Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/8f68e60b4828f6edb22f951c1f782caefbb8e0c1.roa
File:                     8f68e60b4828f6edb22f951c1f782caefbb8e0c1.roa (raw, json)
Hash identifier:          SrKLSg3kZOvnK4j5Z8atfX+TjDdGkyfiM6Coi9Epi6M=
Subject key identifier:   5E:BF:0B:F8:E2:7A:7B:BD:B3:F9:6C:91:9E:64:F3:5B:CF:F0:DB:60
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       016D56
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/8f68e60b4828f6edb22f951c1f782caefbb8e0c1.roa
Signing time:             Wed 06 Dec 2023 18:12:31 +0000
ROA not before:           Wed 06 Dec 2023 18:12:31 +0000
ROA not after:            Sat 06 Dec 2025 18:12:31 +0000
asID:                     28001
IP address blocks:        2801:165::/44 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93526 (0x16d56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Dec  6 18:12:31 2023 GMT
            Not After : Dec  6 18:12:31 2025 GMT
        Subject: CN=8f68e60b4828f6edb22f951c1f782caefbb8e0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:e2:4f:3f:57:c5:8c:1f:8c:a0:9e:26:b4:
                    84:d8:72:97:5c:4f:e8:21:20:93:3a:25:a8:5c:cb:
                    26:d9:b4:e7:46:b6:1a:ca:15:93:40:04:3a:56:d7:
                    fc:5b:d6:d6:d5:7b:41:ae:3e:88:d8:f9:c3:59:2d:
                    e3:5d:9e:81:16:52:a9:37:8d:c3:91:96:8d:a7:99:
                    60:25:00:64:35:22:1c:12:3a:45:58:0a:d7:5f:43:
                    d0:82:45:d2:a6:24:e4:5c:eb:74:01:3a:b1:e3:71:
                    d1:fb:a9:06:e8:8c:82:71:71:f0:11:7b:fd:8e:f5:
                    a8:75:fb:40:e9:3f:8f:75:dc:7b:03:f5:1b:f4:36:
                    ac:37:4b:30:f9:a8:04:d4:be:d1:d1:4c:65:1f:63:
                    18:5d:c3:74:f9:02:9c:5b:2c:1c:df:99:58:06:e7:
                    55:79:4a:81:99:9d:54:fd:a2:c3:77:26:94:79:c7:
                    e4:96:00:02:ee:da:e1:b7:89:92:42:f5:fe:d8:18:
                    1a:af:dc:f5:d8:da:31:79:6a:11:15:0b:0a:bb:e1:
                    fb:a4:ee:aa:bb:49:95:5e:55:b6:56:2b:18:8e:49:
                    fe:86:44:04:9d:d2:4e:c7:4c:92:c1:40:33:9a:c9:
                    96:40:52:6e:f6:c0:b5:bb:76:ba:19:89:2f:59:8b:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BF:0B:F8:E2:7A:7B:BD:B3:F9:6C:91:9E:64:F3:5B:CF:F0:DB:60
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/8f68e60b4828f6edb22f951c1f782caefbb8e0c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:00:db:32:da:9b:9e:a3:75:b5:1d:c0:a4:b2:c3:95:0b:94:
         db:f6:ce:4c:8e:d8:93:5b:94:fc:d1:7f:de:fc:0c:8d:25:44:
         5e:6a:d8:6d:e0:6b:50:e0:e2:a1:a2:d3:a5:63:52:3d:00:3f:
         3a:3c:53:3f:15:b6:27:51:84:01:62:ae:2b:0c:94:d2:0f:00:
         da:71:6b:50:2f:3a:19:40:6f:cf:ba:83:34:03:7a:5a:ea:25:
         78:4a:f3:1d:d5:a6:c1:11:63:c7:19:4a:e3:4e:8d:4c:a6:21:
         3f:15:30:38:54:85:c7:a6:e9:61:cc:bb:eb:75:7c:e3:16:12:
         c3:c9:f0:40:85:9b:81:23:ff:1b:bc:7f:e4:b9:8c:52:8b:fc:
         09:80:02:97:ce:c3:da:ba:e0:73:8e:da:01:e3:dc:23:ab:d0:
         84:7f:2d:04:58:11:fc:b7:16:f0:e4:8a:6d:2e:d5:6d:d6:b9:
         55:b3:8a:7d:9c:95:e3:ce:5b:7e:bf:0e:bd:ad:6e:66:bc:1e:
         e4:25:7c:1a:18:13:a4:5d:27:ac:d6:3b:44:ab:5c:d9:ab:5a:
         94:1b:5e:6d:c8:3f:09:af:1c:de:a8:07:7c:46:fe:26:71:fe:
         6c:89:2a:40:23:74:52:5c:aa:52:5b:98:2c:7f:6e:f7:b3:d4:
         41:b9:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org