Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5774b66f9711f9b5d264a7844b424ee39c097150.roa
File:                     5774b66f9711f9b5d264a7844b424ee39c097150.roa (raw, json)
Hash identifier:          zIu3LrxH4dccwDT+gcfjjraa7iQ8PuaRGs0zXGSudA4=
Subject key identifier:   EC:D2:A2:38:5F:1D:78:D5:BE:65:CB:92:7B:B6:56:55:C9:C0:85:CA
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       08A8A0
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5774b66f9711f9b5d264a7844b424ee39c097150.roa
Signing time:             Tue 07 Jun 2022 04:52:46 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Wed 07 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567456 (0x8a8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2023 GMT
        Subject: CN=5774b66f9711f9b5d264a7844b424ee39c097150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:b5:73:71:22:83:9a:d8:c0:4e:d0:09:3a:
                    3a:87:22:c2:80:13:f8:87:a2:61:ef:f1:19:14:b8:
                    a1:7a:e7:43:69:47:16:00:3c:47:1c:d3:ae:bb:1c:
                    97:28:94:d3:ae:20:24:39:6d:b9:55:b6:57:6a:46:
                    9e:34:88:e9:31:8e:05:32:4f:06:e9:87:a4:8f:d9:
                    39:7c:c2:9e:9a:44:e0:79:46:f6:18:71:63:3b:88:
                    ab:b2:df:e2:a7:6e:ec:eb:ee:12:52:22:16:bd:d7:
                    be:d4:c4:bf:1f:cf:74:38:a2:35:80:29:5a:9d:5d:
                    0b:94:b1:7a:7a:9e:43:76:7f:0a:8c:68:0a:88:b0:
                    df:d7:ac:61:0c:2f:8a:32:42:bd:10:13:5a:61:fb:
                    f9:09:4f:95:68:20:14:39:44:4d:de:0b:0f:63:0b:
                    2a:f1:51:99:50:3c:09:a0:5a:f6:3c:f1:24:41:de:
                    bd:37:39:38:07:1e:ad:3d:16:c0:b2:36:e1:4b:9b:
                    2b:91:77:c2:70:91:8f:09:79:5f:09:65:6c:87:fc:
                    3e:83:25:8a:d5:08:d2:05:a7:6b:ae:e9:e9:48:95:
                    6d:ed:58:7e:ab:a7:cc:94:6d:28:b2:9d:71:1a:e1:
                    71:09:bf:db:a9:3f:a6:61:df:97:be:d6:e3:c0:5a:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D2:A2:38:5F:1D:78:D5:BE:65:CB:92:7B:B6:56:55:C9:C0:85:CA
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5774b66f9711f9b5d264a7844b424ee39c097150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:8b:a1:b3:ae:a2:39:1c:d4:46:c5:bf:1d:04:35:bd:9c:
         4f:ef:dc:a3:38:d2:d9:52:b9:61:b8:fe:51:eb:14:62:2e:a3:
         e3:e4:5d:5d:9f:78:1a:5a:ee:fa:fa:9c:c1:73:4e:36:ee:4d:
         ba:6c:53:53:ea:33:ec:d2:7b:7d:bb:e7:aa:12:92:61:53:aa:
         9d:2b:8b:73:e2:ca:f7:71:3f:4d:cd:5b:59:84:58:b9:b0:ff:
         82:01:68:b4:8a:8f:2f:7b:8b:9c:34:b2:75:96:cd:91:06:50:
         a3:43:33:bc:6a:e3:62:d0:63:41:2a:12:aa:f3:8a:9b:47:1b:
         47:16:82:4e:14:5d:d0:9c:6a:62:ea:e5:b7:b6:fc:4a:6a:36:
         3a:2a:4f:69:63:53:46:99:96:d5:68:47:e9:91:2a:6b:11:0f:
         5f:76:e2:f6:1d:a9:e0:8d:24:43:98:d6:3f:0c:c3:4c:79:52:
         7b:57:04:c8:18:ee:09:d7:a4:f4:4c:96:12:26:d8:bb:9b:78:
         94:5b:f3:85:e8:41:b1:64:c1:37:78:40:46:82:0b:13:41:09:
         b8:8a:56:6b:99:e7:b1:3b:a5:0c:93:f9:06:d4:cd:74:ff:3f:
         8f:43:a9:9a:0a:2d:84:cd:59:ad:4b:27:37:8b:1f:a2:ad:87:
         ad:cd:33:e3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCKigMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNjA3
MDMwMDAwWhcNMjMwNjA3MDMwMDAwWjAzMTEwLwYDVQQDEyg1Nzc0YjY2Zjk3MTFm
OWI1ZDI2NGE3ODQ0YjQyNGVlMzljMDk3MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzRq1c3Eig5rYwE7QCTo6hyLCgBP4h6Jh7/EZFLiheudDaUcW
ADxHHNOuuxyXKJTTriAkOW25VbZXakaeNIjpMY4FMk8G6Yekj9k5fMKemkTgeUb2
GHFjO4irst/ip27s6+4SUiIWvde+1MS/H890OKI1gClanV0LlLF6ep5Ddn8KjGgK
iLDf16xhDC+KMkK9EBNaYfv5CU+VaCAUOURN3gsPYwsq8VGZUDwJoFr2PPEkQd69
Nzk4Bx6tPRbAsjbhS5srkXfCcJGPCXlfCWVsh/w+gyWK1QjSBadrrunpSJVt7Vh+
q6fMlG0osp1xGuFxCb/bqT+mYd+XvtbjwFqomQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFOzSojhfHXjVvmXLknu2VlXJwIXKMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzU3NzRiNjZmOTcxMWY5YjVkMjY0YTc4NDRiNDI0ZWUzOWMwOTcxNTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAe9yLobOuojkc
1EbFvx0ENb2cT+/cozjS2VK5Ybj+UesUYi6j4+RdXZ94Glru+vqcwXNONu5NumxT
U+oz7NJ7fbvnqhKSYVOqnSuLc+LK93E/Tc1bWYRYubD/ggFotIqPL3uLnDSydZbN
kQZQo0MzvGrjYtBjQSoSqvOKm0cbRxaCThRd0JxqYurlt7b8Smo2OipPaWNTRpmW
1WhH6ZEqaxEPX3bi9h2p4I0kQ5jWPwzDTHlSe1cEyBjuCdek9EyWEibYu5t4lFvz
hehBsWTBN3hARoILE0EJuIpWa5nnsTulDJP5BtTNdP8/j0OpmgothM1ZrUsnN4sf
oq2Hrc0z4w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org