Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/1a94c43838d789e49853e978d6890e7f6602d2f4.roa
File:                     1a94c43838d789e49853e978d6890e7f6602d2f4.roa (raw, json)
Hash identifier:          sBcXj9/0K9pvw6vMvE+qv9WtndBlNwVxKp1cdLh8DjM=
Subject key identifier:   94:F6:E8:F2:28:A0:1E:29:82:5E:75:12:5E:14:64:F6:0B:8F:4A:15
Certificate issuer:       /CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Certificate serial:       03ECB0
Authority key identifier: CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/1a94c43838d789e49853e978d6890e7f6602d2f4.roa
Signing time:             Sat 11 Mar 2023 20:45:18 +0000
ROA not before:           Fri 10 Mar 2023 20:44:43 +0000
ROA not after:            Tue 11 Mar 2025 21:44:43 +0000
asID:                     272875
IP address blocks:        2803:4a90:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257200 (0x3ecb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
        Validity
            Not Before: Mar 10 20:44:43 2023 GMT
            Not After : Mar 11 21:44:43 2025 GMT
        Subject: CN=1a94c43838d789e49853e978d6890e7f6602d2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:64:b8:e9:87:cd:c8:d2:ab:f2:9a:02:c2:aa:
                    80:43:cd:35:28:35:12:63:9d:5e:9f:15:74:38:b1:
                    41:8a:5e:77:90:b0:f7:3a:b9:7a:36:89:c7:03:9c:
                    b5:ac:be:52:72:cf:07:42:6f:13:06:c6:6a:7f:0d:
                    4d:ae:1d:0a:17:02:27:72:ce:51:27:d6:13:ad:04:
                    fd:65:da:2f:86:59:9f:33:69:95:4f:82:0c:73:52:
                    b1:db:4b:10:9e:d1:55:9a:12:a0:ab:48:c5:5d:66:
                    89:77:10:9e:80:6d:c2:e4:0e:5b:02:50:3b:7b:45:
                    d5:98:3b:fc:0c:fe:6d:93:b0:76:00:91:be:d2:20:
                    03:87:ad:00:6e:50:95:3b:c1:b1:b6:82:58:63:92:
                    c8:d4:bb:6d:52:9e:8f:62:83:3f:3d:25:65:ac:40:
                    96:88:62:65:4b:b9:f4:1a:6d:21:dd:e7:b2:86:95:
                    a5:dd:29:8f:55:05:8d:69:63:c3:3e:66:a2:b5:5d:
                    ff:71:65:44:33:fa:57:bc:9a:d6:6a:88:7b:ec:3b:
                    6d:20:d1:c2:5c:cf:99:56:4a:af:c6:8c:88:45:b6:
                    d1:e8:33:52:9e:99:8b:79:7c:37:d0:58:7c:9d:27:
                    f8:3d:d2:6b:b2:3c:63:eb:8a:8f:cc:25:e0:c5:d4:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F6:E8:F2:28:A0:1E:29:82:5E:75:12:5E:14:64:F6:0B:8F:4A:15
            X509v3 Authority Key Identifier:
                keyid:CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/1a94c43838d789e49853e978d6890e7f6602d2f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:75:fc:ec:9d:49:94:23:a2:d1:63:11:cb:66:53:1a:fa:
