Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/00a945fcaa71be00210e33cd7a42d40b655fb995.roa
File:                     00a945fcaa71be00210e33cd7a42d40b655fb995.roa (raw, json)
Hash identifier:          dQw/1gmhYEt3b8ZgmJAGXIoM6IM+Z4dgUQb///fzx3s=
Subject key identifier:   BA:6F:9E:F2:E2:C9:2B:71:A5:FD:DF:51:A4:BE:36:0E:49:6E:9D:2E
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0B39F7
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/00a945fcaa71be00210e33cd7a42d40b655fb995.roa
Signing time:             Mon 08 Aug 2022 00:02:38 +0000
ROA not before:           Mon 08 Aug 2022 03:00:00 +0000
ROA not after:            Tue 08 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735735 (0xb39f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug  8 03:00:00 2022 GMT
            Not After : Aug  8 03:00:00 2023 GMT
        Subject: CN=00a945fcaa71be00210e33cd7a42d40b655fb995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:28:95:16:f1:e6:10:46:20:47:21:26:12:
                    33:ab:cd:12:68:c3:57:2d:d1:56:01:07:0b:db:d0:
                    c5:9d:9f:df:9a:b5:9b:d0:dc:34:e0:80:a9:fa:7d:
                    a4:31:ad:6e:75:23:83:54:a8:bb:97:50:41:f5:63:
                    58:87:8b:f2:77:7e:fc:bc:cb:82:18:e6:9a:d9:6c:
                    89:37:37:7c:56:ce:ba:da:80:2f:ad:64:87:e0:92:
                    a3:30:06:ed:38:bb:54:29:dd:7d:2c:c8:14:f4:73:
                    30:93:0e:26:34:0e:72:fe:1b:dc:b0:fa:db:dc:55:
                    e3:6d:39:51:39:37:13:46:9c:8e:7b:8f:06:cb:a8:
                    c7:7a:a4:fb:4b:c1:f5:fe:92:12:21:9b:b0:31:e1:
                    41:b9:a0:f3:6a:da:2f:08:9f:f0:2c:e4:8d:49:75:
                    97:76:dd:fe:15:8a:77:e6:7e:f3:d8:88:a9:8c:24:
                    81:e3:24:0a:e0:c2:2e:05:50:fa:d5:6e:29:fd:f9:
                    26:3a:41:84:31:5d:1f:77:81:d8:1f:1c:47:af:b8:
                    40:36:0a:05:50:fa:7d:55:e1:46:96:6c:dd:b3:70:
                    f2:9d:f1:1b:4f:85:c4:ef:74:98:88:75:49:59:f6:
                    31:87:14:c5:da:57:3f:a4:8f:a1:14:60:a5:c2:ca:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6F:9E:F2:E2:C9:2B:71:A5:FD:DF:51:A4:BE:36:0E:49:6E:9D:2E
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/00a945fcaa71be00210e33cd7a42d40b655fb995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:29:c9:27:09:4c:ed:49:49:14:f1:1a:25:99:9c:68:b6:
         0e:bb:33:b4:75:88:89:bb:b9:df:e9:f5:7a:0a:e1:12:b0:44:
         65:2a:4c:1c:52:d3:2d:d3:b0:0a:22:51:8d:1b:5f:a5:84:f2:
         05:94:22:97:07:4e:b3:c2:ce:f9:42:9c:f6:13:ee:95:26:96:
         78:0e:fe:ab:2f:19:8f:25:21:91:fd:80:6d:35:1e:1f:6a:32:
         89:3c:97:89:1a:ab:3c:54:41:7e:c6:85:ba:91:0c:3a:c4:ec:
         4a:d6:68:c7:3b:6c:94:ab:e3:e1:ea:51:4a:67:ab:21:a3:09:
         d6:10:d6:ac:25:12:37:dc:9e:aa:9b:92:3e:cf:5e:fa:11:24:
         87:18:5e:3f:d2:41:99:53:23:50:6e:53:99:38:81:cb:a4:8c:
         b8:b6:ba:37:f1:90:26:94:44:3c:00:0c:74:6b:86:49:21:bc:
         d8:d1:e0:6a:ac:3c:0a:b0:4f:2b:ef:77:72:80:7a:fe:35:d3:
         dc:56:26:af:1e:e4:a7:f7:c6:0d:98:90:13:d1:a3:17:08:20:
         6a:7d:ce:e5:c5:3b:32:bf:66:ee:b8:dc:72:07:07:b8:e3:f7:
         77:de:87:99:58:cc:b7:66:35:3b:44:93:c8:07:af:50:5f:1a:
         e9:2b:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org