Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/859918a654072113454bf1514fce50b149379e8b.roa
File:                     859918a654072113454bf1514fce50b149379e8b.roa (raw, json)
Hash identifier:          AMRWc3Q+i7ZFiq/ovbcuw4VMAb6YxLWFUI/sf7VmEGk=
Subject key identifier:   F2:15:31:E8:CB:88:E3:48:EC:12:30:06:B9:14:7A:D9:A5:DF:9C:22
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0765CE
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/859918a654072113454bf1514fce50b149379e8b.roa
Signing time:             Mon 09 May 2022 04:15:28 +0000
ROA not before:           Mon 09 May 2022 03:00:00 +0000
ROA not after:            Tue 09 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484814 (0x765ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May  9 03:00:00 2022 GMT
            Not After : May  9 03:00:00 2023 GMT
        Subject: CN=859918a654072113454bf1514fce50b149379e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:40:a7:fa:0c:1e:b3:8a:ec:62:4b:9d:ec:
                    b5:76:96:cd:57:7e:a6:6e:07:2b:dd:55:3a:1a:39:
                    25:69:1d:8d:39:92:11:0b:b4:d2:54:ec:68:d8:0d:
                    13:0a:ba:53:29:b9:72:4b:b9:54:58:3e:a9:73:61:
                    20:4c:65:f1:34:e6:b2:49:8c:d8:3c:c6:98:0d:06:
                    5c:d2:ff:9a:ae:c7:c5:dd:58:7d:af:62:94:cd:32:
                    0a:4d:f8:21:32:31:e2:ff:7b:0f:0e:cf:77:52:a6:
                    39:bc:ab:4a:45:d6:7d:f3:bd:69:b9:1d:ab:b7:c7:
                    36:53:48:c5:05:84:f6:bc:63:aa:48:68:66:c8:b2:
                    c1:58:0f:ed:80:c5:37:8f:e7:f2:8e:9b:c1:da:26:
                    80:1b:03:af:3b:13:5c:ee:ae:38:e4:3f:89:55:33:
                    e7:f2:49:74:a4:fb:32:8f:20:58:33:5a:07:fd:b7:
                    f3:03:de:50:c8:f6:e7:2f:c5:98:ef:3a:20:2e:88:
                    8e:e9:ca:80:40:c1:69:7c:1d:56:7d:87:5f:f0:ec:
                    6f:fc:d2:6f:ac:81:4b:31:11:9b:4a:10:51:95:e3:
                    2f:a0:1b:be:f5:db:3f:e8:73:7e:ec:5e:21:f6:21:
                    be:eb:8b:e1:bc:16:0d:0b:86:37:97:25:3b:c6:11:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:15:31:E8:CB:88:E3:48:EC:12:30:06:B9:14:7A:D9:A5:DF:9C:22
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/859918a654072113454bf1514fce50b149379e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:40:84:d1:75:07:30:a4:68:83:5d:84:6b:65:6d:74:9f:ff:
         7a:2c:f2:1a:df:ed:6c:78:38:87:16:c9:9e:16:dc:87:34:95:
         5b:b8:4a:03:39:8e:a7:e3:f5:75:dc:14:5a:8d:37:ec:c8:7a:
         df:eb:f3:75:9d:87:43:36:ca:8b:86:18:46:2e:e2:68:93:ea:
         62:5a:d8:3a:ea:6d:a8:d1:7d:17:79:c9:4e:54:5d:a9:1f:01:
         3c:3e:b9:98:75:aa:38:0a:ea:d5:2b:7c:cd:90:8e:6d:6a:02:
         a2:0f:f3:17:c4:6f:dd:2a:6c:c5:a1:f4:61:20:ae:00:e1:37:
         ea:2c:f6:29:43:68:36:d4:20:1f:04:6d:08:ed:bb:a1:00:32:
         40:dd:6c:19:31:8e:33:5d:0f:ab:44:b7:54:27:65:13:47:71:
         f5:31:7d:0e:31:5b:57:cc:f5:ad:2e:98:38:7c:18:82:38:57:
         73:b5:11:aa:d6:6f:0e:65:2f:dc:50:37:e5:51:5c:4b:9d:00:
         f3:cd:e4:60:e6:41:1a:0c:70:4c:7a:2d:c5:01:e9:9c:02:e9:
         05:dc:f5:49:7e:dd:79:08:8c:e9:62:18:ad:ca:16:99:4e:6b:
         75:c2:a6:ce:6b:2e:bf:fa:90:fd:a7:44:12:c4:89:4d:84:4d:
         63:0e:f0:94
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDB2XOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNTA5
MDMwMDAwWhcNMjMwNTA5MDMwMDAwWjAzMTEwLwYDVQQDEyg4NTk5MThhNjU0MDcy
MTEzNDU0YmYxNTE0ZmNlNTBiMTQ5Mzc5ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm0ZAp/oMHrOK7GJLney1dpbNV36mbgcr3VU6GjklaR2NOZIR
C7TSVOxo2A0TCrpTKblyS7lUWD6pc2EgTGXxNOaySYzYPMaYDQZc0v+arsfF3Vh9
r2KUzTIKTfghMjHi/3sPDs93UqY5vKtKRdZ9871puR2rt8c2U0jFBYT2vGOqSGhm
yLLBWA/tgMU3j+fyjpvB2iaAGwOvOxNc7q445D+JVTPn8kl0pPsyjyBYM1oH/bfz
A95QyPbnL8WY7zogLoiO6cqAQMFpfB1WfYdf8Oxv/NJvrIFLMRGbShBRleMvoBu+
9ds/6HN+7F4h9iG+64vhvBYNC4Y3lyU7xhGpnwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFPIVMejLiONI7BIwBrkUetml35wiMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzg1OTkxOGE2NTQwNzIxMTM0NTRiZjE1MTRmY2U1MGIxNDkzNzllOGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEApUCE0XUHMKRo
g12Ea2VtdJ//eizyGt/tbHg4hxbJnhbchzSVW7hKAzmOp+P1ddwUWo037Mh63+vz
dZ2HQzbKi4YYRi7iaJPqYlrYOuptqNF9F3nJTlRdqR8BPD65mHWqOArq1St8zZCO
bWoCog/zF8Rv3SpsxaH0YSCuAOE36iz2KUNoNtQgHwRtCO27oQAyQN1sGTGOM10P
q0S3VCdlE0dx9TF9DjFbV8z1rS6YOHwYgjhXc7URqtZvDmUv3FA35VFcS50A883k
YOZBGgxwTHotxQHpnALpBdz1SX7deQiM6WIYrcoWmU5rdcKmzmsuv/qQ/adEEsSJ
TYRNYw7wlA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org