Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/db27273b0bd2efc3cbc28045ae2ab4bf535128a8.roa
File:                     db27273b0bd2efc3cbc28045ae2ab4bf535128a8.roa (raw, json)
Hash identifier:          GR/BHtIsYo4JszkBgHgSzCBmZECHVisH6sgg4tHWTTo=
Subject key identifier:   BC:CC:89:88:23:43:42:D9:D0:68:C8:BA:14:13:D5:EA:F5:14:B7:17
Certificate issuer:       /CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
Certificate serial:       0EA628
Authority key identifier: B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/db27273b0bd2efc3cbc28045ae2ab4bf535128a8.roa
Signing time:             Mon 20 Nov 2023 21:35:05 +0000
ROA not before:           Mon 20 Nov 2023 21:35:05 +0000
ROA not after:            Thu 20 Nov 2025 21:35:05 +0000
asID:                     262589
IP address blocks:        2801:1d:8800::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960040 (0xea628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
        Validity
            Not Before: Nov 20 21:35:05 2023 GMT
            Not After : Nov 20 21:35:05 2025 GMT
        Subject: CN=db27273b0bd2efc3cbc28045ae2ab4bf535128a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:a4:cf:98:5e:90:a7:5c:cb:82:44:34:c9:
                    87:31:54:b1:2b:0c:5d:6b:6e:05:11:b0:93:ac:d5:
                    f5:a1:79:4f:88:97:a3:20:e3:fb:d6:b9:d6:06:b2:
                    d6:74:88:00:ec:aa:75:89:e9:9e:b4:b8:6e:29:e8:
                    ca:25:bf:fe:96:e9:a0:72:e9:d2:67:18:c7:53:fb:
                    c0:18:02:1c:0f:73:c5:0c:84:33:ce:e5:e5:64:cc:
                    cb:d9:bf:03:83:f5:c1:c1:51:bd:b6:6c:e6:66:41:
                    fa:44:ee:1c:c9:8a:a1:b1:17:72:cf:a4:31:2c:82:
                    59:51:ec:f2:fb:1a:57:b3:65:1d:98:92:5e:10:b4:
                    12:65:90:aa:2b:36:d0:1b:99:4c:07:e4:61:7b:b0:
                    c3:21:84:52:cd:ad:8b:1c:ab:e7:4f:8b:02:b9:aa:
                    24:5d:1f:7f:51:1c:a2:61:35:42:cc:87:8c:60:b6:
                    ff:84:b4:a8:33:79:05:61:9e:cf:f9:02:63:c3:98:
                    ea:ce:05:63:b3:de:ae:e0:11:db:9e:76:4b:c2:23:
                    3c:cf:eb:7e:97:43:89:76:74:f9:46:21:2d:55:ed:
                    fb:c8:b2:07:1f:7c:bd:06:a7:d8:d0:d6:4d:74:fb:
                    24:dc:a4:fe:3a:d4:23:11:06:2c:64:77:f6:cb:e9:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CC:89:88:23:43:42:D9:D0:68:C8:BA:14:13:D5:EA:F5:14:B7:17
            X509v3 Authority Key Identifier:
                keyid:B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/db27273b0bd2efc3cbc28045ae2ab4bf535128a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/fc6cb1153f9d2823a345e050aa08a59869c1972e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8800::/47

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:9a:dc:84:ff:3d:7b:99:99:7c:c4:2e:64:c7:a2:33:8b:
         39:e4:e8:cb:27:54:57:58:8b:0c:6c:23:57:87:9b:47:e0:fc:
         88:c2:b5:10:17:36:3f:0e:75:1d:de:95:a7:cb:7d:d4:ce:f2:
         50:93:41:50:1d:a8:2e:c6:03:59:c2:51:4a:f7:a1:fe:35:0e:
         fb:7b:f7:53:fe:19:7b:56:18:32:96:97:2d:b2:c3:d5:24:ba:
         23:db:6b:85:25:90:29:c4:37:8f:81:a5:4d:ce:08:e6:0f:52:
         a4:8f:b3:d5:ed:b6:f6:db:58:cc:bb:b9:80:63:b9:7d:3f:65:
         25:fc:8d:89:00:49:7e:1d:0e:cc:dd:a6:dd:29:b6:a6:54:9d:
         75:a1:7a:e2:e8:9e:ab:3c:a4:44:02:ad:b1:1f:3a:5a:44:92:
         cd:36:ef:2b:50:bb:5e:a2:e1:dc:05:69:37:6f:58:a4:04:b8:
         f2:c7:36:cc:5d:d5:ce:54:5c:a9:78:57:bc:19:48:e1:79:20:
         51:9a:02:a3:39:d3:43:33:40:27:e9:30:7b:33:02:4f:d6:99:
         39:3b:6e:15:d1:08:11:f5:5c:01:c1:29:e2:6c:aa:1d:8a:a2:
         88:ca:7e:5d:6f:61:dd:85:0c:ea:ae:cb:15:ba:c9:46:7f:c5:
         e8:40:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org