Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/690b6f8e74ba8ccae2117971830df1abebd5bb0e.roa
File:                     690b6f8e74ba8ccae2117971830df1abebd5bb0e.roa (raw, json)
Hash identifier:          cn1luAxB9m4y3/B5JhwEKNspIsMDNIz/l+RAp21jDFk=
Subject key identifier:   6E:FC:05:4D:3A:94:C7:35:B8:0C:5E:64:FA:C3:91:5D:42:83:B1:78
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       03E9B6
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/690b6f8e74ba8ccae2117971830df1abebd5bb0e.roa
Signing time:             Wed 24 Mar 2021 14:47:12 +0000
ROA not before:           Wed 24 Mar 2021 14:47:12 +0000
ROA not after:            Tue 24 Mar 2026 14:47:12 +0000
asID:                     30133
IP address blocks:        2001:13c7:7008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256438 (0x3e9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Mar 24 14:47:12 2021 GMT
            Not After : Mar 24 14:47:12 2026 GMT
        Subject: CN=690b6f8e74ba8ccae2117971830df1abebd5bb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:9e:c7:8a:dd:e0:45:24:ff:05:d6:d5:0d:
                    f1:7b:f8:14:f3:70:e9:d3:8f:60:cd:5e:f5:43:36:
                    c6:4f:aa:d3:9a:af:5c:28:21:43:55:f2:9c:f4:81:
                    9b:db:1c:35:ec:ff:eb:52:70:a1:f4:c7:97:f8:49:
                    ab:7b:b3:57:c7:1c:e4:3f:8e:b7:04:28:0d:df:53:
                    d4:de:8a:87:21:5a:02:79:ba:ab:a6:1a:aa:10:93:
                    94:db:e2:03:18:65:de:63:c7:42:e0:a7:f8:4b:6b:
                    68:b2:47:4f:01:9f:88:ef:40:f5:c8:d1:e4:a3:e8:
                    dd:d2:a3:df:27:44:a9:42:d8:21:32:f9:e5:8c:6c:
                    65:fa:f8:37:a1:f4:83:b0:8b:9d:8e:ca:ca:4c:23:
                    78:86:30:37:15:c3:c4:de:de:d0:71:27:dd:5b:10:
                    21:03:59:cc:27:a8:7d:63:f2:5b:39:f2:1e:ae:ac:
                    23:a7:f4:89:9a:5b:59:94:47:dc:fe:e0:f1:86:4a:
                    9c:3c:3f:de:85:2d:1e:68:f4:22:e3:13:7c:d8:ed:
                    4f:7f:10:e7:c3:34:61:f8:aa:2c:ad:5e:2f:62:15:
                    b2:63:6a:b6:d2:cc:c0:43:99:78:ef:d5:cd:f4:12:
                    23:2d:6c:8f:e1:2e:f5:ac:f9:d7:58:09:a4:9f:13:
                    5d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FC:05:4D:3A:94:C7:35:B8:0C:5E:64:FA:C3:91:5D:42:83:B1:78
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/690b6f8e74ba8ccae2117971830df1abebd5bb0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7008::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:d6:86:3b:e4:50:d0:9d:c2:d3:d5:c5:0a:f1:b4:ed:72:79:
         49:b2:e2:ae:6f:23:32:00:53:34:73:87:7c:58:be:04:da:4f:
         4e:99:76:6b:2d:e6:60:06:89:6b:12:fe:a0:50:01:14:04:3a:
         78:e9:9a:26:c6:eb:ec:51:4f:94:1d:36:8a:a8:f0:ff:57:08:
         ce:50:0e:61:82:5c:42:74:16:ac:bb:3b:7c:9c:67:64:18:f4:
         e7:55:f6:51:79:19:eb:d6:e2:4b:71:18:ea:38:0b:93:42:6d:
         4d:73:a1:63:59:c9:04:80:c9:ed:9c:0b:b5:69:ac:57:90:d5:
         8e:1b:6e:53:e9:1c:69:cd:29:56:ee:ee:bc:0d:f2:b7:87:fe:
         6d:c8:1a:71:af:80:4c:e9:ec:79:b7:3f:bb:52:f9:0e:0f:14:
         40:dd:9c:98:38:84:55:6c:f8:b6:d5:77:58:9d:f1:04:a2:2a:
         69:0b:e1:6d:3a:1d:0b:c3:df:80:a5:a6:5d:4c:83:79:61:67:
         75:a1:29:8f:71:e1:cc:a0:fd:fd:01:bc:0e:ac:de:ac:c9:6f:
         2a:0c:d8:78:d1:54:82:28:33:50:1c:20:85:13:3b:74:80:42:
         05:fc:11:b3:78:08:8d:e4:82:aa:85:f4:d7:8e:7d:f6:da:b5:
         da:d0:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org