Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/e9dc1675977fabc0ebea6f8844190e72dc1dd4f8.roa
File:                     e9dc1675977fabc0ebea6f8844190e72dc1dd4f8.roa (raw, json)
Hash identifier:          7Ki58uqtBx0TKG8rQ4K/KytkXTqjmDJXpIU/eJhwIJQ=
Subject key identifier:   45:20:7E:80:BD:54:6C:93:DB:5F:FA:88:67:9A:E3:E0:B7:20:21:6A
Certificate issuer:       /CN=76297e078144b7f66e2711a6f32f1a781bd74804
Certificate serial:       190AE9
Authority key identifier: 6C:72:C6:D0:F2:23:5B:DA:09:12:EE:68:8C:D6:59:92:B1:90:5B:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76297e078144b7f66e2711a6f32f1a781bd74804.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/e9dc1675977fabc0ebea6f8844190e72dc1dd4f8.roa
Signing time:             Fri 02 Feb 2024 14:06:01 +0000
ROA not before:           Fri 02 Feb 2024 14:06:01 +0000
ROA not after:            Mon 02 Feb 2026 14:06:01 +0000
asID:                     271868
IP address blocks:        2803:8c10:80::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641193 (0x190ae9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76297e078144b7f66e2711a6f32f1a781bd74804
        Validity
            Not Before: Feb  2 14:06:01 2024 GMT
            Not After : Feb  2 14:06:01 2026 GMT
        Subject: CN=e9dc1675977fabc0ebea6f8844190e72dc1dd4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:59:89:1d:16:3d:91:02:ab:16:a8:93:32:7a:
                    77:fe:89:69:f1:52:8a:d8:31:40:50:34:7c:e3:f4:
                    c5:2b:6f:03:16:a5:ca:57:b5:57:38:6e:23:1e:09:
                    2b:0f:dd:7c:7a:2e:3c:0a:63:f7:28:ce:a0:2f:5c:
                    ee:da:61:fb:48:cb:47:f4:ba:c3:ef:ac:54:ad:7c:
                    00:fe:24:22:92:36:ae:4f:42:4a:a7:91:2e:2f:69:
                    25:99:38:44:49:c8:8d:c7:be:27:d8:e9:b7:d9:e2:
                    72:0e:0d:fa:d0:fa:af:ff:6d:04:03:75:2a:54:3f:
                    23:68:17:0c:a7:95:c8:b7:67:79:15:a8:d7:fe:2c:
                    be:8a:4d:e1:76:08:c0:c9:9b:8c:6e:e9:5a:dc:bf:
                    cb:33:b7:41:08:4e:e2:57:f2:ce:5b:44:2f:ca:00:
                    cd:97:4c:5a:6c:ae:33:42:1b:53:a4:4d:c5:0c:4e:
                    21:a2:6c:90:aa:3b:a7:47:4e:f3:d1:34:fe:42:28:
                    a6:16:06:39:f3:55:13:5e:ca:98:c6:4f:fa:0c:96:
                    2e:a8:71:df:3e:db:2d:68:1d:90:d2:dc:29:65:f2:
                    05:55:61:34:dd:83:39:40:d2:48:a7:7b:0e:81:10:
                    ff:28:ca:19:0b:ff:49:bb:6f:53:ef:7b:87:bc:2b:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:20:7E:80:BD:54:6C:93:DB:5F:FA:88:67:9A:E3:E0:B7:20:21:6A
            X509v3 Authority Key Identifier:
                keyid:6C:72:C6:D0:F2:23:5B:DA:09:12:EE:68:8C:D6:59:92:B1:90:5B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76297e078144b7f66e2711a6f32f1a781bd74804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/e9dc1675977fabc0ebea6f8844190e72dc1dd4f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/76297e078144b7f66e2711a6f32f1a781bd74804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c10:80::/42

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:3e:19:48:12:73:c6:a0:d3:50:38:ca:b1:34:f2:85:86:
         1d:61:27:41:2b:1b:f4:55:ea:e9:2b:1a:57:19:05:4b:6d:94:
         05:3c:7f:54:5c:dc:d4:47:30:81:51:2c:37:68:4a:38:57:fa:
         c1:e3:52:58:f8:f6:56:1d:07:15:ee:f9:01:18:1c:63:6d:ba:
         97:76:dd:41:18:51:40:e0:33:c4:b8:cd:95:ad:89:2f:e7:cd:
         dc:ea:08:b5:33:e0:ab:bf:62:9e:73:b4:90:b6:b7:2e:c4:61:
         da:bc:29:9d:65:a3:69:c1:fa:21:c5:ff:d7:8a:c6:50:c9:ff:
         19:1c:91:f3:ad:48:66:0b:a3:7f:94:15:23:7f:84:a9:0f:16:
         4a:ec:d3:82:8c:02:36:53:3f:4f:26:8f:49:5c:3d:53:5e:2a:
         d5:bb:1e:e6:c1:78:e6:69:ca:c5:85:8b:d3:98:93:d9:75:0c:
         3a:83:f8:17:3a:76:26:6a:62:0a:05:10:f0:0e:ac:3e:06:f1:
         08:cf:36:cf:da:4c:05:ce:7b:59:d9:4b:12:81:d8:37:4c:4c:
         4a:85:6f:0c:2f:ae:1b:93:c4:f8:da:45:28:f6:82:8c:fa:65:
         e3:0b:5e:af:31:61:35:59:a0:f4:c5:42:1a:c0:ca:1a:ef:9d:
         d9:5d:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org