Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/320478ad4a9627c54130b7f8bfd7bf41e05690f5.roa
File:                     320478ad4a9627c54130b7f8bfd7bf41e05690f5.roa (raw, json)
Hash identifier:          6H+F9ngWhQ960PUUG166LiekrtT04RzTmEnd/mEI+4E=
Subject key identifier:   93:0A:81:33:70:66:62:9A:A4:34:5A:E5:01:17:AD:31:C6:D7:7B:E3
Certificate issuer:       /CN=471b06a93ff238801ce6c8b4186977ced49f09f0
Certificate serial:       0310
Authority key identifier: 7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/320478ad4a9627c54130b7f8bfd7bf41e05690f5.roa
Signing time:             Tue 05 Sep 2023 03:48:14 +0000
ROA not before:           Mon 04 Sep 2023 03:48:14 +0000
ROA not after:            Fri 05 Sep 2025 03:48:14 +0000
asID:                     273072
IP address blocks:        2803:cf90::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784 (0x310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471b06a93ff238801ce6c8b4186977ced49f09f0
        Validity
            Not Before: Sep  4 03:48:14 2023 GMT
            Not After : Sep  5 03:48:14 2025 GMT
        Subject: CN=320478ad4a9627c54130b7f8bfd7bf41e05690f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:06:bb:9a:39:63:33:32:05:75:82:11:80:
                    c1:ca:b9:f4:4c:43:63:98:ba:de:3f:9a:4a:39:b5:
                    6b:0a:c0:af:ba:96:ee:83:6b:7d:0e:ee:68:5d:8c:
                    b7:6a:08:82:49:84:07:a3:bd:e8:e3:6e:48:a7:d5:
                    d1:c3:50:3a:c3:ba:df:f0:3d:f8:ff:4b:2f:4f:60:
                    1d:5c:e3:cd:1c:ad:f1:51:58:c5:dc:ab:aa:c1:4a:
                    0f:e3:ca:e4:3e:8f:87:b8:fb:14:e1:f4:54:eb:b9:
                    36:45:41:b6:94:e4:e9:c0:4a:c3:65:e2:40:81:0d:
                    90:bc:c8:72:88:e6:27:88:9d:60:c7:bc:e3:94:ab:
                    f4:a0:7e:41:d6:ac:d6:9e:c3:d0:05:c5:ab:c5:5a:
                    7c:e4:a1:e8:4b:0f:6f:6f:68:51:9a:54:e1:b3:1b:
                    4a:f0:bc:bf:f1:b7:f1:2c:3b:3c:73:cf:0c:2a:71:
                    7f:e4:ef:93:6e:f3:2b:e7:3c:05:90:21:47:a2:ee:
                    d8:2d:af:1f:bc:c9:2d:a1:91:05:7a:2c:80:d3:b7:
                    53:d4:bb:79:97:db:9c:29:6c:f6:56:34:8e:21:e0:
                    1c:3f:45:dd:e7:24:f9:1c:aa:ea:a6:b4:fe:df:d1:
                    64:9a:b8:e9:a7:70:59:24:5d:45:d4:f4:75:2a:54:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0A:81:33:70:66:62:9A:A4:34:5A:E5:01:17:AD:31:C6:D7:7B:E3
            X509v3 Authority Key Identifier:
                keyid:7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/320478ad4a9627c54130b7f8bfd7bf41e05690f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:5a:43:d1:81:70:ea:cd:b1:4f:0f:a9:05:18:e6:bf:e9:2c:
         25:58:b3:d2:bd:a6:f4:21:c0:99:57:a0:f5:ed:14:c5:dd:ad:
         4c:d4:6f:b2:c6:34:7e:83:3a:93:fd:88:ec:d1:c0:cc:15:41:
         da:d6:2c:90:8a:8e:d6:66:e1:ce:d3:74:85:2f:ca:e3:b0:fe:
         4c:c7:c8:59:88:20:3b:b5:9a:82:21:ba:d0:1d:0f:34:02:74:
         4e:04:41:5b:e8:01:15:b0:d1:c0:dd:39:27:c1:36:77:49:72:
         06:45:c3:16:45:5d:64:a3:09:e1:20:08:29:f7:e1:94:4d:08:
         d0:fa:a8:83:89:9a:19:3c:b3:e8:72:c1:19:ef:56:b6:1e:d1:
         98:ce:4c:34:72:c3:e7:d6:82:63:bf:9f:89:fb:66:42:25:05:
         0e:f6:50:0c:c1:be:e5:cc:8c:3f:3b:b4:3e:c6:2a:1b:b8:9c:
         9d:c4:7c:12:13:23:2c:c0:82:c9:d0:48:22:1b:9f:c4:48:df:
         09:19:7a:8a:46:2b:f0:e2:c2:85:0e:30:81:1b:40:10:1c:83:
         01:6b:37:ed:87:77:1e:2c:d7:53:ad:ff:7a:a7:34:c9:c0:e0:
         76:e8:1c:54:34:fb:2b:a0:13:d6:41:b1:24:13:20:85:57:2e:
         41:4d:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org