Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/899f477ff1c759164dac70231759d7deb099e5b3.roa
File:                     899f477ff1c759164dac70231759d7deb099e5b3.roa (raw, json)
Hash identifier:          +RgUlLAL7GKQZ6eWluvOKyI4EwRgwXf4KwBjePn/Ybw=
Subject key identifier:   18:A1:11:99:86:8D:61:90:DE:19:5E:06:4A:50:B4:BB:1A:A7:32:4D
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       26F756
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/899f477ff1c759164dac70231759d7deb099e5b3.roa
Signing time:             Thu 03 Aug 2023 15:43:38 +0000
ROA not before:           Wed 02 Aug 2023 15:43:38 +0000
ROA not after:            Sun 03 Aug 2025 15:43:38 +0000
asID:                     10620
IP address blocks:        2800:486::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553686 (0x26f756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Aug  2 15:43:38 2023 GMT
            Not After : Aug  3 15:43:38 2025 GMT
        Subject: CN=899f477ff1c759164dac70231759d7deb099e5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:05:2a:74:61:4b:75:62:28:a8:05:24:0e:
                    75:b8:78:3c:ac:fb:6b:e2:4c:4c:87:87:ce:a1:d9:
                    cb:9f:be:73:99:17:24:8c:e9:60:da:2b:4d:b9:ab:
                    20:69:74:4d:61:38:af:bd:d0:32:24:e4:a0:d0:66:
                    6f:f6:30:55:b0:56:73:3f:59:0c:c1:5d:fc:e8:c8:
                    ba:cf:44:86:2d:f8:98:03:44:fd:26:ce:3b:75:ba:
                    28:46:09:2d:77:ef:1e:8d:4f:1e:04:7d:7d:e2:19:
                    58:2a:5a:c7:ac:65:77:6e:28:d8:66:b4:57:a0:49:
                    4b:5d:41:12:8c:6e:f7:ac:c8:8d:10:6e:d2:83:73:
                    ca:b5:71:c6:d8:1b:ca:4d:4d:ce:29:03:bc:7a:0e:
                    70:85:e6:d9:b2:00:e3:58:4e:f8:d8:fd:b4:2f:8b:
                    b4:c3:53:3a:09:83:63:ea:7e:aa:f6:39:75:e2:99:
                    92:76:3a:ca:3a:19:fd:05:d3:4a:3c:3e:bb:99:b7:
                    58:a2:da:1b:52:a5:24:b7:bc:db:2e:ce:12:77:b4:
                    d7:3a:8a:7e:f3:70:98:dc:90:70:58:61:50:92:2a:
                    ef:ed:b2:69:5a:33:92:37:66:c9:bc:17:0a:8f:8c:
                    94:e8:10:7f:ed:99:08:e7:e4:7a:2a:f7:6a:6c:82:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:11:99:86:8D:61:90:DE:19:5E:06:4A:50:B4:BB:1A:A7:32:4D
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/899f477ff1c759164dac70231759d7deb099e5b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:486::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:4a:0b:79:bc:03:06:f9:69:d4:cd:65:a4:08:bd:f1:80:
         c5:9a:dc:e5:5b:c1:77:d2:1a:0c:67:12:f3:ed:cb:f7:54:2a:
         61:0a:6d:39:ac:aa:37:b8:2f:61:e9:6d:58:0d:31:14:2e:a5:
         3a:51:47:94:cc:8e:c3:27:c4:c8:8e:28:9e:4c:62:ce:91:30:
         49:c5:06:a9:2d:17:7b:df:4c:79:21:65:ca:b0:d3:47:48:96:
         8e:6c:3b:2a:4d:16:f2:87:b7:e6:25:97:9c:87:f6:5b:b3:59:
         70:74:b2:b8:ba:72:75:60:6f:83:52:39:3b:15:4e:7f:80:9d:
         e7:b8:ec:5c:51:c6:5d:f7:5f:f7:0a:b9:73:7e:45:20:43:5f:
         eb:59:66:63:ea:bd:77:d1:0d:78:de:18:6b:51:b6:53:74:13:
         c0:59:21:18:89:23:39:77:cb:2d:b7:73:7e:a7:ac:e8:24:89:
         d1:57:7b:29:3d:c7:71:a6:b2:f8:4a:01:14:31:94:51:75:77:
         ff:02:ff:39:60:d8:3f:be:33:75:e7:85:f3:71:10:f0:4d:b8:
         95:ae:e0:5a:a6:6b:bd:31:c6:f9:04:70:c8:21:14:8c:76:e0:
         7b:34:52:78:e8:8c:4d:10:01:12:9c:92:2d:39:0d:b3:43:f6:
         fb:89:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org