Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/f8d0ce73c1a5e6a2e42afa104263e1049292ed7b.roa
File:                     f8d0ce73c1a5e6a2e42afa104263e1049292ed7b.roa (raw, json)
Hash identifier:          VfC+GZBAYbXaoVbru7DOHsXg3aEtzbw3rNXFmqubRmo=
Subject key identifier:   64:77:97:58:10:4E:58:EC:DB:EB:DB:ED:A4:70:A3:57:0C:C6:E8:7F
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       0C0EEE
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/f8d0ce73c1a5e6a2e42afa104263e1049292ed7b.roa
Signing time:             Tue 16 May 2023 23:51:50 +0000
ROA not before:           Mon 15 May 2023 23:51:44 +0000
ROA not after:            Fri 16 May 2025 23:51:44 +0000
asID:                     23246
IP address blocks:        2803:c310:fe00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790254 (0xc0eee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: May 15 23:51:44 2023 GMT
            Not After : May 16 23:51:44 2025 GMT
        Subject: CN=f8d0ce73c1a5e6a2e42afa104263e1049292ed7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:5c:14:ae:59:f6:e8:5b:cf:b0:93:1e:59:
                    ea:16:1b:76:87:68:cb:fa:38:80:72:01:29:7f:99:
                    be:0c:b5:b7:a7:db:29:9a:53:3a:55:58:8f:79:2d:
                    f8:2a:95:2a:fa:78:01:35:14:61:3e:e7:0d:29:69:
                    c7:b6:21:ac:ef:2c:a0:5b:98:28:bc:a0:de:72:67:
                    c9:5b:bc:35:8e:1c:3b:31:fc:45:fa:41:0b:a6:28:
                    f5:b4:7a:b9:ba:c5:a7:51:95:fe:09:5a:47:49:cf:
                    2f:3b:5a:7e:c0:5d:66:4d:78:16:91:b1:17:cf:4f:
                    35:cc:ac:d7:41:81:fd:cd:c9:1e:95:e7:03:db:88:
                    62:06:ad:f8:88:57:90:79:2a:b9:b6:03:e8:64:51:
                    f1:2b:e7:0c:81:79:37:9e:28:05:e3:03:3d:b1:9a:
                    40:4b:52:f9:4c:31:07:4c:b5:60:95:fb:03:c7:42:
                    f7:75:31:18:a2:3d:00:16:b8:8f:a6:9e:1f:a8:ac:
                    76:d9:a9:09:c0:30:3a:0a:e6:5c:69:80:d7:81:2a:
                    9e:d3:d2:fa:3a:e7:51:c7:5c:4d:c1:77:cf:de:bf:
                    c8:8e:5a:6f:7c:81:98:72:2f:ae:08:96:32:01:12:
                    af:80:62:be:3a:d9:35:b2:e4:9a:44:64:c1:a1:2d:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:77:97:58:10:4E:58:EC:DB:EB:DB:ED:A4:70:A3:57:0C:C6:E8:7F
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/f8d0ce73c1a5e6a2e42afa104263e1049292ed7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c310:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         b5:63:5b:0e:2c:c5:e7:0e:e1:da:f8:35:51:72:5e:a1:4d:c9:
