Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/5e9f1643c4519468afbf25c5872f5191013ae7eb.roa
File:                     5e9f1643c4519468afbf25c5872f5191013ae7eb.roa (raw, json)
Hash identifier:          387V+04tVpfZ40I/Nr5S7Hf0FkQC+uLUo+gHnOg2N+w=
Subject key identifier:   3A:F1:5E:43:8B:98:58:88:3C:C4:EE:32:49:DC:5F:E1:81:93:B7:C6
Certificate issuer:       /CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
Certificate serial:       0197EE
Authority key identifier: EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/5e9f1643c4519468afbf25c5872f5191013ae7eb.roa
Signing time:             Thu 21 Jul 2022 19:28:10 +0000
ROA not before:           Wed 25 May 2022 03:00:00 +0000
ROA not after:            Sat 25 May 2024 03:00:00 +0000
asID:                     272136
IP address blocks:        2801:109::/44 maxlen: 44
                          2801:109:4::/46 maxlen: 46
                          2801:109:8::/46 maxlen: 46
                          2801:109:c::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104430 (0x197ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
        Validity
            Not Before: May 25 03:00:00 2022 GMT
            Not After : May 25 03:00:00 2024 GMT
        Subject: CN=5e9f1643c4519468afbf25c5872f5191013ae7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:16:84:e3:c6:df:01:37:9e:46:5d:01:54:
                    b3:3a:51:05:aa:89:2a:2d:61:ee:94:b9:c2:07:31:
                    72:17:d9:73:be:7e:01:ed:15:9e:57:f0:ab:64:39:
                    77:29:ea:eb:54:ed:44:b8:bf:96:b4:68:a8:c1:95:
                    db:a3:97:6f:8b:34:ee:94:72:1b:ed:28:48:11:67:
                    02:f0:d3:c1:3b:47:9b:58:08:5c:01:43:d4:3c:b1:
                    1c:c6:22:79:03:05:44:f4:57:5c:01:ae:e0:a0:cc:
                    4c:f5:fa:0f:a7:0b:a1:cc:4a:95:4c:da:53:9a:f0:
                    9a:09:59:0c:0f:d2:ee:41:0a:aa:f7:e2:d6:c7:2c:
                    80:f5:44:71:c7:2e:a4:b7:bb:ce:c4:58:49:7a:90:
                    3e:cd:fd:bf:d2:de:0c:34:26:ff:f0:c5:86:89:1c:
                    be:77:62:1b:24:0c:d9:0c:8f:b2:cd:b9:ec:be:43:
                    91:fe:4b:69:4a:65:51:34:a6:70:2e:23:16:c1:4a:
                    e5:a7:ee:9b:ce:41:1e:19:e9:e8:4d:99:60:85:52:
                    70:e0:d9:89:05:12:2e:32:65:bc:54:b9:ed:61:0b:
                    81:e8:bb:51:0e:1b:04:00:0d:aa:8d:a3:de:9e:dc:
                    3c:d4:49:88:45:67:62:7f:f6:29:e1:dc:d4:61:dd:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F1:5E:43:8B:98:58:88:3C:C4:EE:32:49:DC:5F:E1:81:93:B7:C6
            X509v3 Authority Key Identifier:
                keyid:EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/5e9f1643c4519468afbf25c5872f5191013ae7eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:109::/44

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:4f:af:37:fb:cd:cd:be:b8:5b:a5:29:bc:90:91:9b:27:
         58:34:5c:a5:e3:92:1d:bd:42:16:20:ac:68:f1:e3:d9:a9:e8:
         0a:15:15:2a:4f:5e:ee:00:7d:43:4f:fb:dd:d6:e2:6b:e1:8c:
         02:87:05:60:fd:6f:d7:1c:65:dd:1a:86:de:36:fb:ef:15:dd:
         5c:ce:d3:6c:6f:02:30:38:46:85:06:07:bb:9e:88:ae:a3:fb:
         36:c0:78:82:42:8c:a4:89:48:49:8e:6f:83:0b:c2:d4:c3:ac:
         99:aa:93:61:55:58:7e:e1:b5:a0:44:be:fd:a4:58:a9:83:8e:
         3a:ce:1c:71:3e:0e:c3:7b:7e:a0:cb:cb:89:5f:86:9d:3e:a5:
         08:e6:91:da:37:60:b1:7b:91:28:3e:34:c9:dd:ad:87:c0:85:
         b8:82:b3:c0:fc:89:62:65:fa:91:76:43:67:bd:8f:c1:86:9b:
         67:66:a3:a3:e9:f1:71:2b:ad:f5:ba:8f:f3:2d:15:94:0f:b5:
         a4:17:5f:ed:e6:6d:ed:09:cd:e9:95:4c:b1:98:2d:2a:c5:a0:
         73:ad:66:24:84:b5:90:71:d6:ac:46:09:bc:2e:d3:7f:b9:c2:
         f2:b6:67:99:d5:27:ae:16:76:0f:27:22:15:c8:38:a4:e8:db:
         b6:5d:f5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org