         b9:f6:dc:39:4d:db:a2:0e:77:7b:a0:71:7b:98:ce:20:da:f3:
         e9:8c:2c:88:28:ff:7c:e7:01:f3:91:f3:f2:3e:b7:19:91:ab:
         20:29:e8:c5:ee:ce:c8:ee:39:6b:36:f0:8b:a8:5e:75:8d:3d:
         53:8d:70:78:fc:80:94:7a:75:2b:06:0f:64:bd:a4:4d:0c:d0:
         e2:d6:71:48:ea:f4:e7:eb:65:36:5a:5f:9f:39:1b:a0:2c:98:
         d3:db:1b:5a:be:ba:84:8a:90:0f:94:50:e4:d4:f9:d6:d9:ae:
         04:3e:36:4e:84:23:f8:d9:4d:b4:5c:88:4c:70:f6:cb:37:db:
         3b:df:b5:45:98:e7:9d:14:d1:d0:70:b8:8d:12:99:c6:cc:2e:
         97:d5:f1:7c:cd:6c:61:5b:67:54:5b:cc:c4:fb:4c:ed:ce:f2:
         34:46:19:cc:f5:e8:70:40:cd:64:c8:42:1b:24:52:3e:2c:6b:
         7c:c4:9f:80:00:21:76:71:a7:95:69:65:89:dd:b4:31:27:90:
         0c:02:55:e7:04:a0:c3:34:23:bd:ec:cd:cb:68:ed:fc:d1:07:
         5c:2e:97:94:27:c2:8a:62:87:23:03:40:52:c9:f4:46:de:b3:
         f3:d0:41:24
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDA+ywMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
ZDEzNTE2MTRlNjkzNzg4MjExZDRiN2FhYWY3ZjhmNWQ5MTlkM2QwHhcNMjMwMzEw
MjA0NDQzWhcNMjUwMzExMjE0NDQzWjAzMTEwLwYDVQQDEygxYTk0YzQzODM4ZDc4
OWU0OTg1M2U5NzhkNjg5MGU3ZjY2MDJkMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgGS46YfNyNKr8poCwqqAQ801KDUSY51enxV0OLFBil53kLD3
Orl6NonHA5y1rL5Scs8HQm8TBsZqfw1Nrh0KFwIncs5RJ9YTrQT9ZdovhlmfM2mV
T4IMc1Kx20sQntFVmhKgq0jFXWaJdxCegG3C5A5bAlA7e0XVmDv8DP5tk7B2AJG+
0iADh60AblCVO8GxtoJYY5LI1LttUp6PYoM/PSVlrECWiGJlS7n0Gm0h3eeyhpWl
3SmPVQWNaWPDPmaitV3/cWVEM/pXvJrWaoh77DttINHCXM+ZVkqvxoyIRbbR6DNS
npmLeXw30Fh8nSf4PdJrsjxj64qPzCXgxdTn0QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJT26PIooB4pgl51El4UZPYLj0oVMB8GA1UdIwQYMBaAFMtoXPeF8BIhN71/
v67T7/dcPScAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNkMTM1
MTYxNGU2OTM3ODgyMTFkNGI3YWFhZjdmOGY1ZDkxOWQzZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDNkOWNhMzUtN2ZjMS00Yzc5LTlhZWEtZTk2Yjc0
NjlkMzZiLzFhOTRjNDM4MzhkNzg5ZTQ5ODUzZTk3OGQ2ODkwZTdmNjYwMmQyZjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80M2Q5Y2EzNS03ZmMxLTRjNzktOWFlYS1lOTZi
NzQ2OWQzNmIvNDNkMTM1MTYxNGU2OTM3ODgyMTFkNGI3YWFhZjdmOGY1ZDkxOWQz
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDSpAABDANBgkqhkiG9w0BAQsFAAOCAQEAWlx1/OydSZQj
otFjEctmUxr6ufbcOU3bog53e6Bxe5jOINrz6YwsiCj/fOcB85Hz8j63GZGrICno
xe7OyO45azbwi6hedY09U41wePyAlHp1KwYPZL2kTQzQ4tZxSOr05+tlNlpfnzkb
oCyY09sbWr66hIqQD5RQ5NT51tmuBD42ToQj+NlNtFyITHD2yzfbO9+1RZjnnRTR
0HC4jRKZxswul9XxfM1sYVtnVFvMxPtM7c7yNEYZzPXocEDNZMhCGyRSPixrfMSf
gAAhdnGnlWllid20MSeQDAJV5wSgwzQjvezNy2jt/NEHXC6XlCfCimKHIwNAUsn0
Rt6z89BBJA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org