Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/ae39ee417da36f98c2c5d1ee4905e82148eefb6a.roa
File:                     ae39ee417da36f98c2c5d1ee4905e82148eefb6a.roa (raw, json)
Hash identifier:          eu7/rwLyVw1yrDYXeR0D+37s14N+2CwtRMjNbfM7ce8=
Subject key identifier:   57:65:D1:9A:EB:D3:5A:C4:32:37:B6:13:A0:19:42:F2:5C:60:CC:C1
Certificate issuer:       /CN=96a71b323517284a72a07373f4fbd5c14a4e186c
Certificate serial:       045FCD
Authority key identifier: 15:9E:97:13:D5:01:E2:B2:EB:07:A4:D5:78:2F:09:18:31:89:61:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96a71b323517284a72a07373f4fbd5c14a4e186c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/ae39ee417da36f98c2c5d1ee4905e82148eefb6a.roa
Signing time:             Wed 09 Aug 2023 15:53:07 +0000
ROA not before:           Tue 08 Aug 2023 15:53:07 +0000
ROA not after:            Sat 09 Aug 2025 15:53:07 +0000
asID:                     272950
IP address blocks:        2803:2990::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286669 (0x45fcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a71b323517284a72a07373f4fbd5c14a4e186c
        Validity
            Not Before: Aug  8 15:53:07 2023 GMT
            Not After : Aug  9 15:53:07 2025 GMT
        Subject: CN=ae39ee417da36f98c2c5d1ee4905e82148eefb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:bf:40:bc:97:19:11:49:8d:c3:eb:15:5a:
                    cc:82:54:9e:e8:2a:f8:0f:f8:66:f8:b4:a1:65:57:
                    7f:6e:69:21:be:05:88:eb:b1:46:d6:2b:1a:3c:63:
                    cf:f0:d0:07:04:62:0d:0d:a9:b7:d0:e6:f1:72:0e:
                    e4:01:97:86:42:45:1e:2c:e0:65:ce:41:52:a7:47:
                    fe:8d:fb:89:1b:2c:5e:20:18:df:8b:55:ec:41:a3:
                    01:de:8a:b3:21:66:57:9b:dd:5c:46:99:20:18:6b:
                    bf:ed:b8:43:b1:bc:cd:31:09:7a:0e:9c:72:22:a0:
                    fd:43:38:af:bb:fb:37:86:46:14:f1:dd:de:a8:02:
                    1d:d7:e8:eb:1a:ea:7f:56:e4:66:e2:a6:e2:1d:82:
                    b9:bd:0e:dd:0c:93:c6:65:34:3f:1e:0c:fb:7b:cc:
                    86:b3:79:66:a5:5e:30:b7:4a:54:90:8b:e5:7f:eb:
                    f1:9b:2f:b7:7f:a7:c3:b8:5b:11:51:68:ca:42:82:
                    c6:6d:51:89:0e:94:ee:5a:98:c7:2a:f6:76:d5:a8:
                    a3:e1:9e:ae:82:1d:2a:6f:c0:e5:ab:e5:80:75:0e:
                    3a:e8:09:ea:08:a9:9e:98:20:0a:96:a4:47:40:1b:
                    ec:9b:cf:9a:19:ae:ac:14:95:4b:64:9f:7f:ce:39:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:65:D1:9A:EB:D3:5A:C4:32:37:B6:13:A0:19:42:F2:5C:60:CC:C1
            X509v3 Authority Key Identifier:
