Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/f44fe192eb4c44ec70a39d9c29fec332491cf0b6.roa
File:                     f44fe192eb4c44ec70a39d9c29fec332491cf0b6.roa (raw, json)
Hash identifier:          jGK22h88B4JaT5slE5dBzK3kpTwwk4+yc4qifBnvbK0=
Subject key identifier:   F9:A3:BE:27:53:13:FA:70:4E:36:7A:CC:CB:9B:CD:F9:DB:EA:E9:90
Certificate issuer:       /CN=455a0128ffd8e326e1f151fa1ad8365768d0e332
Certificate serial:       781B
Authority key identifier: B1:D1:95:2A:9B:2E:3A:06:3F:48:2F:2B:5A:36:1D:EA:EE:D9:C9:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/455a0128ffd8e326e1f151fa1ad8365768d0e332.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/f44fe192eb4c44ec70a39d9c29fec332491cf0b6.roa
Signing time:             Tue 05 Apr 2022 20:07:57 +0000
ROA not before:           Wed 16 Mar 2022 03:00:00 +0000
ROA not after:            Sat 16 Mar 2024 03:00:00 +0000
asID:                     272021
IP address blocks:        2801:1a1::/44 maxlen: 48
                          2801:1a1::/48 maxlen: 48
                          2801:1a1:1::/48 maxlen: 48
                          2801:1a1:2::/48 maxlen: 48
                          2801:1a1:3::/48 maxlen: 48
                          2801:1a1:4::/48 maxlen: 48
                          2801:1a1:5::/48 maxlen: 48
                          2801:1a1:6::/48 maxlen: 48
                          2801:1a1:7::/48 maxlen: 48
                          2801:1a1:8::/48 maxlen: 48
                          2801:1a1:9::/48 maxlen: 48
                          2801:1a1:a::/48 maxlen: 48
                          2801:1a1:b::/48 maxlen: 48
                          2801:1a1:c::/48 maxlen: 48
                          2801:1a1:d::/48 maxlen: 48
                          2801:1a1:e::/48 maxlen: 48
                          2801:1a1:f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30747 (0x781b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a0128ffd8e326e1f151fa1ad8365768d0e332
        Validity
            Not Before: Mar 16 03:00:00 2022 GMT
            Not After : Mar 16 03:00:00 2024 GMT
        Subject: CN=f44fe192eb4c44ec70a39d9c29fec332491cf0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c9:10:7a:81:71:fe:f3:3a:7c:f9:5c:84:18:
                    07:8e:71:78:08:dc:85:7e:20:07:1b:d8:f4:12:c6:
                    38:77:18:52:53:d1:fd:fa:e1:76:00:fc:9e:69:a2:
                    3f:2e:f9:9f:e8:e7:2e:23:a4:d9:15:4f:ff:64:93:
                    fe:18:fe:77:80:f7:8c:b1:8c:71:ef:95:a6:b4:a8:
                    e1:19:43:c7:80:62:02:82:d9:3d:9a:10:a4:db:bf:
                    84:a9:45:94:00:d4:11:f0:63:0c:fe:ef:aa:46:c6:
                    de:c7:a6:5c:83:14:5a:3c:30:c2:aa:e7:53:39:ff:
                    1a:9d:98:c2:ad:6c:dc:cc:8f:87:e0:5f:2b:ab:6a:
                    2b:b8:e0:84:e3:1c:95:ef:88:d7:69:44:55:43:4b:
                    dc:ac:aa:92:a5:60:95:61:fe:65:70:b5:82:3c:a1:
                    aa:42:37:13:33:65:98:6f:2b:7c:ef:81:7a:10:dd:
                    22:e2:d7:1b:dc:03:21:b8:b5:67:f6:94:b7:c6:67:
                    d5:fa:ec:ac:6a:99:88:92:eb:20:c6:40:e9:f6:c6:
                    84:fc:9c:14:fd:6d:4f:62:79:6e:17:25:bd:a9:3d:
                    c3:c2:3b:32:3e:dd:31:43:7a:5a:12:f7:1a:e0:3c:
                    79:71:06:34:c3:8f:38:49:c6:c0:92:ff:34:4d:69:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A3:BE:27:53:13:FA:70:4E:36:7A:CC:CB:9B:CD:F9:DB:EA:E9:90
            X509v3 Authority Key Identifier:
                keyid:B1:D1:95:2A:9B:2E:3A:06:3F:48:2F:2B:5A:36:1D:EA:EE:D9:C9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/455a0128ffd8e326e1f151fa1ad8365768d0e332.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/f44fe192eb4c44ec70a39d9c29fec332491cf0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/455a0128ffd8e326e1f151fa1ad8365768d0e332.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a1::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:37:40:93:d0:0b:af:15:20:c1:02:26:70:5d:e9:ee:3b:1c:
         4f:f7:02:f8:7d:4d:92:a1:37:25:42:8e:6d:c5:5c:67:3d:e6:
         73:44:2e:75:67:aa:b1:18:0d:8b:cd:01:ac:45:bb:76:d3:1a:
         68:f1:b8:20:42:78:87:a2:0d:a3:86:57:4a:4f:6f:7e:a0:25:
         8b:a5:1b:18:f8:de:f1:26:5a:b1:d9:25:92:f5:2d:bf:a0:a1:
         79:43:4e:d3:8e:ca:a0:60:80:5a:db:2c:72:53:96:8e:f4:3b:
         ea:62:b9:a5:44:89:6d:c0:a3:5f:5c:a6:b4:db:b0:c2:17:f1:
         09:89:16:99:8d:00:43:c3:06:31:df:6a:f2:e2:5a:ae:f0:5c:
         d6:26:86:f9:f8:0d:33:0c:60:32:f6:a0:69:e9:61:0f:4e:55:
         a8:6b:b2:5d:ab:d2:79:ca:4b:1a:87:39:38:ab:47:ff:b6:ab:
         0b:8f:39:4f:1f:3c:5a:95:5d:58:b0:23:6c:7f:05:3b:ce:cc:
         eb:7c:0a:95:b0:67:42:83:69:da:75:b4:02:28:28:d8:1a:d9:
         b6:cc:ea:ce:6d:29:3b:cc:3a:f5:ad:79:e4:af:25:74:55:87:
         9d:c4:37:1e:40:0d:d2:fd:06:43:73:48:f1:71:95:34:d5:41:
         e9:0f:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org