0b:31:b5:a8:79:94:3a:52:c3:ca:
                    b0:73:56:6f:be:01:b1:cc:64:7d:68:45:41:0d:fd:
                    93:f1:8f:e7:84:65:31:e4:f1:ec:68:35:b3:f0:df:
                    c0:a1:bd:51:4a:7a:91:16:27:64:2a:74:b6:b2:15:
                    d7:ea:7c:b9:9a:38:29:a0:11:a1:a0:1c:41:b2:3e:
                    4b:c6:7f:2c:df:c5:5b:4f:97:e5:9d:8a:64:fc:81:
                    b5:9e:5e:3f:9c:fc:dd:ec:c4:f3:40:7b:04:93:02:
                    38:ee:84:59:41:25:6b:63:65:2c:af:3d:17:06:a9:
                    64:1c:30:7c:ec:86:ca:3b:9e:74:bb:db:ee:26:1b:
                    22:31:18:54:ce:27:60:ef:5e:5a:66:70:aa:40:ea:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:62:D3:65:91:84:4B:6E:A5:4F:8C:9C:A4:CE:6F:AB:01:E3:54:33
            X509v3 Authority Key Identifier:
                keyid:50:EE:F5:72:C4:C4:8A:56:90:99:40:05:F9:F6:57:C1:23:C5:02:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f73d4be60effa74299e0c554b1c14532e561c6fb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/f28cb52ff5f61da83220e69f06d5f8df4d792f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/f73d4be60effa74299e0c554b1c14532e561c6fb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c50:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:d9:f8:a7:58:ed:0d:19:10:ae:16:06:d8:53:e3:a6:ae:5e:
         7d:a3:02:a8:1b:cd:53:98:a8:7c:c0:75:ad:9c:30:95:3c:55:
         e6:71:fe:21:a1:24:61:bc:b3:e2:53:55:9b:e3:69:24:04:9c:
         26:d3:bf:04:04:61:20:11:91:56:21:5d:40:21:bd:b3:08:6a:
         08:50:33:42:5e:f8:92:2d:d0:c1:c6:67:50:71:e2:a4:1e:05:
         bc:6d:1c:9e:3e:f4:9b:97:4c:ef:61:5a:31:d2:c7:c4:7c:76:
         8b:16:da:87:bd:16:e3:de:ae:5f:e3:fe:bf:88:06:96:05:4a:
         fd:c0:95:8b:7a:a2:44:e9:62:fc:90:92:9e:e0:eb:67:a4:28:
         ab:83:10:2b:34:35:6f:9f:df:bf:43:68:ab:0f:fc:3b:8a:a5:
         3f:60:76:26:ba:38:ea:f0:09:8a:87:5b:2a:51:c0:2c:3e:08:
         2f:db:b4:2a:f6:0a:dc:38:a5:70:42:d9:ce:81:db:1f:7a:c0:
         66:e3:a0:07:e2:03:8e:17:99:dc:1d:ec:b7:54:5b:1f:35:73:
         24:dd:85:6b:5a:a1:db:29:7f:89:5d:db:c8:2e:98:d5:7d:2a:
         82:8c:19:7b:36:8d:e0:e3:33:f0:6b:5a:3e:25:b9:16:0d:71:
         a7:72:a7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org