                keyid:15:9E:97:13:D5:01:E2:B2:EB:07:A4:D5:78:2F:09:18:31:89:61:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96a71b323517284a72a07373f4fbd5c14a4e186c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/ae39ee417da36f98c2c5d1ee4905e82148eefb6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/96a71b323517284a72a07373f4fbd5c14a4e186c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2990::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:4c:e5:25:75:da:fa:be:23:29:44:f5:74:b5:31:9a:7f:62:
         ba:ed:14:76:75:dd:ab:28:47:0e:34:6d:0b:b6:ea:34:60:d9:
         85:10:5e:88:24:e0:9c:86:4c:93:c2:63:69:e0:71:6e:6e:1e:
         36:c8:05:c6:18:5d:4b:4a:22:2a:85:42:67:45:5b:9f:dd:cc:
         f9:20:3a:59:7e:1e:b7:25:0d:54:2b:af:91:5d:8c:07:a0:48:
         98:54:ca:ff:6b:4b:17:a0:ec:bb:3a:59:65:b0:f8:50:90:a3:
         6e:23:f8:5d:90:b1:54:42:79:b1:42:59:01:5d:81:01:e0:f1:
         bc:d3:2d:40:88:5d:d2:3d:5a:0d:bb:cf:5f:20:27:f7:60:fe:
         8d:44:fc:7d:42:3c:32:23:75:5b:6d:5d:69:69:b8:e2:30:66:
         1c:1c:d9:3d:d3:ac:e6:e0:09:b5:11:26:72:6a:c0:ad:86:9b:
         bb:ed:d1:6b:54:56:0b:3f:9d:b4:3c:33:90:db:98:b6:61:12:
         8a:71:c3:01:9d:2a:40:ac:b2:1a:48:85:b9:39:8b:bd:05:ef:
         37:4c:95:91:db:10:4f:b9:00:08:6e:6e:15:b7:2f:db:1b:57:
         3f:21:96:6d:f4:42:29:22:76:a9:c0:bb:0a:cf:50:5f:c7:73:
         ea:f3:6a:ed
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBF/NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
YTcxYjMyMzUxNzI4NGE3MmEwNzM3M2Y0ZmJkNWMxNGE0ZTE4NmMwHhcNMjMwODA4
MTU1MzA3WhcNMjUwODA5MTU1MzA3WjAzMTEwLwYDVQQDEyhhZTM5ZWU0MTdkYTM2
Zjk4YzJjNWQxZWU0OTA1ZTgyMTQ4ZWVmYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAirG/QLyXGRFJjcPrFVrMglSe6Cr4D/hm+LShZVd/bmkhvgWI
67FG1isaPGPP8NAHBGINDam30Obxcg7kAZeGQkUeLOBlzkFSp0f+jfuJGyxeIBjf
i1XsQaMB3oqzIWZXm91cRpkgGGu/7bhDsbzNMQl6DpxyIqD9Qzivu/s3hkYU8d3e
qAId1+jrGup/VuRm4qbiHYK5vQ7dDJPGZTQ/Hgz7e8yGs3lmpV4wt0pUkIvlf+vx
my+3f6fDuFsRUWjKQoLGbVGJDpTuWpjHKvZ21aij4Z6ugh0qb8Dlq+WAdQ466Anq
CKmemCAKlqRHQBvsm8+aGa6sFJVLZJ9/zjnMuQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFFdl0Zrr01rEMje2E6AZQvJcYMzBMB8GA1UdIwQYMBaAFBWelxPVAeKy6wek
1XgvCRgxiWEaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTZhNzFi
MzIzNTE3Mjg0YTcyYTA3MzczZjRmYmQ1YzE0YTRlMTg2Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg5NTkzYjMtMTk5Zi00NmYzLWI4YmItOTQxMTc1
YzQyZjJmL2FlMzllZTQxN2RhMzZmOThjMmM1ZDFlZTQ5MDVlODIxNDhlZWZiNmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODk1OTNiMy0xOTlmLTQ2ZjMtYjhiYi05NDEx
NzVjNDJmMmYvOTZhNzFiMzIzNTE3Mjg0YTcyYTA3MzczZjRmYmQ1YzE0YTRlMTg2
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDKZAwDQYJKoZIhvcNAQELBQADggEBAH9M5SV12vq+IylE
9XS1MZp/YrrtFHZ13asoRw40bQu26jRg2YUQXogk4JyGTJPCY2ngcW5uHjbIBcYY
XUtKIiqFQmdFW5/dzPkgOll+HrclDVQrr5FdjAegSJhUyv9rSxeg7Ls6WWWw+FCQ
o24j+F2QsVRCebFCWQFdgQHg8bzTLUCIXdI9Wg27z18gJ/dg/o1E/H1CPDIjdVtt
XWlpuOIwZhwc2T3TrObgCbURJnJqwK2Gm7vt0WtUVgs/nbQ8M5DbmLZhEopxwwGd
KkCsshpIhbk5i70F7zdMlZHbEE+5AAhubhW3L9sbVz8hlm30QikidqnAuwrPUF/H
c+rzau0=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org