Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3bec791c-5c8b-4f5b-b041-01d1a06d3c2c/792f94db9725f83b9316690734a1f21711a90b55.roa
File:                     792f94db9725f83b9316690734a1f21711a90b55.roa (raw, json)
Hash identifier:          OhkKIQdlgPZJ1ZSRFh2kPbIJRtAzGdCo7WEv2C8FMPA=
Subject key identifier:   89:CB:52:FC:27:45:05:1E:28:4E:12:F8:53:83:03:7D:5C:14:6F:BC
Certificate issuer:       /CN=4528cf46ea3aa4905fce636a3e0831d175aeb8bb
Certificate serial:       0780
Authority key identifier: 58:62:77:39:AB:9E:C3:24:27:67:7B:72:97:5F:2D:03:17:5E:DC:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4528cf46ea3aa4905fce636a3e0831d175aeb8bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3bec791c-5c8b-4f5b-b041-01d1a06d3c2c/792f94db9725f83b9316690734a1f21711a90b55.roa
Signing time:             Fri 25 Feb 2022 18:24:25 +0000
ROA not before:           Fri 25 Feb 2022 03:00:00 +0000
ROA not after:            Wed 25 Feb 2054 03:00:00 +0000
asID:                     272078
IP address blocks:        2803:eb10::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4528cf46ea3aa4905fce636a3e0831d175aeb8bb
        Validity
            Not Before: Feb 25 03:00:00 2022 GMT
            Not After : Feb 25 03:00:00 2054 GMT
        Subject: CN=792f94db9725f83b9316690734a1f21711a90b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b6:15:48:a5:5d:3b:e7:7a:c6:48:93:95:15:
                    46:f3:58:89:88:b9:98:e4:df:12:01:e6:3d:c0:a5:
                    5c:70:4f:d7:77:6f:22:86:d0:bf:19:a8:5c:c6:3d:
                    4b:14:4f:96:27:d8:8d:5d:19:20:4a:05:1c:83:c6:
                    40:f3:93:2b:46:79:5d:fe:35:d2:0f:07:2e:03:b2:
                    71:40:70:75:43:a7:55:09:3d:e2:41:14:92:98:32:
                    d1:58:3e:ed:e1:a8:c6:f5:21:36:f3:97:e7:9d:51:
                    99:e3:22:c9:39:13:68:c0:ac:92:53:5e:3f:16:0b:
                    e9:d7:46:21:83:60:6d:7e:9b:0b:a2:a4:4d:9d:cb:
                    75:fc:b8:54:21:d5:c2:38:1f:f5:cd:4b:5a:d2:42:
                    70:95:5e:74:b2:07:46:dd:9e:af:6f:be:1c:53:87:
                    87:a2:bc:36:d1:55:af:50:17:d6:b3:d9:aa:36:3d:
                    75:b6:cf:4b:67:76:fb:4b:33:85:b4:9a:a7:01:05:
                    43:5f:c8:16:a3:8e:cb:bc:c6:94:98:ee:5f:a9:dc:
                    75:ca:5a:96:bb:3f:ef:30:ab:8d:e3:90:1d:d1:ac:
                    95:37:81:24:42:71:da:8d:18:55:76:8e:6c:bc:d2:
                    a4:99:aa:da:ae:f1:1b:a5:81:9a:25:25:35:7f:ab:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CB:52:FC:27:45:05:1E:28:4E:12:F8:53:83:03:7D:5C:14:6F:BC
            X509v3 Authority Key Identifier:
                keyid:58:62:77:39:AB:9E:C3:24:27:67:7B:72:97:5F:2D:03:17:5E:DC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4528cf46ea3aa4905fce636a3e0831d175aeb8bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3bec791c-5c8b-4f5b-b041-01d1a06d3c2c/792f94db9725f83b9316690734a1f21711a90b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3bec791c-5c8b-4f5b-b041-01d1a06d3c2c/4528cf46ea3aa4905fce636a3e0831d175aeb8bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb10::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:18:dd:f4:48:81:1c:3e:db:db:5a:86:92:15:de:25:c4:00:
         5f:8a:2c:a1:08:c0:ed:75:9c:70:09:8b:0c:d1:96:e8:dc:89:
         18:08:15:86:30:59:19:bc:36:69:13:dc:4a:93:9a:08:64:71:
         f0:6a:b5:ea:7c:de:9a:a4:82:40:4d:35:28:d8:66:ee:36:b7:
         04:46:3c:70:e7:49:4a:e8:f2:6e:44:2c:00:59:1f:ec:32:73:
         52:a4:52:f3:0a:66:8f:b0:66:d9:67:d7:c1:96:93:f7:44:59:
         3d:67:ec:e1:c6:10:2e:a9:a6:e5:2e:a4:9f:3a:cc:ce:d7:5a:
         17:71:da:a5:4e:f7:0a:9e:cb:e7:45:14:04:30:91:cc:68:d4:
         71:95:2f:47:09:77:0e:23:bc:fc:1e:be:05:73:1f:1e:f3:45:
         ce:a3:54:13:91:0a:0b:20:7b:2e:dc:f0:3c:2b:96:71:c9:5d:
         41:6c:7c:d8:0e:1e:fc:68:a0:82:33:3d:fa:a2:09:9f:d5:05:
         7d:59:61:80:19:ca:55:b6:80:19:08:8b:28:97:42:65:94:97:
         bc:cb:34:25:96:ba:e4:e1:71:c1:81:0d:b0:36:69:f9:51:33:
         65:73:7a:d5:9a:17:b9:47:9e:a7:fd:90:5c:2a:f4:96:ce:34:
         89:f3:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org