Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/3687c4cbcdb2b81cba848c41800c2a591343dadb.roa
File:                     3687c4cbcdb2b81cba848c41800c2a591343dadb.roa (raw, json)
Hash identifier:          97kPm0i7cRef5T24GCP2Gnk80E/P+fQwBwFcRXDLxyw=
Subject key identifier:   9F:8A:2B:09:43:68:E6:9C:49:6A:60:8F:19:15:51:26:CF:01:68:0B
Certificate issuer:       /CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
Certificate serial:       0D8056
Authority key identifier: 8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/3687c4cbcdb2b81cba848c41800c2a591343dadb.roa
Signing time:             Wed 24 Mar 2021 14:38:24 +0000
ROA not before:           Wed 24 Mar 2021 14:38:23 +0000
ROA not after:            Tue 24 Mar 2026 14:38:23 +0000
asID:                     266734
IP address blocks:        2803:4320::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884822 (0xd8056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
        Validity
            Not Before: Mar 24 14:38:23 2021 GMT
            Not After : Mar 24 14:38:23 2026 GMT
        Subject: CN=3687c4cbcdb2b81cba848c41800c2a591343dadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:1c:a6:10:6a:5d:7b:7f:18:b2:53:a3:90:
                    fc:fe:dd:5a:f0:2e:cb:77:97:54:42:67:b3:25:62:
                    c0:ab:4b:76:fa:74:54:84:32:eb:93:9e:18:6a:33:
                    3a:64:41:91:3d:67:ee:f0:01:60:7c:c7:ed:cb:47:
                    e0:02:af:ba:95:26:51:2d:99:bb:ae:fa:3b:a8:2d:
                    1b:74:45:c4:51:a0:a6:08:e2:57:1c:c5:35:00:3d:
                    cd:98:7e:22:75:04:e8:9a:74:66:91:05:8f:8b:d4:
                    56:d1:ec:8e:c1:f1:bc:3d:e9:af:d7:e3:df:2d:d3:
                    d1:15:c5:c3:8d:a4:fc:84:7e:64:eb:e9:28:02:fb:
                    c5:da:96:66:0b:82:f3:c1:05:19:67:4b:86:9f:2c:
                    57:e0:a6:f9:e2:41:74:78:00:43:f3:70:0c:bc:33:
                    e1:02:74:d1:80:f0:3a:ae:03:4f:02:6a:8a:24:d7:
                    53:07:6d:37:2c:db:f6:f1:ce:cf:c1:a9:e5:37:d0:
                    89:51:9b:2e:47:ab:86:3d:92:14:27:91:da:fc:15:
                    23:aa:95:82:b2:cd:2f:36:e1:7f:d8:f1:ea:a5:f1:
                    ac:62:5c:41:82:3d:50:36:07:12:8b:f2:c8:7a:9e:
                    d3:8e:64:c6:f5:1f:c5:63:2d:9b:82:59:e8:19:cc:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8A:2B:09:43:68:E6:9C:49:6A:60:8F:19:15:51:26:CF:01:68:0B
            X509v3 Authority Key Identifier:
                keyid:8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/3687c4cbcdb2b81cba848c41800c2a591343dadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4320::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:db:b5:03:2e:b2:e7:a3:8d:be:95:00:18:de:d1:17:cb:e3:
