Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/959b6f7698778e1759773445f87e03b44e604e53.roa
File:                     959b6f7698778e1759773445f87e03b44e604e53.roa (raw, json)
Hash identifier:          7HoVV22AkABJgP70fhgBqL62Rz8jgrATRDfaf/6f1Yc=
Subject key identifier:   1D:9F:3A:44:CB:37:53:12:16:85:1E:10:C6:9E:87:84:C0:E0:7F:3F
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       244FCE
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/959b6f7698778e1759773445f87e03b44e604e53.roa
Signing time:             Fri 21 Jul 2023 20:54:59 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     267790
IP address blocks:        2001:13b0:800d::/48 maxlen: 48
                          2001:13b0:800e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2379726 (0x244fce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=959b6f7698778e1759773445f87e03b44e604e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:3d:29:98:7c:73:0f:02:9f:33:6c:79:36:
                    b3:50:54:d1:a0:c9:36:78:43:2e:59:5f:59:76:31:
                    20:c6:11:a5:58:a8:83:e3:39:76:71:b7:00:3b:05:
                    01:39:7e:e1:63:5a:de:a0:22:fc:a0:76:49:e2:56:
                    ab:fd:98:ce:51:79:0e:f4:5f:e3:98:51:77:86:92:
                    8f:be:86:e1:35:78:83:9e:0c:9c:61:6e:0e:3d:21:
                    98:40:68:92:5d:6d:2d:a2:87:b0:2f:b4:d5:3d:0e:
                    8d:71:99:62:f1:ad:e6:75:99:db:3d:df:8b:77:fb:
                    13:3b:32:ad:cc:a9:70:ed:db:14:c8:77:ba:d4:6a:
                    51:b0:14:41:5e:0b:f0:4b:8c:34:e0:0b:53:f6:27:
                    d2:b9:ff:e3:15:48:b7:1a:57:e6:a9:3d:0d:2e:68:
                    d4:db:25:a0:63:bf:be:b7:9d:fa:ca:a9:92:4a:9e:
                    db:1f:99:03:f4:5d:90:91:a1:ff:4a:ac:59:2a:4b:
                    8c:81:d7:f3:ff:ab:e4:06:e6:31:83:b8:91:3c:e1:
                    53:da:c7:f1:fa:26:2b:a2:00:d2:e5:fa:29:92:82:
                    8f:1e:44:f0:7c:6e:68:a6:79:f9:34:5c:4c:71:6f:
                    fe:c4:3c:62:6f:bb:7b:a8:12:59:d2:e2:7f:90:6a:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9F:3A:44:CB:37:53:12:16:85:1E:10:C6:9E:87:84:C0:E0:7F:3F
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/959b6f7698778e1759773445f87e03b44e604e53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:800d::-2001:13b0:800e:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0f:e3:ff:48:84:c2:99:10:7d:e6:6b:6f:40:2c:19:91:35:35:
         c6:78:64:ea:22:40:b6:b9:9b:fd:12:a2:88:f7:4f:95:c4:be:
         9a:5d:17:83:53:5e:a9:22:54:e8:d3:67:26:91:8d:f2:2e:43:
         fb:2e:89:b0:94:d7:ae:9e:a0:db:eb:18:56:74:c4:99:1d:07:
         1e:03:e2:e3:08:54:ba:18:72:64:6d:ec:a7:60:f2:dc:1d:a2:
         6a:6b:7c:fa:bf:81:c6:db:e6:1e:ec:76:bb:47:ef:df:3c:ae:
         51:25:c0:87:c1:6d:85:94:1c:e5:f8:40:05:f0:a5:b6:e4:ff:
         14:b3:b5:41:d8:d9:28:08:0e:de:9c:e8:29:c7:c6:7a:97:2e:
         dc:b1:f4:18:a5:a6:dd:41:5d:64:f4:86:55:4e:fb:28:5c:2b:
         9f:c6:80:45:b8:dd:c6:d7:6a:60:6c:a0:ab:20:48:67:b3:b9:
         cf:3c:f7:1a:ec:03:c2:a9:3d:b6:02:54:47:48:de:eb:1b:56:
         07:ae:55:76:0e:ef:05:48:85:1d:2e:0c:45:7e:61:10:00:3f:
         81:fb:12:c1:13:44:ac:96:a6:b2:5b:72:97:0f:e5:bf:74:dc:
         ee:4f:38:08:35:32:6d:17:82:2a:73:de:93:26:ee:fd:1e:f7:
         33:99:9d:f3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDJE/OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjMwNzIw
MjA1NDU3WhcNMjUwNzIxMjA1NDU3WjAzMTEwLwYDVQQDEyg5NTliNmY3Njk4Nzc4
ZTE3NTk3NzM0NDVmODdlMDNiNDRlNjA0ZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArro9KZh8cw8CnzNseTazUFTRoMk2eEMuWV9ZdjEgxhGlWKiD
4zl2cbcAOwUBOX7hY1reoCL8oHZJ4lar/ZjOUXkO9F/jmFF3hpKPvobhNXiDngyc
YW4OPSGYQGiSXW0tooewL7TVPQ6NcZli8a3mdZnbPd+Ld/sTOzKtzKlw7dsUyHe6
1GpRsBRBXgvwS4w04AtT9ifSuf/jFUi3GlfmqT0NLmjU2yWgY7++t536yqmSSp7b
H5kD9F2QkaH/SqxZKkuMgdfz/6vkBuYxg7iRPOFT2sfx+iYrogDS5fopkoKPHkTw
fG5opnn5NFxMcW/+xDxib7t7qBJZ0uJ/kGprlwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFB2fOkTLN1MSFoUeEMaeh4TA4H8/MB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwLzk1OWI2Zjc2OTg3NzhlMTc1OTc3MzQ0NWY4N2UwM2I0NGU2MDRlNTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAIwFDASAwcAIAETsIANAwcAIAETsIAOMA0GCSqGSIb3DQEBCwUAA4IB
AQAP4/9IhMKZEH3ma29ALBmRNTXGeGTqIkC2uZv9EqKI90+VxL6aXReDU16pIlTo
02cmkY3yLkP7LomwlNeunqDb6xhWdMSZHQceA+LjCFS6GHJkbeynYPLcHaJqa3z6
v4HG2+Ye7Ha7R+/fPK5RJcCHwW2FlBzl+EAF8KW25P8Us7VB2NkoCA7enOgpx8Z6
ly7csfQYpabdQV1k9IZVTvsoXCufxoBFuN3G12pgbKCrIEhns7nPPPca7APCqT22
AlRHSN7rG1YHrlV2Du8FSIUdLgxFfmEQAD+B+xLBE0SslqayW3KXD+W/dNzuTzgI
NTJtF4Iqc96TJu79HvczmZ3z
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org