Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/31904275f1752a5fa300519925b06a460f8f5462.roa
File:                     31904275f1752a5fa300519925b06a460f8f5462.roa (raw, json)
Hash identifier:          35gIXKnhDqheQGe15xKrrBuuNt6a375HjUHZqEXTqxE=
Subject key identifier:   2B:F3:1C:F3:A1:30:AF:28:97:50:14:9E:93:5E:70:55:29:36:27:30
Certificate issuer:       /CN=451e0833b865e00364f8158e841786790d21e50c
Certificate serial:       0B22F2
Authority key identifier: 50:B3:30:20:99:86:0E:13:7C:03:05:75:E9:89:7D:C3:C2:BB:83:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/451e0833b865e00364f8158e841786790d21e50c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/31904275f1752a5fa300519925b06a460f8f5462.roa
Signing time:             Wed 24 Mar 2021 14:41:19 +0000
ROA not before:           Wed 24 Mar 2021 14:41:19 +0000
ROA not after:            Tue 24 Mar 2026 14:41:19 +0000
asID:                     269844
IP address blocks:        2801:1b:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729842 (0xb22f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e0833b865e00364f8158e841786790d21e50c
        Validity
            Not Before: Mar 24 14:41:19 2021 GMT
            Not After : Mar 24 14:41:19 2026 GMT
        Subject: CN=31904275f1752a5fa300519925b06a460f8f5462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:84:bc:db:17:1e:8e:26:41:0b:49:0a:19:
                    59:27:19:68:ae:c7:63:0e:9c:96:dd:f8:99:c3:69:
                    8b:48:7b:92:f8:2e:fa:66:e0:41:6b:2c:a7:d1:bc:
                    d2:ec:68:fd:12:8c:4c:23:ee:8e:5a:05:1b:b4:ce:
                    f7:08:6f:7f:c8:89:a1:47:24:a5:3a:4a:9b:7f:2e:
                    08:a3:7b:a5:8b:f3:c5:82:e1:5b:25:5d:a5:58:17:
                    8b:ee:89:2d:67:8f:cc:6b:fc:8b:28:6e:b9:ff:bc:
                    ac:cb:fa:4f:16:7c:27:34:50:e6:3e:ef:2e:01:1d:
                    40:8d:da:95:ab:36:c2:2c:8e:52:e2:d0:87:5b:d6:
                    2a:ba:6d:ba:c9:fc:fe:d1:d2:41:63:26:c3:d9:9e:
                    8f:6a:b4:6c:d3:3f:8d:d6:f0:83:6c:f9:ff:93:aa:
                    88:30:36:48:18:ef:08:d9:3c:d6:ab:a0:ff:b0:2b:
                    9d:e8:05:39:10:85:32:e7:c6:15:01:2e:9a:4a:78:
                    a5:5f:c6:c3:54:44:7b:e5:b6:b8:5f:7b:c5:30:14:
                    c7:d8:98:1c:29:7f:d8:43:2c:1f:f5:8b:12:78:20:
                    c3:31:c6:dc:85:4b:c3:95:57:8e:bc:91:07:50:34:
                    a4:0d:e7:a2:4a:28:bd:0e:20:16:a4:b1:0b:af:4d:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:1C:F3:A1:30:AF:28:97:50:14:9E:93:5E:70:55:29:36:27:30
            X509v3 Authority Key Identifier:
