Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/5205eae71962e960caffe7eb9cae8ee1ce8790a4.roa
File:                     5205eae71962e960caffe7eb9cae8ee1ce8790a4.roa (raw, json)
Hash identifier:          lDhMDtOLHHkdS2aN0GMJikPo+jupRRoxRkZJt5TA6OE=
Subject key identifier:   9A:01:68:70:EB:56:05:01:6E:FE:DE:36:69:39:1F:7A:60:27:01:1A
Certificate issuer:       /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial:       176D72
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/5205eae71962e960caffe7eb9cae8ee1ce8790a4.roa
Signing time:             Mon 24 Jul 2023 21:19:14 +0000
ROA not before:           Sun 23 Jul 2023 21:19:14 +0000
ROA not after:            Thu 24 Jul 2025 21:19:14 +0000
asID:                     272992
IP address blocks:        2803:8b80:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535346 (0x176d72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
        Validity
            Not Before: Jul 23 21:19:14 2023 GMT
            Not After : Jul 24 21:19:14 2025 GMT
        Subject: CN=5205eae71962e960caffe7eb9cae8ee1ce8790a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:43:41:ce:01:ac:8b:2e:5e:53:c6:9e:5d:e6:
                    c1:a8:bd:f1:30:72:16:f3:47:ca:b5:b0:8a:cd:f9:
                    d7:4b:3d:77:22:be:95:24:75:be:3a:bc:64:59:dd:
                    f2:44:fd:3e:9a:b5:af:0c:15:c2:fb:f3:86:db:44:
                    1b:c0:81:8e:fb:89:1a:c9:62:72:29:13:3a:09:6e:
                    5f:5a:28:10:45:aa:e8:56:58:46:ec:1f:8f:63:dc:
                    5e:19:59:d0:59:03:15:91:1b:7e:59:fb:f7:8d:f1:
                    f0:25:2c:4b:10:96:4e:b0:e8:27:e2:b3:21:28:23:
                    ab:9d:95:b7:eb:19:b0:fa:0b:7d:a8:e6:e5:88:48:
                    4d:5f:12:74:6c:c9:e8:34:b6:d6:33:1e:f1:43:6a:
                    04:b4:75:12:f8:46:a7:03:21:1b:12:b2:6c:5a:15:
                    c1:78:4e:3f:6f:05:b0:ea:c6:63:92:96:fc:4d:12:
                    f4:6e:51:0c:e8:78:8a:28:0b:9b:3d:1c:72:ec:34:
                    17:5e:8c:2a:04:90:bb:f6:51:91:7d:ce:32:8f:9d:
                    37:2a:f0:0f:f2:7a:ae:59:a2:b5:e2:90:e7:b5:0c:
                    1a:01:c6:47:fd:79:c6:40:35:f0:42:f4:92:e3:39:
                    92:0c:b9:68:e7:7b:e1:c5:e1:f5:f4:41:db:12:3a:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:01:68:70:EB:56:05:01:6E:FE:DE:36:69:39:1F:7A:60:27:01:1A
            X509v3 Authority Key Identifier:
                keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/5205eae71962e960caffe7eb9cae8ee1ce8790a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b80:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:4a:c0:d8:f6:d1:ef:96:0c:d9:7b:3e:4a:1d:13:8f:e7:
         11:17:39:c5:56:45:4f:b3:c0:69:7f:b0:d6:60:bd:c3:c6:1a:
         5d:a9:67:b9:c9:2a:07:0a:80:be:12:8f:4f:63:51:50:17:db:
         e9:bf:d5:18:9d:28:4f:61:ea:23:06:36:ea:8a:a3:95:23:f5:
         0e:17:ef:87:f5:16:61:ef:03:97:80:f4:43:97:2e:66:a0:bf:
         76:0e:0f:6b:ad:bb:42:0f:28:1a:33:75:95:7f:a1:7d:54:78:
         dc:9b:94:cc:05:4d:d4:68:11:eb:37:51:12:b1:3f:50:c1:10:
         b8:73:7b:37:90:25:a2:df:09:4e:53:75:97:02:20:8a:07:ac:
         21:b7:4a:02:95:86:fb:22:d1:9d:1d:a7:f3:2d:73:dd:22:db:
         7c:44:1c:b8:8f:83:11:31:5c:3f:ab:a1:8e:fa:b3:9d:1d:89:
         57:10:f7:ad:12:f6:61:f8:5e:17:65:46:02:fe:98:18:b5:4a:
         9d:7d:4d:c2:97:57:fa:1e:81:de:3b:3b:48:3a:8c:f0:1b:9e:
         c4:75:89:58:3f:2a:60:c5:11:92:96:cd:93:2a:bc:91:16:05:
         5f:b2:73:ab:7b:36:3d:7e:02:8b:77:fb:01:85:fa:a2:b7:6a:
         65:e6:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org