Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/acdf4ec2899ac36baffb311ec1ff163bb218439a.roa
File:                     acdf4ec2899ac36baffb311ec1ff163bb218439a.roa (raw, json)
Hash identifier:          YrcjwgTxwOiuRIVmG7kjXyghaDqAkDKgOthoLSQplm0=
Subject key identifier:   34:04:72:2C:DC:5F:7D:D6:95:C7:3F:CA:9B:EC:7B:CC:48:53:C1:44
Certificate issuer:       /CN=4c76dfe6832d28ce49a16b84a719874f801ebe5c
Certificate serial:       7448
Authority key identifier: 72:71:BB:93:E1:72:48:85:5C:66:B3:1D:E2:11:CC:D6:5E:FF:1A:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c76dfe6832d28ce49a16b84a719874f801ebe5c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/acdf4ec2899ac36baffb311ec1ff163bb218439a.roa
Signing time:             Fri 08 Mar 2024 06:14:38 +0000
ROA not before:           Fri 08 Mar 2024 06:14:38 +0000
ROA not after:            Sun 08 Mar 2026 07:14:38 +0000
asID:                     273078
IP address blocks:        2803:9a50::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29768 (0x7448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c76dfe6832d28ce49a16b84a719874f801ebe5c
        Validity
            Not Before: Mar  8 06:14:38 2024 GMT
            Not After : Mar  8 07:14:38 2026 GMT
        Subject: CN=acdf4ec2899ac36baffb311ec1ff163bb218439a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:df:db:ed:44:50:7e:36:e1:64:fc:0d:0a:
                    a4:84:24:b3:0c:c8:d5:b0:f3:59:98:0a:c8:51:f0:
                    65:5c:76:2e:c2:89:1d:29:a4:d5:6d:e6:c5:14:7d:
                    d7:c8:cb:6e:7d:80:67:fc:d6:60:d5:49:11:2f:18:
                    22:77:e3:3c:2e:df:12:38:34:03:07:1e:ea:88:0b:
                    d2:c2:d6:c0:5f:37:ff:76:b6:a3:ab:fb:70:9e:f4:
                    d3:7c:36:25:45:8a:6d:dc:3c:b0:62:33:e7:9b:ce:
                    21:c4:95:be:04:b7:a0:4e:72:bb:e9:60:d2:46:17:
                    7f:0d:38:9f:60:fa:c9:49:61:f4:da:4a:e7:03:6e:
                    be:73:34:d3:a4:a8:6b:d8:13:29:37:38:cb:6c:6d:
                    1f:a8:a2:91:ed:83:71:4f:c8:fb:1e:4c:3c:69:82:
                    db:85:99:a5:7c:7f:c9:f5:c5:c6:77:23:23:85:37:
                    ff:13:6b:34:13:da:84:3a:4f:dd:41:4e:3b:71:dd:
                    c2:cb:9b:98:b6:1f:b7:cf:26:ba:a8:bd:75:89:85:
                    0b:6d:ea:42:4c:9a:c9:4e:6c:2c:5f:90:66:4d:4e:
                    1e:86:93:d1:8b:ae:dd:c1:ae:62:e5:d9:e8:85:f5:
                    14:1d:7d:d4:a1:2e:0a:0c:a7:e7:98:7e:4e:57:c5:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:04:72:2C:DC:5F:7D:D6:95:C7:3F:CA:9B:EC:7B:CC:48:53:C1:44
            X509v3 Authority Key Identifier:
                keyid:72:71:BB:93:E1:72:48:85:5C:66:B3:1D:E2:11:CC:D6:5E:FF:1A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c76dfe6832d28ce49a16b84a719874f801ebe5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/acdf4ec2899ac36baffb311ec1ff163bb218439a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/4c76dfe6832d28ce49a16b84a719874f801ebe5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:34:02:dc:53:bc:f5:4e:6d:5e:17:ff:5c:5b:ef:b3:05:b2:
         93:8d:2c:25:86:5b:49:f5:4a:6f:73:6e:66:7c:f5:98:44:19:
         5e:5a:b7:21:e5:ae:1e:fa:3a:74:c8:bb:ba:15:01:2e:81:4e:
         50:d2:c8:6e:76:23:b5:e5:78:bd:7b:e8:09:9e:f0:05:cf:d4:
         28:e6:8b:a9:59:bb:42:14:1c:1f:97:b9:92:80:04:16:8d:8a:
         43:12:ad:6a:2b:df:4f:17:79:9c:c3:ca:07:d5:88:92:1e:61:
         c2:4c:26:3d:19:28:da:8e:c5:0c:d1:21:7c:59:dc:8a:cc:68:
         76:1a:1a:a5:58:8c:ff:d0:03:58:d1:64:2e:9b:e2:26:66:30:
         58:0d:e0:7a:6f:6f:cb:b5:ff:15:1b:8d:d5:8c:45:77:4b:02:
         ba:30:90:ca:78:82:9e:b0:af:49:47:be:5f:f1:5e:00:25:4c:
         ca:f1:20:20:d5:7a:5f:60:f7:56:02:7f:66:99:63:ab:31:aa:
         e7:4b:05:11:29:43:f4:e5:5b:ee:58:27:00:e2:9e:55:93:05:
         02:56:b9:28:b7:9c:d7:e5:5e:34:8a:ce:d2:b5:c7:ac:67:97:
         a9:bc:e7:60:85:95:af:97:f5:53:b9:8d:00:51:db:f6:6d:da:
         92:22:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org