Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0dc8730937752444ab98835247cedbaf4f6022c0.roa
File:                     0dc8730937752444ab98835247cedbaf4f6022c0.roa (raw, json)
Hash identifier:          5OTyBn8UYS+dO7bFILm4CFwHk4UeWud36G2PMadGj2s=
Subject key identifier:   81:1E:4F:E7:2E:F5:7C:B6:35:57:4D:1A:17:6E:16:05:EE:C2:3A:3C
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DA66D
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0dc8730937752444ab98835247cedbaf4f6022c0.roa
Signing time:             Wed 24 Mar 2021 14:28:46 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:2010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894573 (0xda66d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=0dc8730937752444ab98835247cedbaf4f6022c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:c1:9d:07:43:da:16:e4:11:ee:e4:88:70:
                    1a:15:a1:20:5c:1f:61:f6:f2:db:f9:c7:b0:a1:eb:
                    b9:f8:fd:56:cd:fd:37:88:1b:b7:87:dc:ad:72:9e:
                    c1:a0:b6:77:29:89:42:d7:23:cd:22:62:b7:b6:f3:
                    72:3d:e2:17:df:c1:a7:7d:4e:12:74:ca:66:3a:d8:
                    84:d7:ff:db:c5:d0:57:fa:ee:06:33:37:65:1e:36:
                    1d:2f:ec:96:17:71:7d:60:63:11:e7:17:ff:f9:22:
                    af:e9:b6:ad:ed:b3:c1:2b:85:f5:ac:43:14:42:25:
                    da:05:22:92:77:d1:0d:bf:0c:05:fa:40:21:86:8c:
                    61:14:fd:bf:e6:1d:03:27:d7:3d:30:b4:98:ff:fc:
                    08:31:3a:9f:da:89:90:95:99:d8:9b:93:44:a4:82:
                    a4:b0:98:f0:86:b2:d0:20:43:97:8a:db:5e:05:7d:
                    8d:93:0a:d6:97:c0:77:a1:2f:3d:a5:7a:61:11:ec:
                    c6:82:75:01:e8:b7:d6:b5:55:0d:c4:0e:bf:d2:d4:
                    2f:15:b5:33:73:69:00:2f:21:71:0f:59:cd:84:8b:
                    ae:0c:1d:f7:50:ec:25:21:d0:8d:35:bf:ec:48:10:
                    20:b3:cb:8e:f6:ca:69:34:f3:d0:78:f4:06:00:f1:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1E:4F:E7:2E:F5:7C:B6:35:57:4D:1A:17:6E:16:05:EE:C2:3A:3C
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0dc8730937752444ab98835247cedbaf4f6022c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:2010::/44

    Signature Algorithm: sha256WithRSAEncryption
         bd:5a:b6:35:66:09:c0:c9:f7:c0:04:40:09:6a:ac:91:20:29:
         b7:c8:5d:aa:6c:2b:fc:81:42:86:f8:18:79:78:94:60:ef:1a:
         a7:91:f6:11:05:98:54:16:0b:f5:a4:bb:bd:27:5d:f3:17:46:
         87:ac:fc:f0:38:b9:e1:f4:3d:b3:8d:21:fd:d9:1b:36:98:39:
         3d:d2:ab:0e:d2:e6:d5:6d:30:45:fa:4e:4a:69:7c:0d:2e:95:
         36:93:8e:f2:ca:e6:23:d3:1d:de:0c:94:29:5f:2a:fb:41:01:
         56:7a:8b:d1:b3:ac:45:e2:ab:c8:97:31:66:19:f5:76:a3:80:
         6d:90:62:bb:e0:0f:5b:d9:b8:d5:f0:1d:48:58:ea:ea:72:eb:
         15:fc:7f:6d:2a:b7:5d:d6:14:50:2e:7a:03:b8:ed:71:1d:3d:
         9d:8a:52:1e:b4:54:7c:9d:9a:1e:51:9f:06:e1:5d:9f:88:fb:
         f9:cf:16:35:65:83:54:c8:41:ac:a1:de:bb:0e:5e:23:37:8c:
         49:f7:5d:6e:8e:6c:3e:1a:c1:df:19:6a:ac:53:41:b3:8e:bc:
         75:15:1d:8a:0a:c8:64:fd:62:72:e3:15:26:77:d6:e3:51:f0:
         c3:44:0e:af:2c:ec:d4:d4:ea:f4:70:6c:b6:fd:1e:c0:27:19:
         e2:16:17:f9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDaZtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjEwMzI0
MTQyODQ0WhcNMjYwMzI0MTQyODQ0WjAzMTEwLwYDVQQDEygwZGM4NzMwOTM3NzUy
NDQ0YWI5ODgzNTI0N2NlZGJhZjRmNjAyMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp4rBnQdD2hbkEe7kiHAaFaEgXB9h9vLb+cewoeu5+P1Wzf03
iBu3h9ytcp7BoLZ3KYlC1yPNImK3tvNyPeIX38GnfU4SdMpmOtiE1//bxdBX+u4G
MzdlHjYdL+yWF3F9YGMR5xf/+SKv6bat7bPBK4X1rEMUQiXaBSKSd9ENvwwF+kAh
hoxhFP2/5h0DJ9c9MLSY//wIMTqf2omQlZnYm5NEpIKksJjwhrLQIEOXitteBX2N
kwrWl8B3oS89pXphEezGgnUB6LfWtVUNxA6/0tQvFbUzc2kALyFxD1nNhIuuDB33
UOwlIdCNNb/sSBAgs8uO9sppNPPQePQGAPH9UwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFIEeT+cu9Xy2NVdNGhduFgXuwjo8MB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmLzBkYzg3MzA5Mzc3NTI0NDRhYjk4ODM1MjQ3Y2VkYmFmNGY2MDIyYzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCgBAfAgEDANBgkqhkiG9w0BAQsFAAOCAQEAvVq2NWYJwMn3
wARACWqskSApt8hdqmwr/IFChvgYeXiUYO8ap5H2EQWYVBYL9aS7vSdd8xdGh6z8
8Di54fQ9s40h/dkbNpg5PdKrDtLm1W0wRfpOSml8DS6VNpOO8srmI9Md3gyUKV8q
+0EBVnqL0bOsReKryJcxZhn1dqOAbZBiu+APW9m41fAdSFjq6nLrFfx/bSq3XdYU
UC56A7jtcR09nYpSHrRUfJ2aHlGfBuFdn4j7+c8WNWWDVMhBrKHeuw5eIzeMSfdd
bo5sPhrB3xlqrFNBs468dRUdigrIZP1icuMVJnfW41Hww0QOryzs1NTq9HBstv0e
wCcZ4hYX+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org