Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/daff71a17a0519129d59a1e2e461f611f22f8a5c.roa
File:                     daff71a17a0519129d59a1e2e461f611f22f8a5c.roa (raw, json)
Hash identifier:          G3KIHdmxa+47pnSfPmSmnpCKX7RMY1pLk6/9Xo+wFw4=
Subject key identifier:   3C:C4:D1:FC:16:70:1B:57:B6:00:A8:3E:1D:A5:90:F4:7E:B8:5E:43
Certificate issuer:       /CN=c421a24623084ac56fd5acff08e76a5dd734e47f
Certificate serial:       02FD
Authority key identifier: 39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/daff71a17a0519129d59a1e2e461f611f22f8a5c.roa
Signing time:             Fri 04 Mar 2022 03:01:39 +0000
ROA not before:           Fri 04 Mar 2022 03:00:00 +0000
ROA not after:            Mon 04 Mar 2024 03:00:00 +0000
asID:                     272079
IP address blocks:        2801:1e:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c421a24623084ac56fd5acff08e76a5dd734e47f
        Validity
            Not Before: Mar  4 03:00:00 2022 GMT
            Not After : Mar  4 03:00:00 2024 GMT
        Subject: CN=daff71a17a0519129d59a1e2e461f611f22f8a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:a2:31:6c:5e:f3:d7:a4:31:32:b5:81:4f:
                    81:08:ff:28:f9:4d:a6:7f:b0:cf:29:b1:fc:95:f1:
                    04:43:27:e3:dd:f5:9b:59:d0:7e:8e:41:41:90:49:
                    18:2c:24:ce:31:20:cf:b3:af:f1:18:fb:7f:e1:6b:
                    df:33:f4:24:34:50:bf:ca:38:b7:83:5e:9a:63:8b:
                    7c:41:a1:cc:f6:4c:4f:cd:18:8b:e9:8c:95:a9:e8:
                    46:51:4b:d8:aa:af:79:eb:d8:4e:ed:2c:32:85:49:
                    75:21:80:e8:82:0c:72:81:8e:96:1e:ed:a5:4e:3a:
                    9c:6b:4c:45:8a:91:48:e2:13:11:aa:59:fa:ee:6b:
                    5b:83:33:54:12:8c:5c:4a:86:b9:fc:41:49:fd:6c:
                    1f:8e:49:2a:66:d5:04:6d:4e:46:66:fd:80:cd:09:
                    68:b7:93:ac:13:6f:2b:cc:52:eb:b4:99:88:d2:3e:
                    6e:3a:d9:52:ab:88:4d:6d:a9:09:a4:63:33:e1:eb:
                    3a:09:95:69:c3:c3:24:f9:66:b5:d2:8b:9a:19:cb:
                    80:8c:ef:eb:4b:9d:bb:cb:83:eb:9c:b1:04:4e:21:
                    d1:0f:80:97:10:f6:cf:5f:65:45:6f:e8:26:dc:39:
                    ee:a3:58:51:b8:55:02:a9:28:a4:aa:1c:c3:15:36:
                    4f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C4:D1:FC:16:70:1B:57:B6:00:A8:3E:1D:A5:90:F4:7E:B8:5E:43
            X509v3 Authority Key Identifier:
                keyid:39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/daff71a17a0519129d59a1e2e461f611f22f8a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:c9:73:4e:62:95:8b:38:c4:2e:f9:7a:64:76:75:38:4a:
         ce:8b:61:47:45:49:ec:55:f8:ec:f2:e1:a9:b1:fd:4c:8f:87:
         86:6f:43:81:63:76:89:98:e2:f8:6f:25:7e:07:63:76:21:68:
         75:f8:19:de:2a:e8:8e:63:2b:d0:d0:2e:81:47:37:e3:e7:30:
         2f:8d:d5:de:84:62:6a:77:d0:4a:91:5a:d4:8a:5e:c9:76:57:
         27:55:af:29:6f:89:4b:67:7f:9b:10:00:bf:0b:1a:91:8a:e1:
         0e:2c:13:69:8c:e1:69:06:24:e5:46:c8:8f:1c:51:39:5c:1f:
         29:d4:6b:01:13:06:50:5f:e6:5b:d6:e3:cc:8a:53:0e:55:2b:
         c2:7c:5d:2e:b7:0f:00:d7:58:37:5e:96:23:07:be:fc:8c:aa:
         14:b9:69:dd:ae:54:88:92:be:d0:8c:bf:98:9f:82:79:7b:e5:
         b7:80:b7:17:59:ad:b2:11:db:16:14:5c:fc:20:1c:a9:bb:52:
         b1:c7:5e:99:71:e3:a5:e3:2a:29:cc:cb:6a:71:72:3e:64:af:
         2b:97:3d:a6:a3:4f:dd:dc:5e:f2:c1:46:6b:d9:9e:97:56:f1:
         d0:db:37:0e:3a:7d:ae:3a:41:77:b4:5d:06:2b:3c:03:9b:e6:
         c5:fe:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org