         f7:67:77:da:66:83:ff:54:f4:46:7f:6d:cd:8a:3a:79:3c:32:
         f5:ee:65:95:58:9f:5f:84:09:38:33:c2:9e:78:2f:9a:d8:f7:
         48:4a:f9:d8:25:af:b8:90:8b:44:79:7f:25:2d:9c:b3:16:e9:
         8b:5e:cc:ae:b0:94:90:75:9c:6a:aa:e6:d8:e6:b7:a5:f6:15:
         b5:bb:d3:81:66:c8:52:90:f3:cf:6d:4a:d3:04:6d:94:b5:1b:
         d4:73:f3:fe:9b:b5:b9:ee:2e:5e:e8:94:21:92:36:50:19:2e:
         20:99:2b:45:d7:80:53:62:0d:1d:09:3a:8f:46:8b:7e:e9:f6:
         e0:0a:eb:39:cf:9b:b3:c1:e2:d7:16:b2:b7:c6:1c:1e:c4:07:
         ef:a5:2b:93:f5:11:36:14:55:0a:ac:90:9c:e0:af:5b:9c:50:
         26:9f:96:90:3c:52:2c:1f:fb:92:72:9a:34:8f:01:0f:96:a5:
         62:55:c6:85:c4:b0:12:24:ed:88:a4:a7:71:30:d4:d0:fa:27:
         4e:5c:d7:48:7b:19:a4:99:5b:7c:b5:eb:33:d9:7a:01:f8:bb:
         e4:b3:9e:97:1b:44:3a:b3:9e:b3:4e:9d:eb:95:60:e0:b6:0c:
         8f:e7:ce:78
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDDA7uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
ZGE2YWQyNTI4YTI2NmVmYTk2M2M0NzJhOTQ1YjQ1MTE0ZDBjY2YwHhcNMjMwNTE1
MjM1MTQ0WhcNMjUwNTE2MjM1MTQ0WjAzMTEwLwYDVQQDEyhmOGQwY2U3M2MxYTVl
NmEyZTQyYWZhMTA0MjYzZTEwNDkyOTJlZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl9NcFK5Z9uhbz7CTHlnqFht2h2jL+jiAcgEpf5m+DLW3p9sp
mlM6VViPeS34KpUq+ngBNRRhPucNKWnHtiGs7yygW5govKDecmfJW7w1jhw7MfxF
+kELpij1tHq5usWnUZX+CVpHSc8vO1p+wF1mTXgWkbEXz081zKzXQYH9zckelecD
24hiBq34iFeQeSq5tgPoZFHxK+cMgXk3nigF4wM9sZpAS1L5TDEHTLVglfsDx0L3
dTEYoj0AFriPpp4fqKx22akJwDA6CuZcaYDXgSqe09L6OudRx1xNwXfP3r/Ijlpv
fIGYci+uCJYyARKvgGK+Otk1suSaRGTBoS1C8wIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFGR3l1gQTljs2+vb7aRwo1cMxuh/MB8GA1UdIwQYMBaAFA1bxD8SHr0G0UUp
azA2M39EQtlZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWZkYTZh
ZDI1MjhhMjY2ZWZhOTYzYzQ3MmE5NDViNDUxMTRkMGNjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThlNjY3YzUtM2RhZS00MDc5LThjN2ItOGUyOTU3
M2Q1ZWQ0L2Y4ZDBjZTczYzFhNWU2YTJlNDJhZmExMDQyNjNlMTA0OTI5MmVkN2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGU2NjdjNS0zZGFlLTQwNzktOGM3Yi04ZTI5
NTczZDVlZDQvNWZkYTZhZDI1MjhhMjY2ZWZhOTYzYzQ3MmE5NDViNDUxMTRkMGNj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGASgDwxD+MA0GCSqGSIb3DQEBCwUAA4IBAQC1Y1sOLMXnDuHa
+DVRcl6hTcn3Z3faZoP/VPRGf23Nijp5PDL17mWVWJ9fhAk4M8KeeC+a2PdISvnY
Ja+4kItEeX8lLZyzFumLXsyusJSQdZxqqubY5rel9hW1u9OBZshSkPPPbUrTBG2U
tRvUc/P+m7W57i5e6JQhkjZQGS4gmStF14BTYg0dCTqPRot+6fbgCus5z5uzweLX
FrK3xhwexAfvpSuT9RE2FFUKrJCc4K9bnFAmn5aQPFIsH/uScpo0jwEPlqViVcaF
xLASJO2IpKdxMNTQ+idOXNdIexmkmVt8tesz2XoB+Lvks56XG0Q6s56zTp3rlWDg
tgyP5854
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org