Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/d29f4bb9fdfc60b2a0128b94fea5f83caee55e9b.roa
File:                     d29f4bb9fdfc60b2a0128b94fea5f83caee55e9b.roa (raw, json)
Hash identifier:          S8JieqBoN+VHpTrRRgyCPvGwCeNQlf00ZBg1LawJLBg=
Subject key identifier:   DF:CE:F0:ED:B9:16:E8:BB:5D:E4:86:A8:0D:06:6D:8C:F0:78:80:34
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       067897
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/d29f4bb9fdfc60b2a0128b94fea5f83caee55e9b.roa
Signing time:             Wed 20 Jul 2022 21:07:57 +0000
ROA not before:           Wed 20 Jul 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     271891
IP address blocks:        2801:151:11::/48 maxlen: 48
                          2801:151:57::/48 maxlen: 48
                          2801:151:58::/48 maxlen: 48
                          2801:151:59::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424087 (0x67897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jul 20 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=d29f4bb9fdfc60b2a0128b94fea5f83caee55e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:7f:d6:f8:80:f4:f9:98:c3:96:a8:6f:df:
                    da:92:78:90:19:bd:8b:83:50:6a:a1:78:80:f7:35:
                    78:f3:f8:98:2a:94:0a:40:9b:70:2b:ee:1d:63:bb:
                    42:ce:f5:e9:2c:b1:1b:c1:64:29:ca:c2:7f:61:be:
                    cb:eb:9e:71:bf:18:b5:74:0e:f8:6f:04:61:83:ec:
                    4d:d7:4b:1d:9e:6c:81:8a:50:3e:35:44:47:a1:6a:
                    a3:9d:aa:32:d2:ab:10:ee:d4:ba:22:ab:4a:e5:21:
                    59:f2:19:a4:f5:e0:76:eb:1a:e5:d2:16:49:39:2b:
                    ef:57:9e:16:5c:5c:9b:3c:13:54:7a:b4:87:77:fc:
                    d6:cd:e0:74:13:e6:0f:c6:86:9c:3c:5c:8a:bb:7b:
                    40:67:25:80:70:a2:a1:0f:1c:33:49:c4:e7:ee:fd:
                    ef:b8:5e:97:e5:10:b5:98:ff:b4:d2:9b:9a:dc:7d:
                    a6:2c:f7:29:1a:ed:a5:ef:13:63:27:2f:46:65:4f:
                    91:4f:69:90:bf:62:d7:5c:da:2e:30:93:b9:65:33:
                    81:0d:3d:13:fb:41:c1:cf:47:03:e4:4d:3e:c6:e5:
                    fe:91:c0:f9:67:78:6b:07:a1:f0:0f:35:8a:cf:bf:
                    16:d0:5b:75:13:3e:af:6c:f4:96:44:7b:20:b5:a2:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CE:F0:ED:B9:16:E8:BB:5D:E4:86:A8:0D:06:6D:8C:F0:78:80:34
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/d29f4bb9fdfc60b2a0128b94fea5f83caee55e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:11::/48
                  2801:151:57::-2801:151:59:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         84:c4:36:3e:1d:a7:6c:e8:06:53:ec:aa:46:c2:4c:3a:58:fc:
         5d:3c:f5:21:b1:69:ac:2a:46:44:f4:5e:26:dd:5a:eb:94:77:
         04:d2:5c:a0:c6:7e:c4:0b:33:d5:cc:8b:44:60:b4:ec:48:50:
         c3:3b:42:3b:ce:a5:69:5d:74:85:23:c0:64:d0:b5:87:1e:5d:
         18:b1:80:f7:94:9e:22:25:39:20:fd:d8:d1:c8:d8:2b:2a:2d:
         84:ac:8f:f0:c2:1d:7e:f2:5e:33:c4:58:64:0e:7c:0f:13:a0:
         52:9b:da:5f:19:1e:23:11:8d:06:aa:85:8b:f8:20:e9:e1:93:
         71:e2:df:f8:bc:c1:6a:14:4a:e6:55:37:da:79:48:80:74:e0:
         0e:9c:d0:28:11:05:a7:5d:3e:8d:a6:fd:f5:88:f5:d0:7e:89:
         b5:44:62:6b:9c:16:08:3e:05:b2:a0:6c:a9:cf:c7:37:81:32:
         58:d3:55:f7:83:c8:f4:50:0e:66:5e:ec:d3:23:57:12:99:79:
         3a:24:93:4f:72:ed:e8:30:84:30:7d:37:1b:7f:36:e3:30:d6:
         05:0c:fe:35:2d:7d:ef:66:d0:48:19:9c:cf:fc:23:c2:89:3b:
         c1:39:57:35:34:ec:fe:30:13:02:be:41:46:ba:16:24:0d:fc:
         79:6d:94:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org