Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/0134ba68947b30eac0cc3c0b1feeebf4d7d03333.roa
File:                     0134ba68947b30eac0cc3c0b1feeebf4d7d03333.roa (raw, json)
Hash identifier:          jLwVhRe/QF+orDKb5ys/bubXafPBpY8iQgkUQyPDcIU=
Subject key identifier:   D0:2B:A9:17:89:86:CC:D3:83:9A:38:8A:0F:0D:69:52:B1:30:34:A7
Certificate issuer:       /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial:       176803
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/0134ba68947b30eac0cc3c0b1feeebf4d7d03333.roa
Signing time:             Mon 24 Jul 2023 21:17:24 +0000
ROA not before:           Sun 23 Jul 2023 21:17:24 +0000
ROA not after:            Thu 24 Jul 2025 21:17:24 +0000
asID:                     272992
IP address blocks:        2803:8b80:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533955 (0x176803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
        Validity
            Not Before: Jul 23 21:17:24 2023 GMT
            Not After : Jul 24 21:17:24 2025 GMT
        Subject: CN=0134ba68947b30eac0cc3c0b1feeebf4d7d03333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9d:80:cf:8f:40:ff:76:4d:d1:18:d1:8b:2d:
                    5a:f8:28:33:bd:c1:70:9a:ef:5b:e4:0f:52:c5:9b:
                    bc:89:80:c1:a6:bd:70:71:e8:c7:bc:4e:93:ef:22:
                    72:09:ae:7a:f5:23:9e:ca:76:d7:d8:aa:39:1c:40:
                    07:84:f9:49:68:ea:7e:47:21:b1:28:89:30:56:1e:
                    7e:e4:a5:0d:c1:f1:fb:21:9d:51:9b:94:82:d9:85:
                    47:71:c2:7a:68:8c:c3:31:c3:e4:11:ba:60:2b:15:
                    14:9e:e2:d3:d8:83:b8:19:c5:13:67:68:54:3f:83:
                    6c:1f:4b:fa:3c:fe:23:cd:82:e6:9e:36:ed:ce:31:
                    cb:1e:38:8b:84:ed:e7:53:3c:2b:ec:37:c7:f8:33:
                    07:f2:5e:e9:03:74:d4:1e:1d:a1:77:5a:ed:92:8c:
                    5a:14:ad:f5:45:56:d0:88:a7:73:d8:eb:6d:58:c9:
                    85:82:75:0e:40:5a:35:7b:36:01:d8:02:42:bc:d4:
                    7f:cf:e7:e4:8a:9a:94:fa:54:14:0b:3f:7d:8c:9b:
                    d6:cd:1d:3b:e9:2b:69:18:3d:5d:80:7f:16:fa:f5:
                    71:56:57:01:e0:63:9e:83:22:66:c9:b0:bd:bf:ea:
                    cb:cd:4c:cf:be:eb:44:dc:04:87:1a:d9:ba:cc:17:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2B:A9:17:89:86:CC:D3:83:9A:38:8A:0F:0D:69:52:B1:30:34:A7
            X509v3 Authority Key Identifier:
                keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/0134ba68947b30eac0cc3c0b1feeebf4d7d03333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b80:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:37:42:6d:8d:28:56:6f:76:7e:40:d1:74:26:22:a7:34:97:
