Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/48a78b588df308e75a6e826b0558a5685c6e0866.roa
File:                     48a78b588df308e75a6e826b0558a5685c6e0866.roa (raw, json)
Hash identifier:          f+ix6CCRLZs+TNFmrvMEQjfz9oyqElS5N69MvJjACtQ=
Subject key identifier:   90:02:5B:FE:32:CA:18:5A:22:7C:95:AC:26:B6:E2:29:68:BE:2B:8A
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E6BFC
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/48a78b588df308e75a6e826b0558a5685c6e0866.roa
Signing time:             Wed 24 Mar 2021 14:30:56 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     267790
IP address blocks:        2001:13b0:800d::/48 maxlen: 48
                          2001:13b0:800e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945148 (0xe6bfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=48a78b588df308e75a6e826b0558a5685c6e0866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:40:45:21:7a:5a:30:fa:04:95:6d:43:c2:
                    9d:c6:6d:c0:d4:f6:05:47:f4:5a:a0:40:c3:ae:4e:
                    2c:50:e7:1b:61:44:84:78:9a:6b:fe:34:2b:48:24:
                    05:d0:fa:08:82:61:21:d4:37:b6:6d:98:f1:ba:35:
                    a6:9c:36:22:b6:e4:29:4a:2c:61:a1:0b:62:49:7d:
                    3b:8f:5a:4a:49:46:16:3b:8e:88:e7:93:37:c1:16:
                    7b:c7:1b:14:27:89:89:3b:1e:b3:ff:b4:bb:86:b7:
                    ad:08:35:be:17:e7:43:af:6c:30:ab:29:d8:1f:8a:
                    a5:f7:d0:63:52:76:f5:53:07:15:b5:43:a2:be:5f:
                    77:12:35:dd:5b:52:84:ac:00:3c:ce:88:2c:3d:7d:
                    6f:79:ed:16:47:eb:52:1b:96:86:49:d5:09:47:e2:
                    3f:51:2c:06:cc:ad:b2:76:4b:72:33:8a:bd:4e:0a:
                    eb:db:3b:82:4c:b6:4f:0e:ca:00:49:aa:bc:58:3c:
                    b8:da:d5:a5:c3:d4:ca:00:41:95:cd:1a:fd:cd:22:
                    19:7f:ea:11:7b:57:92:d2:92:e8:41:39:bc:e1:6a:
                    53:b0:eb:51:d1:29:72:88:5f:f1:70:21:0a:58:3a:
                    8c:4b:e5:c9:b3:a9:d2:af:99:08:5b:7d:96:cb:9a:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:5B:FE:32:CA:18:5A:22:7C:95:AC:26:B6:E2:29:68:BE:2B:8A
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/48a78b588df308e75a6e826b0558a5685c6e0866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:800d::-2001:13b0:800e:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0a:93:48:f7:5a:07:70:49:10:7b:64:a4:ff:a0:07:b6:28:ba:
         0a:6d:8b:f5:a0:3c:d6:11:d3:7e:f5:bf:9a:ad:af:5a:ca:78:
         cf:41:76:de:25:01:3f:6e:dd:31:94:3c:a9:de:48:75:87:27:
         46:48:4e:81:92:f4:2d:fe:4d:36:62:96:c3:d2:03:c9:6b:7c:
         a1:94:3f:89:c4:58:62:9c:c1:3d:3b:18:0a:15:cf:1a:ff:7f:
         45:9e:3d:85:b4:c1:97:d2:a7:26:4e:29:b5:3f:7d:30:d0:46:
         d7:4d:a1:ec:cd:c5:cc:5a:1e:c7:c3:a6:47:96:14:56:85:c9:
         2f:18:78:c5:c1:5c:82:84:8b:48:d4:46:b2:2e:c5:d0:ef:9b:
         d4:58:11:d3:4e:30:05:82:e6:d5:47:9c:95:0b:47:f5:38:44:
         4d:e5:49:c7:d0:fc:89:e8:e1:78:f7:db:22:d2:70:b1:09:9d:
         21:9a:ca:f0:af:03:36:66:49:53:d4:ce:e8:37:65:26:7e:59:
         fc:46:02:1f:ca:c7:d6:e6:f9:c3:d8:cf:ac:48:0a:f7:e4:c8:
         d4:b9:c5:74:58:ed:ac:40:87:e9:0f:1d:96:27:90:c2:b5:c0:
         62:76:cb:73:c3:42:44:a4:bf:b9:af:25:b8:f3:cb:05:20:01:
         39:d6:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org