Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/d9ee605f93ce7b2edec1b2e6cf849c3454470ee4.roa
File:                     d9ee605f93ce7b2edec1b2e6cf849c3454470ee4.roa (raw, json)
Hash identifier:          w/EawE6wZczP3U81XY5n1nHLgp6D9uF+kTE/W3ubJlE=
Subject key identifier:   D9:C3:AA:51:2A:81:A1:C9:C2:21:7F:99:FB:F8:DF:FE:20:A5:A9:52
Certificate issuer:       /CN=6ebb137312d0b9276fd1728c82220de693784901
Certificate serial:       037F6C
Authority key identifier: 53:F6:B8:88:55:DD:D9:E6:F2:92:E9:BB:B4:D6:FB:57:5D:5C:05:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ebb137312d0b9276fd1728c82220de693784901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/d9ee605f93ce7b2edec1b2e6cf849c3454470ee4.roa
Signing time:             Mon 04 Mar 2024 20:42:31 +0000
ROA not before:           Mon 04 Mar 2024 20:42:30 +0000
ROA not after:            Sun 04 Mar 2029 20:42:30 +0000
asID:                     28428
IP address blocks:        2806:325::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229228 (0x37f6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ebb137312d0b9276fd1728c82220de693784901
        Validity
            Not Before: Mar  4 20:42:30 2024 GMT
            Not After : Mar  4 20:42:30 2029 GMT
        Subject: CN=d9ee605f93ce7b2edec1b2e6cf849c3454470ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:a6:b5:28:43:3a:39:36:1c:f4:24:db:f1:
                    8b:75:33:da:05:05:1f:a8:ff:e8:26:9e:b8:bc:63:
                    36:52:0e:a0:20:dd:b2:7e:10:2a:83:3a:5e:1d:6a:
                    82:cd:22:f5:53:00:83:97:52:8f:4a:5d:c7:25:49:
                    69:02:5a:b9:16:7b:7f:8f:a5:53:a6:d1:80:de:05:
                    8f:cb:2d:41:47:02:12:6e:25:e7:00:bf:52:b9:0a:
                    6d:50:6c:8b:90:be:e0:93:5d:d0:bc:b1:33:cf:87:
                    36:f9:7c:4d:e5:9e:d9:59:1f:98:7f:12:e7:45:da:
                    14:e0:0d:d6:a9:96:84:d8:cc:4a:3b:34:5a:08:7c:
                    37:12:12:2b:58:fb:70:83:c6:2d:dd:37:aa:d5:f8:
                    08:3a:24:de:af:52:bf:e6:12:3e:83:3b:2e:75:0e:
                    71:70:bb:8b:80:d3:9b:c8:1c:d7:b1:83:e7:e7:d7:
                    31:ff:6d:28:51:b5:6e:bd:e4:e6:71:8d:c8:52:a4:
                    d9:71:e7:eb:f8:40:4a:db:49:91:50:d0:3f:81:45:
                    f4:8f:87:99:91:87:f6:4f:f0:cd:95:d6:d9:75:9c:
                    0d:22:49:a0:6d:44:ca:d2:66:31:19:89:0c:d0:10:
                    96:3c:87:04:6f:6f:ff:9e:e3:7e:f7:fe:a3:37:87:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C3:AA:51:2A:81:A1:C9:C2:21:7F:99:FB:F8:DF:FE:20:A5:A9:52
            X509v3 Authority Key Identifier:
                keyid:53:F6:B8:88:55:DD:D9:E6:F2:92:E9:BB:B4:D6:FB:57:5D:5C:05:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ebb137312d0b9276fd1728c82220de693784901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/d9ee605f93ce7b2edec1b2e6cf849c3454470ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/6ebb137312d0b9276fd1728c82220de693784901.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:325::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:8d:5a:b4:4e:5c:d0:08:0c:a2:a5:ed:a5:ca:d5:b7:e3:7a:
         f9:da:84:1b:17:b1:da:c2:82:9d:ae:85:3c:67:02:6b:47:9d:
         9e:e5:c8:6a:3e:3e:d9:3c:03:a0:5b:40:ed:1f:2c:03:b0:54:
         25:97:16:cf:ed:16:81:fe:3a:a2:57:98:9e:ef:96:a0:26:9e:
         db:39:fe:bb:3c:c0:1e:8d:5b:77:f6:05:fa:c1:28:a5:de:a4:
         85:43:c0:0d:f1:d3:2f:e7:48:1c:c1:b1:1a:62:66:c2:0b:53:
         eb:20:8d:9c:05:3d:cf:14:2d:49:dd:b8:1f:cb:18:b1:3e:c1:
         0d:08:71:17:6e:bb:47:71:6a:88:82:20:62:52:ba:3a:4a:fa:
         54:16:70:eb:a1:ad:e6:90:ca:58:38:bc:7f:1e:7f:cb:06:3a:
         c8:05:05:ab:12:b8:99:a5:85:d0:5b:60:6a:e9:55:9b:07:78:
         fc:fd:d3:22:ba:f7:9c:b0:89:a8:9d:19:0c:fe:1e:1f:41:d0:
         ef:68:48:d1:b6:ca:6e:36:97:68:dd:cf:33:30:0a:61:a6:86:
         c8:57:44:69:be:75:d1:18:7d:ca:ad:5a:ad:86:fb:6b:d3:d1:
         46:c9:bc:4d:db:0c:b9:74:37:ef:c9:fe:43:7a:9b:03:87:2e:
         36:3a:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org