Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/6ead70f7bb47c99b7225dd79cbe85de9b3099fee.roa
File:                     6ead70f7bb47c99b7225dd79cbe85de9b3099fee.roa (raw, json)
Hash identifier:          Gl/EdoJVdLhEvwCFz9yuDI3F0OZcKTctvQfhsiBGbC8=
Subject key identifier:   7C:16:82:60:FA:15:98:02:4D:F8:AD:C2:3E:C5:23:7B:E5:AC:30:51
Certificate issuer:       /CN=a48fe311c2a83c0820501183fc544237207ec446
Certificate serial:       09FBD7
Authority key identifier: EA:3C:98:02:6F:A1:69:9B:C0:CB:15:2A:76:FD:43:BE:5C:A4:8F:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48fe311c2a83c0820501183fc544237207ec446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/6ead70f7bb47c99b7225dd79cbe85de9b3099fee.roa
Signing time:             Wed 24 Mar 2021 14:34:37 +0000
ROA not before:           Wed 24 Mar 2021 14:34:37 +0000
ROA not after:            Tue 24 Mar 2026 14:34:37 +0000
asID:                     19429
IP address blocks:        2801:16:c800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654295 (0x9fbd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48fe311c2a83c0820501183fc544237207ec446
        Validity
            Not Before: Mar 24 14:34:37 2021 GMT
            Not After : Mar 24 14:34:37 2026 GMT
        Subject: CN=6ead70f7bb47c99b7225dd79cbe85de9b3099fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:87:40:c4:d3:0c:48:bd:be:7e:4d:21:47:
                    82:4b:de:72:94:53:34:58:aa:fa:9b:1a:a6:b2:fb:
                    de:34:93:c9:5b:8b:b8:a8:59:48:67:40:76:d8:2b:
                    32:55:f9:96:0c:53:d2:3d:e0:d1:ba:b2:41:f4:f6:
                    bb:bf:6f:ee:80:74:ff:80:77:04:17:84:0b:a4:be:
                    70:da:f2:b1:1d:04:b0:ce:d1:10:9d:62:09:53:08:
                    0f:c2:52:23:bb:e4:19:c7:df:7a:1f:5e:f4:c4:5b:
                    42:11:2f:b8:d4:a0:54:0c:9e:28:d8:11:47:53:d6:
                    40:c3:18:2e:d5:e1:bd:1d:10:09:91:ef:97:00:e6:
                    ec:fe:8b:f1:6d:1e:aa:54:99:84:9d:3c:72:a6:e1:
                    cf:7c:f1:4a:eb:cf:4a:f3:8e:05:f4:b9:c1:cc:31:
                    38:ff:69:82:85:ce:88:0f:b5:5d:05:f6:95:d7:de:
                    b4:84:06:93:6d:28:92:4f:31:4a:06:c8:37:89:74:
                    af:83:e8:7d:fb:24:8d:28:5e:ec:f1:b5:11:42:ed:
                    4c:40:94:64:02:88:65:83:d7:6a:60:d0:d4:ee:7f:
                    70:eb:25:90:05:e2:8e:14:5e:17:b8:be:7a:c0:74:
                    a5:79:71:a5:07:6f:fc:00:99:9e:f6:0c:c5:c9:5f:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:82:60:FA:15:98:02:4D:F8:AD:C2:3E:C5:23:7B:E5:AC:30:51
            X509v3 Authority Key Identifier:
                keyid:EA:3C:98:02:6F:A1:69:9B:C0:CB:15:2A:76:FD:43:BE:5C:A4:8F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48fe311c2a83c0820501183fc544237207ec446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/6ead70f7bb47c99b7225dd79cbe85de9b3099fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/a48fe311c2a83c0820501183fc544237207ec446.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:8c:cf:95:7a:b2:32:1c:a2:94:e6:90:3a:31:9f:43:20:bc:
         48:2c:dc:f3:0e:27:80:5e:ab:90:fe:73:27:4b:f8:80:19:4b:
         c7:88:45:aa:5f:c8:4e:fc:06:85:15:9d:cc:ce:3b:63:9e:6c:
         73:81:06:c6:43:47:e0:42:8c:15:28:7f:d6:df:53:6e:97:fc:
         b7:d1:ba:6f:c6:79:fc:c4:a2:81:6a:b0:53:bd:81:40:94:e6:
         42:4e:45:c3:f6:a2:8c:13:29:e1:a6:77:33:52:66:0f:77:d9:
         cf:ec:ae:24:c6:0b:29:4b:13:b2:44:01:32:60:1a:a2:6b:fc:
         70:42:1d:2d:b1:01:0e:9f:5f:5c:20:8e:5b:87:16:40:8a:54:
         09:98:43:58:02:ce:91:e9:17:3b:ba:4f:b1:26:22:bf:88:94:
         0a:ea:7b:fc:2b:48:dd:dc:02:59:ff:d9:4c:fe:56:cf:30:28:
         64:39:2e:27:05:c0:0c:ff:32:7f:8e:c7:47:3e:ff:a5:52:f2:
         e5:0e:7b:52:77:fd:71:80:f4:24:dc:b4:36:ce:23:eb:dc:6e:
         f6:70:5e:15:2b:93:e9:6d:64:52:f3:d1:95:b7:d1:f6:c9:9a:
         c1:b1:13:d0:6b:bf:da:eb:7c:7d:85:af:85:04:4d:ba:3e:a3:
         69:f9:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org