                keyid:50:B3:30:20:99:86:0E:13:7C:03:05:75:E9:89:7D:C3:C2:BB:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/451e0833b865e00364f8158e841786790d21e50c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/31904275f1752a5fa300519925b06a460f8f5462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/451e0833b865e00364f8158e841786790d21e50c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:a3:30:99:d9:d1:ae:62:2b:07:5b:25:c2:e2:ff:2d:63:
         24:2c:74:c6:da:bb:94:89:5e:80:8f:51:53:7c:bf:2e:34:96:
         18:a5:c4:f2:e2:95:da:20:30:1a:6e:24:dc:95:f6:13:20:c1:
         64:40:2f:95:0c:2f:64:b4:fa:de:17:02:1f:a9:f4:cb:ff:7d:
         7a:3d:0d:0a:70:9f:99:e7:48:c9:66:e6:14:bb:31:16:b8:02:
         62:3a:09:8f:f0:a6:fa:cb:da:4a:5a:46:93:6a:18:0f:db:05:
         dc:bf:a4:cc:1b:92:e3:f4:04:a2:4e:62:c0:08:14:8a:5d:05:
         10:99:ed:d3:f7:bb:ff:d1:65:06:9b:40:ba:b8:34:44:1e:74:
         7b:f7:33:35:ce:01:10:97:5c:3d:8d:62:61:80:be:33:57:13:
         1a:bd:87:b7:37:4f:b6:43:9b:2b:a6:09:f7:d1:ac:6c:ce:9c:
         50:f0:ce:79:32:2b:e8:a5:fd:89:b0:4b:b2:35:b1:98:23:57:
         aa:32:3f:55:89:74:52:00:50:cf:59:40:e1:50:b4:6f:c4:e5:
         35:3e:d5:a4:e2:71:15:24:0b:fb:d1:d5:13:94:37:c6:31:4e:
         46:c8:b6:41:46:d2:73:c5:77:ea:03:e8:13:95:e1:4e:cf:dd:
         0d:a4:19:64
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCyLyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ1
MWUwODMzYjg2NWUwMDM2NGY4MTU4ZTg0MTc4Njc5MGQyMWU1MGMwHhcNMjEwMzI0
MTQ0MTE5WhcNMjYwMzI0MTQ0MTE5WjAzMTEwLwYDVQQDEygzMTkwNDI3NWYxNzUy
YTVmYTMwMDUxOTkyNWIwNmE0NjBmOGY1NDYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiEqEvNsXHo4mQQtJChlZJxlorsdjDpyW3fiZw2mLSHuS+C76
ZuBBayyn0bzS7Gj9EoxMI+6OWgUbtM73CG9/yImhRySlOkqbfy4Io3uli/PFguFb
JV2lWBeL7oktZ4/Ma/yLKG65/7ysy/pPFnwnNFDmPu8uAR1AjdqVqzbCLI5S4tCH
W9Yqum26yfz+0dJBYybD2Z6ParRs0z+N1vCDbPn/k6qIMDZIGO8I2TzWq6D/sCud
6AU5EIUy58YVAS6aSnilX8bDVER75ba4X3vFMBTH2JgcKX/YQywf9YsSeCDDMcbc
hUvDlVeOvJEHUDSkDeeiSii9DiAWpLELr02XJQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFCvzHPOhMK8ol1AUnpNecFUpNicwMB8GA1UdIwQYMBaAFFCzMCCZhg4TfAMF
demJfcPCu4OqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDUxZTA4
MzNiODY1ZTAwMzY0ZjgxNThlODQxNzg2NzkwZDIxZTUwYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTcwOTI3ODMtMDIxMS00MzNmLWI2ZWEtMTVjM2Vm
OWE3NzAxLzMxOTA0Mjc1ZjE3NTJhNWZhMzAwNTE5OTI1YjA2YTQ2MGY4ZjU0NjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NzA5Mjc4My0wMjExLTQzM2YtYjZlYS0xNWMz
ZWY5YTc3MDEvNDUxZTA4MzNiODY1ZTAwMzY0ZjgxNThlODQxNzg2NzkwZDIxZTUw
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABtIADANBgkqhkiG9w0BAQsFAAOCAQEAdamjMJnZ0a5i
KwdbJcLi/y1jJCx0xtq7lIlegI9RU3y/LjSWGKXE8uKV2iAwGm4k3JX2EyDBZEAv
lQwvZLT63hcCH6n0y/99ej0NCnCfmedIyWbmFLsxFrgCYjoJj/Cm+svaSlpGk2oY
D9sF3L+kzBuS4/QEok5iwAgUil0FEJnt0/e7/9FlBptAurg0RB50e/czNc4BEJdc
PY1iYYC+M1cTGr2HtzdPtkObK6YJ99GsbM6cUPDOeTIr6KX9ibBLsjWxmCNXqjI/
VYl0UgBQz1lA4VC0b8TlNT7VpOJxFSQL+9HVE5Q3xjFORsi2QUbSc8V36gPoE5Xh
Ts/dDaQZZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org