Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/67f3e915ca5ab861b1c1b11677c44f180d94eec1.roa
File:                     67f3e915ca5ab861b1c1b11677c44f180d94eec1.roa (raw, json)
Hash identifier:          dSdQYBdCHxQtdnpWC2Ynhw4rBz0gvl6OW3HC3hi/ehQ=
Subject key identifier:   26:5B:C6:FA:FC:56:72:87:00:CB:DE:24:29:05:EA:D0:07:06:02:84
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       09CF3A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/67f3e915ca5ab861b1c1b11677c44f180d94eec1.roa
Signing time:             Tue 05 Jul 2022 04:18:03 +0000
ROA not before:           Tue 05 Jul 2022 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642874 (0x9cf3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul  5 03:00:00 2022 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=67f3e915ca5ab861b1c1b11677c44f180d94eec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:0b:6c:e3:f7:0b:ca:6d:57:a9:47:11:38:
                    c7:d4:c0:1f:70:a4:1b:0e:d2:05:d0:cf:6d:b6:49:
                    c0:55:9c:fb:76:f4:f7:95:33:ac:2d:97:77:3b:e7:
                    16:3b:cf:bd:35:cb:99:6e:75:ed:24:d3:9a:fb:69:
                    12:9f:f7:3c:8b:b4:e7:1b:ec:d4:21:18:51:32:8a:
                    05:16:a7:11:77:c8:2b:a8:9b:85:08:1e:d1:97:70:
                    ec:71:70:25:2d:d7:25:c2:fe:e1:a5:b6:fb:a5:9f:
                    52:e3:39:ed:33:46:73:5d:34:3b:8d:26:1e:ab:97:
                    08:17:2e:5d:b8:a9:33:cc:6c:5d:a6:bc:ef:b9:bf:
                    e7:c1:f6:fc:37:5b:36:76:10:6f:72:aa:34:a7:67:
                    29:0f:8f:16:aa:cf:28:da:bb:08:0b:e7:e4:fe:17:
                    cf:95:84:8e:61:5c:13:0a:dd:a7:b0:fa:14:67:9c:
                    c1:d5:a8:e8:d4:85:11:89:64:14:eb:a2:93:b2:b0:
                    f0:8f:21:f4:54:33:1d:75:7e:60:cb:a8:a4:85:3e:
                    51:43:c5:91:1c:f8:cd:04:54:c2:56:fd:c4:14:52:
                    23:75:57:28:7b:69:37:bc:86:a7:e3:ad:cd:51:56:
                    35:31:ac:f2:b9:96:18:09:0f:43:67:1e:f4:cd:f1:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5B:C6:FA:FC:56:72:87:00:CB:DE:24:29:05:EA:D0:07:06:02:84
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/67f3e915ca5ab861b1c1b11677c44f180d94eec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:68:38:19:07:c3:70:80:3b:8b:e6:d0:b4:91:32:f9:1f:66:
         51:9f:35:0f:a6:ff:46:31:a2:f5:0f:5a:7b:e6:b1:fa:db:a1:
         94:44:15:75:b9:e0:f4:97:8a:8d:90:ec:8a:ee:9f:3d:8e:27:
         f3:eb:bd:4d:b7:59:eb:2b:da:51:70:a8:7c:c1:26:d6:73:eb:
         f4:94:ab:d5:b7:2a:0d:72:05:b2:94:2d:1c:23:be:bc:98:8d:
         88:0f:53:a6:a3:ba:4a:e3:3c:39:c8:b7:df:c5:d5:95:2c:9d:
         85:7a:38:1b:24:25:8a:16:b9:c0:46:cd:86:c4:29:83:74:ad:
         43:fb:c5:70:f7:88:2f:b0:99:7d:59:44:70:4f:65:38:6d:23:
         e1:b0:f6:8b:b7:d9:93:08:b0:8a:46:41:31:8a:9d:ff:3a:fd:
         62:2e:60:e5:91:c0:ac:54:3b:2a:a5:53:6b:a1:61:a4:54:fe:
         58:86:4e:f1:08:1e:da:70:f3:06:99:dd:51:67:0b:3d:f1:a5:
         02:47:41:82:62:76:0d:d0:b8:bf:94:5a:31:68:42:64:6c:df:
         11:91:79:29:62:94:03:89:24:fc:62:76:df:30:53:a1:81:17:
         0e:17:76:3e:57:74:74:60:cc:ab:02:b3:e8:35:49:3b:c4:fd:
         e6:21:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org