Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2a7b08ebebb87cba9467c14f8b6f9d831c8b40db.roa
File:                     2a7b08ebebb87cba9467c14f8b6f9d831c8b40db.roa (raw, json)
Hash identifier:          gCbnL9WoAP+fkeeSn+4w95NuDDMvGLWGmEJ3n2STW4s=
Subject key identifier:   C1:36:37:6B:7C:C5:7D:82:D8:43:E9:24:93:1F:56:82:13:15:E5:3C
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       04A145
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2a7b08ebebb87cba9467c14f8b6f9d831c8b40db.roa
Signing time:             Fri 11 Mar 2022 02:31:12 +0000
ROA not before:           Fri 11 Mar 2022 03:00:00 +0000
ROA not after:            Sat 11 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303429 (0x4a145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 11 03:00:00 2022 GMT
            Not After : Mar 11 03:00:00 2023 GMT
        Subject: CN=2a7b08ebebb87cba9467c14f8b6f9d831c8b40db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:37:0e:b9:e9:ed:f8:e4:8b:49:2a:8f:6f:
                    b9:06:4c:73:36:53:b4:c7:c1:6d:3d:dc:36:1d:61:
                    40:bf:af:fa:d8:ef:c0:da:e3:81:86:ba:1c:d1:d9:
                    43:2d:b8:20:a3:54:ba:70:a8:1b:e9:98:28:c0:91:
                    46:05:0a:c6:02:a1:b0:39:a3:8b:9e:72:46:3b:b2:
                    75:ef:59:a5:f2:95:d7:fb:05:38:18:27:8d:2a:03:
                    c1:5c:ae:02:0e:0d:f8:91:ad:50:4c:d0:02:b2:ff:
                    8f:b8:52:80:f3:39:74:9b:4b:20:0d:15:90:ce:7b:
                    a4:57:ac:eb:36:d5:a5:ef:11:b1:95:76:b9:33:24:
                    84:63:f7:a6:63:bd:3b:9f:d2:11:84:e6:50:5e:a8:
                    52:14:46:94:32:7f:1a:76:18:8c:c6:79:df:bd:e3:
                    bc:d0:78:25:de:f7:7f:29:5f:2a:a7:1b:c8:a5:6e:
                    94:32:1e:11:3b:e8:dc:df:82:2e:a2:0c:d0:05:7f:
                    db:78:7d:e4:86:7f:a4:19:10:ce:2c:fd:e2:7a:44:
                    fa:46:1a:e1:19:6a:e4:75:a1:6e:ce:67:54:b0:8b:
                    27:09:12:c8:84:ea:95:9a:3d:96:41:6a:9b:3e:6f:
                    40:a3:2b:18:7c:19:47:dd:93:d2:ae:92:fb:90:02:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:36:37:6B:7C:C5:7D:82:D8:43:E9:24:93:1F:56:82:13:15:E5:3C
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2a7b08ebebb87cba9467c14f8b6f9d831c8b40db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:5b:b3:08:6d:66:e6:9a:23:ab:86:01:1f:53:d7:68:68:
         70:c0:8d:17:a9:bb:15:c2:5c:d7:26:05:4b:d0:69:18:07:0a:
         f4:2b:1b:89:86:a6:1a:c9:d4:b5:e7:2b:02:bb:7c:7f:41:d9:
         66:65:13:1f:45:04:d6:97:6a:6c:ea:64:dc:e9:03:5c:4c:40:
         80:b7:88:dd:10:3a:7a:90:48:d5:1f:9c:ad:de:40:8b:01:fc:
         be:c4:3b:a1:f8:e5:c9:2d:31:ef:65:94:ef:b0:ae:d5:d1:88:
         25:12:81:b0:5d:34:b7:5a:f7:55:31:bc:70:90:68:bd:9c:2c:
         56:1e:cc:e9:bd:55:19:8a:04:63:f0:93:d8:2c:4b:a3:ad:cc:
         b4:fb:5b:85:c9:99:ca:ab:c4:68:2d:33:3a:6e:c2:42:96:3f:
         ce:39:5d:7d:82:ac:13:7e:e7:10:83:c9:91:fc:43:a0:2d:2e:
         39:2e:e3:00:11:08:f0:7f:f1:d4:65:26:fe:32:61:ed:10:32:
         66:b7:a6:31:e6:08:e6:8e:d5:21:fc:74:ca:19:1b:b2:04:89:
         71:1f:da:56:dd:c9:1e:3f:0e:3c:6c:2e:d1:f9:64:33:4f:74:
         1d:04:0b:15:3c:41:db:dd:4f:05:70:18:fc:8a:0a:aa:71:b1:
         0c:91:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org