Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/91dcdaa6d6e683c860f1078472c9bcf2b513341b.roa
File:                     91dcdaa6d6e683c860f1078472c9bcf2b513341b.roa (raw, json)
Hash identifier:          H4hy2jXgFS7lLHpnGgyAx8eQ9ORaaKBlXhixYiBt4XE=
Subject key identifier:   71:CB:FB:A6:31:76:BF:15:B3:23:D0:B2:E6:B2:39:C1:3F:88:A6:56
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       11317D
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/91dcdaa6d6e683c860f1078472c9bcf2b513341b.roa
Signing time:             Tue 09 May 2023 21:01:03 +0000
ROA not before:           Mon 08 May 2023 21:01:03 +0000
ROA not after:            Fri 09 May 2025 21:01:03 +0000
asID:                     271927
IP address blocks:        2803:ea10:b::/48 maxlen: 48
                          2803:ea10:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126781 (0x11317d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: May  8 21:01:03 2023 GMT
            Not After : May  9 21:01:03 2025 GMT
        Subject: CN=91dcdaa6d6e683c860f1078472c9bcf2b513341b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:76:66:cd:4c:fb:b7:9f:39:cd:ad:e6:6e:
                    11:b3:77:50:52:76:87:04:e7:53:2b:77:c3:57:e3:
                    e9:3a:5f:7a:53:95:76:bc:1c:5b:3f:fb:48:65:17:
                    6f:64:dd:a8:5e:20:cf:c0:45:a5:c5:b6:46:da:a7:
                    cb:26:7c:31:e4:82:1e:d9:8d:87:2e:88:fc:65:67:
                    c8:8f:84:55:fc:41:e2:23:81:8b:f2:e0:7b:de:b3:
                    fa:37:67:83:98:2a:64:8d:73:d1:c0:64:3e:7e:78:
                    c4:11:26:92:c2:71:d3:98:a5:21:b9:50:4a:3d:5e:
                    ac:23:fd:51:68:d9:e8:c6:f2:11:f9:b4:af:1d:6c:
                    60:01:84:ec:20:60:32:9a:57:f4:ae:15:6a:36:8c:
                    d9:9e:97:3b:87:3c:ca:dd:88:29:d0:52:6d:03:e7:
                    c8:1d:c3:84:b8:b8:a7:12:00:fc:17:3b:49:6d:ff:
                    17:0b:72:40:8e:42:10:e6:42:36:97:62:19:e7:3a:
                    d4:44:63:b2:bf:d3:62:27:c1:09:81:c0:e0:1e:2f:
                    b0:60:c2:c8:b2:58:ad:ec:3a:0c:be:9a:b4:d1:cb:
                    32:59:43:40:97:8b:de:21:30:ed:82:08:2f:d9:11:
                    b5:12:e1:92:b4:60:4c:c6:78:cd:5d:aa:e9:80:14:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CB:FB:A6:31:76:BF:15:B3:23:D0:B2:E6:B2:39:C1:3F:88:A6:56
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/91dcdaa6d6e683c860f1078472c9bcf2b513341b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:1::/48
                  2803:ea10:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:7e:0a:7a:7b:a8:77:bc:30:99:b0:f1:02:32:35:f3:d1:3a:
         6d:74:65:1e:35:4b:b8:9f:17:7d:92:b1:e1:c5:96:3a:9a:ff:
         e2:9b:dc:ca:c8:a8:ee:95:84:c0:52:60:5a:ee:2b:c4:72:10:
         3e:cd:1a:28:de:b8:c2:2a:64:b5:f8:17:13:ea:ab:e5:93:34:
         cf:b7:37:83:be:48:0a:ef:ab:08:86:6a:96:25:14:bd:ff:3c:
         7b:f5:11:03:8b:0d:c6:d1:c1:76:a4:1f:4c:89:98:e6:ad:17:
         f8:c2:3b:06:89:5e:17:72:56:ca:dc:8b:43:a9:36:54:00:d9:
         ec:0f:fe:c2:25:97:b7:ab:df:8e:03:94:da:42:49:ac:58:e6:
         18:3f:bd:37:1f:02:fa:4e:aa:87:cd:80:16:d3:8e:19:62:58:
         93:e4:54:7c:d5:9c:be:2f:d6:74:1c:7f:50:ac:b5:4e:1e:fa:
         58:c1:88:b2:58:b7:43:04:51:6d:b8:ac:5a:ec:a4:f4:53:59:
         d7:76:1b:ad:ff:ad:2b:5c:d3:ba:f3:c9:e9:99:2d:99:3a:3a:
         cb:92:53:f3:6b:b4:70:17:e2:69:41:ac:d8:9b:47:53:bc:3f:
         b3:3a:0b:82:b5:b1:dd:19:e7:5a:ae:4c:76:91:35:a6:4e:a7:
         67:e3:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org