Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/b685ebd2cda483184eba92c8c6ded5ab2f97d619.roa
File:                     b685ebd2cda483184eba92c8c6ded5ab2f97d619.roa (raw, json)
Hash identifier:          jX9JCMgGU7R8cTaXoVSNUSD5atEYJxjJHmh51rtuZmQ=
Subject key identifier:   39:CC:0D:B5:C7:8B:6D:76:0E:1C:48:15:FC:E9:53:32:71:DD:AB:F4
Certificate issuer:       /CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
Certificate serial:       0136B1
Authority key identifier: 5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/b685ebd2cda483184eba92c8c6ded5ab2f97d619.roa
Signing time:             Wed 10 Apr 2024 19:37:09 +0000
ROA not before:           Wed 10 Apr 2024 19:37:09 +0000
ROA not after:            Tue 10 Apr 2029 19:37:09 +0000
asID:                     272373
IP address blocks:        2806:419:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79537 (0x136b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
        Validity
            Not Before: Apr 10 19:37:09 2024 GMT
            Not After : Apr 10 19:37:09 2029 GMT
        Subject: CN=b685ebd2cda483184eba92c8c6ded5ab2f97d619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:6a:ab:4d:5b:5b:40:78:1c:54:c4:22:8c:
                    fd:a1:54:0b:ae:fd:30:a1:e4:65:4d:3b:2e:b5:94:
                    42:a4:4b:53:bb:bf:11:a5:a5:ad:1b:cf:57:30:9e:
                    86:a8:0e:9e:70:e4:9c:5e:6c:3e:64:9e:f1:87:fa:
                    ed:48:32:30:07:89:e8:d6:74:7d:b1:02:39:9a:3a:
                    f1:6f:2c:14:8e:53:f0:a0:2e:ce:ed:c1:93:09:b0:
                    80:36:90:b6:ee:b5:70:51:60:97:5f:53:2e:51:89:
                    69:58:f2:a9:b8:d3:9d:b5:3d:a6:a0:22:bd:fa:d3:
                    39:22:64:11:47:40:8f:22:c4:fe:af:25:a2:42:4e:
                    d5:a9:9f:16:f0:2d:6a:d1:e4:7b:59:cd:7e:64:54:
                    57:49:dc:36:40:5d:d4:80:4a:30:9e:51:23:f2:fe:
                    7d:0e:4f:5b:36:83:2b:c2:67:7c:1d:10:66:15:e8:
                    8e:38:04:be:07:9a:33:6f:73:01:d7:75:b6:d7:70:
                    ec:60:2d:82:d4:03:33:03:40:34:f1:38:5c:fc:c9:
                    db:43:48:37:f2:c9:03:f9:73:e9:9b:56:73:4c:9b:
                    86:de:3d:5f:f7:c8:6a:fb:c5:1e:ba:b1:b0:08:a5:
                    39:76:55:3f:77:7b:e9:69:fb:39:e5:f6:fa:81:a2:
                    5d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CC:0D:B5:C7:8B:6D:76:0E:1C:48:15:FC:E9:53:32:71:DD:AB:F4
            X509v3 Authority Key Identifier:
                keyid:5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/b685ebd2cda483184eba92c8c6ded5ab2f97d619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:fc:d4:8c:fc:fc:21:93:7b:3f:33:2f:fc:6e:c8:f2:2f:dd:
         7b:52:48:5d:61:f3:20:7c:eb:69:f5:bf:e6:93:9f:e0:a0:b0:
         7c:3f:5b:c0:d5:83:79:a6:b0:c1:eb:d6:0f:64:57:a6:c6:fa:
         e4:55:c7:61:e2:98:fc:f8:38:c5:fe:b1:cb:9c:4f:42:d4:ef:
         00:29:1c:de:6b:52:b8:be:ba:02:1b:28:53:48:23:e9:05:55:
         11:7c:17:f4:13:f3:03:6d:af:dc:6e:a0:ad:96:df:bc:9f:b9:
         0b:9b:9a:9d:5f:02:3f:0c:5d:12:ce:93:80:4a:8a:28:62:e1:
         2a:a6:c2:7d:5e:7d:11:fa:be:71:9a:a1:1a:85:77:c2:6f:bd:
         65:3f:f6:6d:23:c5:f7:4a:2e:a7:df:a2:47:7e:a8:bd:90:34:
         55:b0:aa:4a:ee:63:df:4e:e0:d0:13:bc:21:54:ba:31:51:72:
         e0:89:fa:a2:b9:44:25:a7:f7:4f:18:fa:56:c5:a2:76:07:b1:
         66:a6:7c:51:6c:b9:a2:01:74:51:bb:75:51:ee:84:08:95:3b:
         a0:a4:51:fe:0c:50:82:03:bb:b9:b0:49:4b:61:39:8f:68:48:
         17:73:d7:66:af:6e:6a:6b:ac:86:4c:ed:cd:f5:76:84:f5:84:
         b1:27:8b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org