Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/1cd9c31b01b3169591bb081f3a49e5bb28212803.roa
File:                     1cd9c31b01b3169591bb081f3a49e5bb28212803.roa (raw, json)
Hash identifier:          jU6QGfUYQzKY2j/i5jRgPcH4gljwQLN/ssG3udN89iw=
Subject key identifier:   95:1E:09:86:01:8E:91:B2:1D:89:B9:CD:A1:9C:5D:E6:16:24:A9:2F
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       1590EA
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/1cd9c31b01b3169591bb081f3a49e5bb28212803.roa
Signing time:             Sun 29 Jan 2023 01:16:00 +0000
ROA not before:           Sat 28 Jan 2023 01:14:50 +0000
ROA not after:            Wed 29 Jan 2025 01:14:50 +0000
asID:                     267919
IP address blocks:        2803:ee60:20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413354 (0x1590ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Jan 28 01:14:50 2023 GMT
            Not After : Jan 29 01:14:50 2025 GMT
        Subject: CN=1cd9c31b01b3169591bb081f3a49e5bb28212803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:dd:3c:b4:08:cd:07:58:17:e2:c2:14:d5:
                    f3:0c:22:5f:be:7a:30:1c:b5:17:d9:7b:9f:93:71:
                    41:b6:71:41:79:cb:e8:d5:55:da:59:d7:a9:8d:12:
                    9d:75:da:99:11:4c:61:89:f4:1e:79:8e:3c:d4:d7:
                    6b:70:6f:8e:45:01:c9:1c:6e:89:28:90:e5:3e:92:
                    07:82:c6:b7:9b:4d:1a:ad:76:9c:92:d2:bb:ed:f7:
                    98:0b:24:74:aa:86:9d:17:ae:55:bf:74:2b:0c:fc:
                    fa:a9:16:20:e9:2a:a1:f7:ac:c5:c8:8b:8d:3d:94:
                    bb:20:18:5f:e0:1a:b2:16:12:78:65:f0:00:bf:82:
                    a3:bb:64:34:3c:ec:c6:a1:3e:0f:6c:9f:5d:aa:ee:
                    b1:91:e7:87:dc:7f:02:77:79:40:40:29:af:09:15:
                    82:ce:0d:11:88:1b:d4:00:f7:70:dd:03:27:57:7a:
                    44:5b:12:ec:4c:fe:b6:96:d9:8d:01:28:13:3a:6e:
                    cc:84:34:7e:75:06:e5:9e:3e:64:d7:ee:c2:b3:91:
                    4c:89:8e:65:15:c8:e8:25:ac:a9:63:fe:f1:e9:ee:
                    c8:f7:13:57:84:56:a4:3b:fb:df:90:f1:46:dc:d2:
                    d4:ac:8f:3d:9a:e4:22:76:7d:82:54:87:76:f5:ad:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1E:09:86:01:8E:91:B2:1D:89:B9:CD:A1:9C:5D:E6:16:24:A9:2F
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/1cd9c31b01b3169591bb081f3a49e5bb28212803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:1f:c6:50:b8:6d:96:49:d3:f2:8b:69:99:4f:8a:fa:76:6d:
         63:87:b6:78:6b:c2:2e:05:c4:25:11:1a:26:53:c6:fa:1b:5b:
         37:48:58:ba:a4:ef:80:dc:35:db:14:a9:5c:93:7a:1f:4c:2a:
         1c:fe:57:a6:54:39:f1:72:fb:23:77:5f:cd:1b:2f:6e:3d:0d:
         1a:c5:c5:9d:a7:55:51:94:4a:1d:e2:e9:fc:81:70:42:59:23:
         67:ec:6f:db:58:68:ab:9f:ae:4e:66:84:d4:06:ab:18:f4:a2:
         5e:75:b4:cf:93:50:40:e5:b2:84:7b:f3:36:01:f7:9e:95:90:
         d1:9d:7b:1b:6d:4b:4f:56:05:a7:2e:df:73:4e:e3:81:1a:d1:
         b4:59:68:66:73:6e:8b:7e:75:16:cb:83:18:f3:07:65:4d:0e:
         1e:87:1b:76:b9:de:73:db:cf:08:94:01:01:0f:4d:38:b1:72:
         94:64:7b:e5:4d:57:f1:83:3a:b3:8c:ab:06:84:69:c4:a6:1e:
         af:84:e9:c9:9b:fe:f7:e2:b0:5c:be:0d:9e:34:89:48:ee:d5:
         c4:c6:15:6b:6b:59:e9:84:be:4c:f8:1b:89:37:06:73:df:9b:
         1b:45:96:89:a7:bd:2d:df:77:45:e3:cd:c8:59:44:b3:2c:11:
         31:c5:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org