Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dfd4c813-f4df-43b0-8b8c-099a23165c19/6792bd8e54774e7ab9ec43cea0307d07a5f293f1.roa
File:                     6792bd8e54774e7ab9ec43cea0307d07a5f293f1.roa (raw, json)
Hash identifier:          k0DoEdOCjf5R/lekoiO7QhWQZw0MX+viTl9nzkMu/3E=
Subject key identifier:   36:22:55:AE:80:3F:32:4B:D3:6E:EE:1D:09:32:3B:9F:B9:BE:7A:6B
Certificate issuer:       /CN=2f73b11b6421d4c69f5c483a691c61750df15993
Certificate serial:       19E031
Authority key identifier: FB:00:E1:23:EA:69:29:26:10:5B:CF:F8:69:91:67:78:B2:69:98:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f73b11b6421d4c69f5c483a691c61750df15993.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dfd4c813-f4df-43b0-8b8c-099a23165c19/6792bd8e54774e7ab9ec43cea0307d07a5f293f1.roa
Signing time:             Mon 08 Aug 2022 21:14:53 +0000
ROA not before:           Mon 08 Aug 2022 21:11:54 +0000
ROA not after:            Thu 08 Aug 2024 21:11:54 +0000
asID:                     14618
IP address blocks:        2801:178:e10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695793 (0x19e031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f73b11b6421d4c69f5c483a691c61750df15993
        Validity
            Not Before: Aug  8 21:11:54 2022 GMT
            Not After : Aug  8 21:11:54 2024 GMT
        Subject: CN=6792bd8e54774e7ab9ec43cea0307d07a5f293f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:95:04:ce:5e:bb:6c:8b:78:60:de:99:d3:
                    1e:14:7b:17:0e:16:82:54:1e:4f:21:a4:1f:8d:9c:
                    10:36:58:05:79:e2:17:bd:5b:1c:a2:2c:ac:11:8d:
                    7f:6f:d0:bc:8a:19:b2:61:9e:64:cb:1c:58:91:bc:
                    b7:2a:b0:43:3b:d8:38:f4:ce:a5:36:60:4c:6e:a8:
                    e6:1f:1b:59:29:4b:ec:05:92:c4:94:8b:ac:71:64:
                    4b:e3:03:49:06:5a:be:74:64:13:e8:df:18:60:d9:
                    c2:96:3d:3d:e8:26:e4:34:3f:90:c3:79:6b:4b:35:
                    72:9d:47:94:c5:b7:7a:69:19:7a:f1:f7:6c:a2:22:
                    4f:8a:86:af:22:a0:27:07:2a:1f:63:db:6b:fd:a8:
                    92:8f:1c:f2:58:f5:b5:70:46:61:42:a9:e3:05:ff:
                    8e:92:0f:32:3d:24:49:89:cf:be:ca:f8:16:f3:74:
                    10:24:4c:4b:66:82:9f:8f:44:2c:e9:56:44:70:80:
                    2b:80:99:be:15:d0:c6:6c:ad:47:cd:28:25:b6:21:
                    ac:fe:cd:07:a4:08:d8:ef:56:09:e4:a6:af:4a:15:
                    26:1e:8c:0f:5c:f4:bd:6e:75:59:ac:96:89:43:8b:
                    c9:c0:18:21:57:f8:6c:d5:20:e0:cc:8d:84:1c:08:
                    aa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:22:55:AE:80:3F:32:4B:D3:6E:EE:1D:09:32:3B:9F:B9:BE:7A:6B
            X509v3 Authority Key Identifier:
                keyid:FB:00:E1:23:EA:69:29:26:10:5B:CF:F8:69:91:67:78:B2:69:98:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f73b11b6421d4c69f5c483a691c61750df15993.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dfd4c813-f4df-43b0-8b8c-099a23165c19/6792bd8e54774e7ab9ec43cea0307d07a5f293f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dfd4c813-f4df-43b0-8b8c-099a23165c19/2f73b11b6421d4c69f5c483a691c61750df15993.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:178:e10::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:55:29:60:18:7d:92:37:a7:20:f2:62:d6:21:26:98:f1:c9:
         7d:b6:4b:43:3a:c2:33:b9:8e:51:62:25:92:b5:85:d0:8a:19:
         35:91:c5:0e:96:d5:63:94:8d:b9:55:fd:17:93:cf:6c:8e:1d:
         9f:c9:11:6b:a3:b2:04:5b:d0:5b:0d:22:89:f7:50:1c:c6:42:
         7d:26:2b:7d:ec:71:2c:d9:f4:ba:13:82:70:13:66:cb:cf:d6:
         c3:2f:10:95:2b:29:fa:54:f8:3a:dd:f3:d8:38:e3:6c:18:08:
         88:07:92:93:70:aa:3e:65:04:7e:f8:63:f6:45:43:96:1a:8d:
         a4:42:5a:08:7d:73:bb:ac:87:7f:1f:68:4c:bf:1d:2b:0c:8d:
         e3:2f:d9:13:5e:c0:17:4d:1b:2b:27:f1:c1:6c:73:4b:34:2b:
         0e:7a:c6:d6:8e:fd:5d:5f:e7:1d:af:e5:d7:30:09:da:58:df:
         32:43:cd:7e:68:79:2a:d1:95:5a:40:36:80:7e:54:0d:6f:2e:
         be:97:ad:06:1f:d8:82:df:bb:48:30:e6:40:d6:6d:53:cd:57:
         ec:08:65:4a:28:76:eb:22:f5:8d:6f:55:7d:2b:4a:18:bd:7a:
         cb:17:1a:c3:d1:44:78:1d:79:50:53:f9:ba:e7:5b:84:61:65:
         5c:7d:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org