         23:1a:a1:2a:28:04:69:ae:cb:28:e7:72:39:99:9e:7b:96:69:
         22:75:25:92:71:d2:df:87:30:55:71:b9:3c:3f:f9:7a:20:a4:
         97:82:af:01:da:07:89:de:33:3c:0a:0a:11:b0:c3:2c:ef:1c:
         eb:35:07:1c:03:52:7d:3d:bf:37:ad:ff:3a:c2:c7:27:0a:db:
         29:13:84:66:14:09:bd:b4:b2:33:83:ac:e3:25:0f:53:fe:53:
         78:72:29:27:eb:6c:13:81:c4:ab:19:b2:32:d2:78:5c:30:24:
         9b:bf:3b:7f:df:ec:6f:c5:e1:66:db:76:a2:a9:83:e5:ba:41:
         b8:2b:fe:ce:78:74:7c:3b:b7:d1:c9:c2:b4:40:6a:e8:c3:fa:
         75:a1:e8:7f:53:19:57:2f:57:20:a5:7c:1f:a4:68:82:5d:48:
         2f:7a:c8:28:e2:a7:48:d1:07:ac:fe:60:68:be:91:73:78:c8:
         da:f6:b5:39:cc:f5:3a:8b:f8:82:6d:33:0f:31:b3:b6:92:8a:
         75:94:98:a4:24:55:54:c9:93:66:45:0b:38:78:aa:97:fc:e9:
         45:3d:6c:98:32:ef:95:3d:50:f1:ba:d6:56:2c:f5:b4:b6:82:
         cf:64:1e:bf
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDF2gDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
NGUwYzdjMTBlM2NhMmU3ZDE5NDVlYWQ2YTllZTRjZDA0NThmNmMwHhcNMjMwNzIz
MjExNzI0WhcNMjUwNzI0MjExNzI0WjAzMTEwLwYDVQQDEygwMTM0YmE2ODk0N2Iz
MGVhYzBjYzNjMGIxZmVlZWJmNGQ3ZDAzMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjZ2Az49A/3ZN0RjRiy1a+CgzvcFwmu9b5A9SxZu8iYDBpr1w
cejHvE6T7yJyCa569SOeynbX2Ko5HEAHhPlJaOp+RyGxKIkwVh5+5KUNwfH7IZ1R
m5SC2YVHccJ6aIzDMcPkEbpgKxUUnuLT2IO4GcUTZ2hUP4NsH0v6PP4jzYLmnjbt
zjHLHjiLhO3nUzwr7DfH+DMH8l7pA3TUHh2hd1rtkoxaFK31RVbQiKdz2OttWMmF
gnUOQFo1ezYB2AJCvNR/z+fkipqU+lQUCz99jJvWzR076StpGD1dgH8W+vVxVlcB
4GOegyJmybC9v+rLzUzPvutE3ASHGtm6zBdhxwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFNArqReJhszTg5o4ig8NaVKxMDSnMB8GA1UdIwQYMBaAFGHuxv3CzC/O3OD3
LHLHVCyTDfbFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzc0ZTBj
N2MxMGUzY2EyZTdkMTk0NWVhZDZhOWVlNGNkMDQ1OGY2Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDk4NWU2NjctZGE5Zi00ZjE1LWFjZmYtNTlhMzY2
NjAzN2JlLzAxMzRiYTY4OTQ3YjMwZWFjMGNjM2MwYjFmZWVlYmY0ZDdkMDMzMzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOTg1ZTY2Ny1kYTlmLTRmMTUtYWNmZi01OWEz
NjY2MDM3YmUvMzc0ZTBjN2MxMGUzY2EyZTdkMTk0NWVhZDZhOWVlNGNkMDQ1OGY2
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDi4AAATANBgkqhkiG9w0BAQsFAAOCAQEASDdCbY0oVm92
fkDRdCYipzSXIxqhKigEaa7LKOdyOZmee5ZpInUlknHS34cwVXG5PD/5eiCkl4Kv
AdoHid4zPAoKEbDDLO8c6zUHHANSfT2/N63/OsLHJwrbKROEZhQJvbSyM4Os4yUP
U/5TeHIpJ+tsE4HEqxmyMtJ4XDAkm787f9/sb8XhZtt2oqmD5bpBuCv+znh0fDu3
0cnCtEBq6MP6daHof1MZVy9XIKV8H6Rogl1IL3rIKOKnSNEHrP5gaL6Rc3jI2va1
Ocz1Oov4gm0zDzGztpKKdZSYpCRVVMmTZkULOHiql/zpRT1smDLvlT1Q8brWViz1
tLaCz2Qevw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org