Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/bf28790d8d0563b892a7ba07ee86bf5590e6cee1.roa
File:                     bf28790d8d0563b892a7ba07ee86bf5590e6cee1.roa (raw, json)
Hash identifier:          Xb3tdvS/OmECK5RkgPkzT8F76xqUrPJwaJnTrgzwbq8=
Subject key identifier:   D3:47:5F:45:4D:CC:3D:88:18:C0:12:88:A1:79:9C:E5:73:D5:60:10
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       112D43
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/bf28790d8d0563b892a7ba07ee86bf5590e6cee1.roa
Signing time:             Fri 03 Jun 2022 02:53:18 +0000
ROA not before:           Thu 02 Jun 2022 03:00:00 +0000
ROA not after:            Sun 02 Jun 2024 03:00:00 +0000
asID:                     271842
IP address blocks:        2803:b0e0:9982::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125699 (0x112d43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Jun  2 03:00:00 2022 GMT
            Not After : Jun  2 03:00:00 2024 GMT
        Subject: CN=bf28790d8d0563b892a7ba07ee86bf5590e6cee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:fd:eb:d8:4f:92:79:29:92:cc:63:e2:78:
                    05:2f:f3:69:62:f8:cd:44:3f:c2:a3:20:e0:94:c0:
                    aa:54:7e:c1:8e:28:9c:20:de:02:9e:e9:ed:07:1d:
                    98:a0:9d:9f:af:a8:b4:0a:08:20:ba:47:78:d2:de:
                    e8:fb:8f:0b:23:d3:b9:4b:69:fb:dd:d5:6a:96:ac:
                    30:58:ef:35:7f:6d:e5:58:31:c0:29:27:c7:63:ea:
                    27:b7:db:ff:a7:2d:95:69:0e:47:54:3b:79:e2:cb:
                    2e:6b:07:c7:a4:f5:f4:a9:cd:02:82:ae:7f:ed:47:
                    cc:73:42:c8:5e:8c:1d:c7:e4:ef:19:22:ec:68:4d:
                    07:c5:fd:5d:1d:2d:b2:48:1d:5e:a8:ef:25:e4:eb:
                    d7:70:22:92:1d:3e:06:e4:f8:fa:b5:46:b6:67:b3:
                    a0:dc:dc:19:d4:48:80:bf:d7:99:46:83:fc:fe:e0:
                    9a:59:d1:2a:9f:4c:15:fd:ab:b2:01:00:9a:9d:45:
                    45:8c:44:8b:0a:20:06:db:80:91:31:27:2d:15:0c:
                    97:b4:39:ad:ba:b0:69:2e:3f:e0:6e:48:c9:7e:8f:
                    62:b8:8a:22:bf:18:3e:2d:ac:23:b3:f6:0a:29:9c:
                    a6:d5:40:45:fa:b2:c4:59:17:a0:52:5d:4a:de:66:
                    93:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:47:5F:45:4D:CC:3D:88:18:C0:12:88:A1:79:9C:E5:73:D5:60:10
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/bf28790d8d0563b892a7ba07ee86bf5590e6cee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9982::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:5d:eb:83:96:e7:60:33:78:5a:af:40:72:fe:83:1f:8d:
         d2:8f:92:1f:11:a5:d0:45:25:eb:03:00:22:33:00:d3:a3:b1:
         b1:85:68:06:f5:c1:13:e3:d9:b2:ac:fd:fd:c6:75:b2:dd:20:
         5e:b4:45:54:7d:1f:c4:92:21:be:ed:0f:01:ff:43:12:1e:49:
         b8:5e:cd:62:06:75:7d:9c:6a:e4:2c:b7:aa:f4:6e:37:44:cf:
         c3:34:3e:1d:5d:65:9a:1f:6b:61:25:d1:6d:3c:e9:6b:a7:7d:
         99:60:14:1f:44:1d:84:a3:ca:f7:a6:27:b4:a4:6c:ff:bb:ae:
         52:07:1e:ac:a3:3a:db:bb:ef:24:f3:eb:1a:3d:30:dd:e2:91:
         ec:ee:01:66:50:35:cb:bb:e7:fb:b3:ff:32:c2:3b:c6:5f:ac:
         06:ae:e8:c2:55:2b:50:b1:56:d9:dd:e9:ac:d3:ca:0f:9c:32:
         04:8c:9a:aa:da:7f:38:d6:dd:10:0e:d3:73:3b:07:a3:a4:a7:
         4f:b4:e5:36:3e:64:fa:e3:40:87:da:06:a0:fe:29:99:47:a0:
         d1:d1:0d:88:cd:11:99:32:41:da:9a:9e:05:05:4e:da:50:29:
         dc:1d:2d:68:08:f7:ce:95:c2:23:38:06:cd:a2:b0:30:8b:85:
         33:31:04:1d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDES1DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
OTVlZDczM2JmNTRmNDMwZDE3NGJiMWYwYmY4OTVkNmJjNzBiNjQwHhcNMjIwNjAy
MDMwMDAwWhcNMjQwNjAyMDMwMDAwWjAzMTEwLwYDVQQDEyhiZjI4NzkwZDhkMDU2
M2I4OTJhN2JhMDdlZTg2YmY1NTkwZTZjZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2GH969hPknkpksxj4ngFL/NpYvjNRD/CoyDglMCqVH7Bjiic
IN4CnuntBx2YoJ2fr6i0Cgggukd40t7o+48LI9O5S2n73dVqlqwwWO81f23lWDHA
KSfHY+ont9v/py2VaQ5HVDt54ssuawfHpPX0qc0Cgq5/7UfMc0LIXowdx+TvGSLs
aE0Hxf1dHS2ySB1eqO8l5OvXcCKSHT4G5Pj6tUa2Z7Og3NwZ1EiAv9eZRoP8/uCa
WdEqn0wV/auyAQCanUVFjESLCiAG24CRMSctFQyXtDmturBpLj/gbkjJfo9iuIoi
vxg+Lawjs/YKKZym1UBF+rLEWRegUl1K3maTLwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFNNHX0VNzD2IGMASiKF5nOVz1WAQMB8GA1UdIwQYMBaAFDTRdQ2EHmBaoLgJ
i5fx9hw2EA6XMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU5NWVk
NzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWIxZTE1MmYtZmM1MC00MzViLWJlZWItOGIzODY2
ZTFiMGZlL2JmMjg3OTBkOGQwNTYzYjg5MmE3YmEwN2VlODZiZjU1OTBlNmNlZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YjFlMTUyZi1mYzUwLTQzNWItYmVlYi04YjM4
NjZlMWIwZmUvZjU5NWVkNzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDsOCZgjANBgkqhkiG9w0BAQsFAAOCAQEAMrld64OW52Az
eFqvQHL+gx+N0o+SHxGl0EUl6wMAIjMA06OxsYVoBvXBE+PZsqz9/cZ1st0gXrRF
VH0fxJIhvu0PAf9DEh5JuF7NYgZ1fZxq5Cy3qvRuN0TPwzQ+HV1lmh9rYSXRbTzp
a6d9mWAUH0QdhKPK96YntKRs/7uuUgcerKM627vvJPPrGj0w3eKR7O4BZlA1y7vn
+7P/MsI7xl+sBq7owlUrULFW2d3prNPKD5wyBIyaqtp/ONbdEA7TczsHo6SnT7Tl
Nj5k+uNAh9oGoP4pmUeg0dENiM0RmTJB2pqeBQVO2lAp3B0taAj3zpXCIzgGzaKw
MIuFMzEEHQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org