Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/edac4b69b894cd467c47a7f5bacbf56c0718ce6f.roa
File:                     edac4b69b894cd467c47a7f5bacbf56c0718ce6f.roa (raw, json)
Hash identifier:          FzgJkpL4kb25evRBe1ttfh6+yHnpGxMAWFZu4EYdLzo=
Subject key identifier:   5F:CC:B1:87:A8:9E:06:91:09:30:96:F0:B0:4D:91:D1:3D:9F:82:48
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       07267D
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/edac4b69b894cd467c47a7f5bacbf56c0718ce6f.roa
Signing time:             Thu 05 May 2022 05:03:49 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Fri 05 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468605 (0x7267d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2023 GMT
        Subject: CN=edac4b69b894cd467c47a7f5bacbf56c0718ce6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:10:86:42:46:b8:e2:49:61:91:0d:d1:71:
                    9c:03:70:d6:be:91:3b:27:87:b2:57:a9:9a:48:f2:
                    4d:dd:1b:85:35:91:60:9a:13:6d:4a:f4:61:a2:e5:
                    66:a8:c2:b6:62:8d:d2:68:b0:7f:f1:60:21:44:df:
                    e4:9c:ff:7e:01:2c:ca:79:13:ae:ea:3b:47:ee:0f:
                    76:af:08:39:c7:28:ac:0a:0b:ff:fd:e7:a0:97:cb:
                    74:b0:ff:7b:4f:76:53:a8:c5:9b:bb:41:12:15:a0:
                    55:9b:89:aa:1d:84:d6:76:c7:80:87:33:bf:a5:99:
                    57:06:23:05:30:ac:06:bb:43:02:cc:36:b0:ac:8c:
                    b5:80:71:3f:b7:9d:c0:4b:e0:0b:2e:fe:b7:e1:79:
                    69:3d:e7:e7:6d:b6:86:0b:eb:7b:06:cf:56:9b:84:
                    c8:cb:c8:26:c3:41:fe:55:d8:03:c6:bf:e4:38:56:
                    10:18:81:3d:3e:f0:7b:6b:c7:39:d3:fb:50:be:fc:
                    fb:58:c0:a6:26:c6:0f:ce:14:09:92:c1:69:e8:b9:
                    2d:d1:51:82:85:6e:a1:d5:f3:04:60:96:57:66:c9:
                    fc:09:a6:fd:e0:82:82:97:f8:e8:3d:eb:84:af:9b:
                    a1:19:6c:14:d0:cc:48:05:13:5e:25:77:8e:56:a0:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CC:B1:87:A8:9E:06:91:09:30:96:F0:B0:4D:91:D1:3D:9F:82:48
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/edac4b69b894cd467c47a7f5bacbf56c0718ce6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:9b:98:d6:3e:e8:43:56:98:ed:51:3f:f3:cb:51:dc:8a:24:
         b1:b4:54:f5:7d:f6:4f:f1:d4:e5:45:af:15:bb:2b:e1:08:0b:
         7b:c6:1b:e1:5f:36:a2:62:75:9d:4b:2e:70:0e:31:1e:d5:a0:
         44:31:50:76:e2:87:13:28:f6:74:b7:8b:03:c9:60:0c:e1:1a:
         d0:00:d6:80:a3:2a:c4:b9:24:8c:6e:4c:e4:a3:89:b7:8a:9a:
         9e:60:4b:29:00:10:e2:10:01:e3:7f:0c:65:93:59:af:34:9d:
         d1:da:3c:08:0e:8c:46:46:34:2c:0c:c4:7a:67:ef:c9:3b:f3:
         68:ae:b3:77:04:ea:b3:a5:09:20:e9:c9:3e:54:0a:e4:c7:27:
         4b:de:ce:7d:ad:97:cf:97:17:d9:d1:f3:dd:10:1b:3f:ab:47:
         de:40:81:ae:2a:64:24:5e:eb:b0:7e:5c:7b:9f:b6:65:1a:ae:
         bb:f2:ad:5f:24:c5:60:49:3a:7d:bb:e4:bb:a7:d5:c3:85:d6:
         30:fd:59:22:d9:a4:ac:9e:d3:b6:f1:9f:c0:d7:b5:9a:d7:15:
         7f:df:37:50:da:86:7e:47:03:c8:0d:61:32:4e:00:c6:6e:48:
         22:05:66:71:05:1c:84:f3:2e:89:20:65:e1:e1:e3:6c:51:02:
         7e:9a:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org