         fc:4e:cf:02:bf:5f:6c:47:e0:64:5d:ef:46:f6:dd:64:46:53:
         41:9f:ee:36:59:f1:f6:bb:13:e1:fb:55:05:40:17:f9:62:d8:
         c3:e9:9e:68:ac:1b:4f:75:82:88:74:a9:df:e0:4c:9f:90:e4:
         f9:11:c4:2c:c0:29:32:2c:8b:5d:4f:42:c1:a0:0d:6d:6b:36:
         eb:be:b5:55:3c:24:c8:1d:bd:6a:37:8f:5f:84:71:16:86:cd:
         6a:73:1f:86:a7:32:3a:ec:f5:d8:ee:18:92:32:ca:cf:34:f6:
         89:e9:c4:39:af:46:83:a8:13:14:e4:53:80:08:01:80:8b:d9:
         eb:a8:08:11:43:45:fc:48:fa:83:a3:09:89:c5:64:5a:e3:b5:
         36:bd:d9:fc:71:cf:e9:e7:e8:17:e8:9d:7b:f9:48:5b:0a:04:
         8c:b6:a0:13:0b:fd:b0:23:48:9e:dd:4f:c4:1f:11:73:1a:60:
         44:48:94:eb:35:1b:c2:e1:9f:6f:25:f2:08:bc:44:75:af:2f:
         34:58:28:68:81:80:c8:ca:29:cf:0d:fd:60:38:a4:5b:f7:06:
         50:e0:29:53:c3:56:ad:0c:70:c8:19:db:f2:74:a0:3e:6c:83:
         31:fb:93:2d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDYBWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
NzI0MDUxNGE5ZjRiMmM5MDg2YjVlNjVlMGFjNDNhOTM5NGI5NmUwHhcNMjEwMzI0
MTQzODIzWhcNMjYwMzI0MTQzODIzWjAzMTEwLwYDVQQDEygzNjg3YzRjYmNkYjJi
ODFjYmE4NDhjNDE4MDBjMmE1OTEzNDNkYWRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnwMcphBqXXt/GLJTo5D8/t1a8C7Ld5dUQmezJWLAq0t2+nRU
hDLrk54YajM6ZEGRPWfu8AFgfMfty0fgAq+6lSZRLZm7rvo7qC0bdEXEUaCmCOJX
HMU1AD3NmH4idQTomnRmkQWPi9RW0eyOwfG8Pemv1+PfLdPRFcXDjaT8hH5k6+ko
AvvF2pZmC4LzwQUZZ0uGnyxX4Kb54kF0eABD83AMvDPhAnTRgPA6rgNPAmqKJNdT
B203LNv28c7PwanlN9CJUZsuR6uGPZIUJ5Ha/BUjqpWCss0vNuF/2PHqpfGsYlxB
gj1QNgcSi/LIep7TjmTG9R/FYy2bglnoGczWYwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJ+KKwlDaOacSWpgjxkVUSbPAWgLMB8GA1UdIwQYMBaAFIq8uBDKpMwyaIK9
eUhsTOfNLCm5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGQ3MjQw
NTE0YTlmNGIyYzkwODZiNWU2NWUwYWM0M2E5Mzk0Yjk2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzk5NGRmODUtZjA3YS00NDM4LTkyYTktMzNlNGI3
ZTY4OWQ3LzM2ODdjNGNiY2RiMmI4MWNiYTg0OGM0MTgwMGMyYTU5MTM0M2RhZGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zOTk0ZGY4NS1mMDdhLTQ0MzgtOTJhOS0zM2U0
YjdlNjg5ZDcvNGQ3MjQwNTE0YTlmNGIyYzkwODZiNWU2NWUwYWM0M2E5Mzk0Yjk2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDQyAwDQYJKoZIhvcNAQELBQADggEBACrbtQMusuejjb6V
ABje0RfL4/xOzwK/X2xH4GRd70b23WRGU0Gf7jZZ8fa7E+H7VQVAF/li2MPpnmis
G091goh0qd/gTJ+Q5PkRxCzAKTIsi11PQsGgDW1rNuu+tVU8JMgdvWo3j1+EcRaG
zWpzH4anMjrs9djuGJIyys809onpxDmvRoOoExTkU4AIAYCL2euoCBFDRfxI+oOj
CYnFZFrjtTa92fxxz+nn6BfonXv5SFsKBIy2oBML/bAjSJ7dT8QfEXMaYERIlOs1
G8Lhn28l8gi8RHWvLzRYKGiBgMjKKc8N/WA4pFv3BlDgKVPDVq0McMgZ2/J0oD5s
gzH7ky0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org