Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b5610ab-f39f-4055-bbf0-1f49373e99bb/c4d02989758cfbfedc69894c40df0edd052a79f5.roa
File:                     c4d02989758cfbfedc69894c40df0edd052a79f5.roa (raw, json)
Hash identifier:          fKKWIeuGa24uzkOuxGJLj95f3xf7eSOLYwa320IUbps=
Subject key identifier:   DF:72:B0:59:B4:A4:4D:DF:5C:81:7F:14:A2:1F:AB:3F:D5:09:1B:03
Certificate issuer:       /CN=5c1bc8aec43ba5cf4ce8962afb1436320685b1f5
Certificate serial:       0A435E
Authority key identifier: 24:60:E3:F1:78:66:35:6E:2F:DD:E9:42:67:A3:8E:48:66:DD:C1:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c1bc8aec43ba5cf4ce8962afb1436320685b1f5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b5610ab-f39f-4055-bbf0-1f49373e99bb/c4d02989758cfbfedc69894c40df0edd052a79f5.roa
Signing time:             Wed 24 Mar 2021 14:34:38 +0000
ROA not before:           Wed 24 Mar 2021 14:34:38 +0000
ROA not after:            Tue 24 Mar 2026 14:34:38 +0000
asID:                     19429
IP address blocks:        2801:1e:c800::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672606 (0xa435e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c1bc8aec43ba5cf4ce8962afb1436320685b1f5
        Validity
            Not Before: Mar 24 14:34:38 2021 GMT
            Not After : Mar 24 14:34:38 2026 GMT
        Subject: CN=c4d02989758cfbfedc69894c40df0edd052a79f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:54:91:08:1b:1b:86:3d:04:a0:5a:60:aa:
                    4a:dc:22:25:d9:d3:b1:1e:e7:94:09:07:0b:e6:bf:
                    72:a5:88:6a:57:d3:70:32:20:91:5f:a2:e9:fa:df:
                    78:8c:7b:b0:c1:a5:81:3a:e0:e4:6f:ba:ec:e3:d7:
                    7a:d1:3e:e9:4e:62:cb:0e:90:38:d7:6b:d5:cc:7c:
                    4e:5f:96:a8:34:1f:0b:15:c2:77:46:23:6b:69:94:
                    36:5a:8e:44:c9:03:cd:a7:80:1c:78:d6:35:b7:7d:
                    8e:dc:2f:96:e6:ff:8b:7f:05:8b:33:44:1a:07:1d:
                    43:d0:83:4d:fc:30:3c:c5:7a:ce:9e:fd:8c:e9:70:
                    3d:c9:84:65:da:81:67:6b:f7:21:b9:71:0c:53:ac:
                    c3:0a:d7:1d:fe:9f:8c:f3:e2:00:82:2c:5d:77:53:
                    c5:f4:ae:54:19:39:41:9b:ff:ff:2f:7e:d9:e5:06:
                    b7:6f:1e:f7:4a:eb:bc:6d:d2:04:72:ea:ed:f8:77:
                    da:25:d2:a4:39:88:de:e7:64:41:95:82:50:d4:64:
                    50:60:ae:9a:ab:3c:93:51:63:75:94:1e:7b:8e:ce:
                    32:8e:73:61:5d:77:23:ae:09:de:8e:83:41:25:cb:
                    2e:7f:0f:88:6b:83:aa:aa:db:92:e8:96:0a:ed:ec:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:72:B0:59:B4:A4:4D:DF:5C:81:7F:14:A2:1F:AB:3F:D5:09:1B:03
            X509v3 Authority Key Identifier:
                keyid:24:60:E3:F1:78:66:35:6E:2F:DD:E9:42:67:A3:8E:48:66:DD:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c1bc8aec43ba5cf4ce8962afb1436320685b1f5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b5610ab-f39f-4055-bbf0-1f49373e99bb/c4d02989758cfbfedc69894c40df0edd052a79f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b5610ab-f39f-4055-bbf0-1f49373e99bb/5c1bc8aec43ba5cf4ce8962afb1436320685b1f5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:c800::/64

    Signature Algorithm: sha256WithRSAEncryption
         5b:b9:b6:20:b1:2a:08:7c:3a:f3:d7:d4:59:e3:a2:1a:c0:ec:
         59:ee:9f:a5:b1:78:88:fb:9b:f0:b6:5a:70:0b:50:cc:ed:a9:
         6e:14:75:b8:7b:98:17:65:93:ab:66:6a:dc:b9:b6:1f:3b:f5:
         e5:f0:28:48:ef:22:5a:81:e4:32:df:05:e9:44:c1:df:a8:63:
         4c:ae:52:29:d4:c8:78:8b:f4:70:e3:b1:6f:43:a9:be:62:62:
         e3:93:e4:d9:40:57:23:33:96:a1:a2:11:12:81:73:3d:21:64:
         8e:37:ec:1d:20:4c:14:dc:f8:3c:9b:fd:57:7a:73:b5:19:cd:
         9d:b2:e5:9c:6a:8d:bb:1e:ee:eb:4e:1e:f7:5a:43:47:d2:c3:
         11:64:36:22:f4:22:0e:dd:00:4c:ed:8d:3b:46:c3:45:95:1d:
         dc:aa:0c:eb:e6:4f:90:01:d7:b7:41:36:e4:4b:ca:66:c5:8a:
         e6:dc:1f:a5:7e:01:cb:6b:7d:42:30:02:a9:25:93:04:b9:0e:
         74:cf:7c:29:0c:f8:fb:47:a7:f2:1c:ca:dc:65:c7:25:b2:68:
         f7:5f:81:94:38:85:a5:36:63:fd:b7:93:3f:2a:73:92:d4:b0:
         ee:41:29:9d:cd:5f:cd:99:78:28:4c:e7:49:7c:d0:2c:66:fe:
         88:37:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org