Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/8869ebf96918eee49106eed32f7a0fc95dc4b1da.roa
File:                     8869ebf96918eee49106eed32f7a0fc95dc4b1da.roa (raw, json)
Hash identifier:          F73aUbbVmPnkV3jY4hvyr3DJqUlVehvSI1Jp/V+OemM=
Subject key identifier:   89:D9:BA:1B:13:1D:E1:87:D4:52:C9:43:7D:AC:17:40:88:03:4A:88
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       074DB0
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/8869ebf96918eee49106eed32f7a0fc95dc4b1da.roa
Signing time:             Sat 07 May 2022 04:03:15 +0000
ROA not before:           Sat 07 May 2022 03:00:00 +0000
ROA not after:            Sun 07 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478640 (0x74db0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May  7 03:00:00 2022 GMT
            Not After : May  7 03:00:00 2023 GMT
        Subject: CN=8869ebf96918eee49106eed32f7a0fc95dc4b1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:d8:1b:38:68:e5:ba:5e:93:78:46:a8:d7:
                    02:62:14:1f:e3:5d:f2:e2:d0:40:cf:75:b6:f8:65:
                    07:79:5b:e6:19:be:e5:87:ca:87:e7:ab:6e:2b:e9:
                    f8:07:d6:9a:8a:cd:4d:29:9e:be:e8:95:7f:f9:10:
                    d0:b0:68:ef:f7:70:b1:94:af:87:8b:c8:7c:7f:40:
                    8b:1f:1e:5a:5c:06:07:c8:98:3e:6e:58:9b:b6:30:
                    8f:57:a3:e5:32:4d:bc:2d:08:74:d9:24:b0:5f:22:
                    d4:90:8e:f1:7b:49:a6:51:7d:3a:03:69:e8:61:04:
                    7d:6b:70:a3:de:13:14:b2:d7:a8:f1:6e:1a:2f:c3:
                    38:d0:4b:4d:f9:65:08:a0:3e:0c:ac:1f:93:89:16:
                    ea:2f:fb:ba:f4:26:b7:ad:73:c7:34:1e:4b:56:07:
                    b4:29:48:36:38:4f:42:79:f4:33:eb:c6:88:a2:9a:
                    f1:85:b0:8e:7f:d9:b9:5e:ea:e3:16:e8:55:d2:dc:
                    b3:ba:6a:de:5f:a3:fa:20:73:9d:0b:e2:03:be:ed:
                    5c:06:59:c0:6a:83:ad:02:ce:ef:c1:ad:cd:e2:0f:
                    b1:5b:42:ad:06:9f:ff:ac:a0:28:23:80:e3:22:8f:
                    8a:04:e2:f1:42:e1:d5:17:11:ea:d9:fa:b7:ee:8a:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D9:BA:1B:13:1D:E1:87:D4:52:C9:43:7D:AC:17:40:88:03:4A:88
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/8869ebf96918eee49106eed32f7a0fc95dc4b1da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:a6:5d:76:33:f0:50:09:bf:3e:54:69:27:7a:1e:bd:9b:5e:
         41:42:52:5b:fb:48:7a:44:33:47:86:3a:9e:34:73:c8:2b:3c:
         9b:ad:83:1c:32:0d:3f:f4:3f:ac:67:49:e8:19:85:77:ba:44:
         a3:70:51:bb:f0:1d:9c:a0:ab:6a:a8:19:07:ef:84:e8:29:78:
         ab:44:4b:bb:55:3e:f2:aa:ab:35:cb:fb:71:43:3f:2c:42:62:
         63:85:0d:f0:6d:32:36:3b:78:0d:6d:8d:5c:44:26:21:18:f0:
         2f:1c:a1:11:25:35:d2:e6:d0:be:9b:fb:11:53:56:e8:72:96:
         2f:2e:bf:d9:52:b2:05:e6:d9:f9:ee:e6:43:b8:fd:9e:6d:28:
         b1:df:00:17:0b:fc:88:38:c0:76:24:70:52:21:2e:ed:54:b2:
         bc:ae:44:5f:2e:c9:43:da:c3:6f:43:b4:8c:af:ba:44:a1:67:
         6f:73:ad:7f:4a:c3:a6:1b:a5:7a:89:b1:92:c3:96:ce:70:4c:
         00:b6:fd:be:4b:b4:cb:74:29:6a:ca:e5:67:67:50:96:a8:cf:
         18:f7:7f:ac:d0:70:08:fd:31:32:e8:d7:c9:84:c0:09:96:d3:
         1b:df:66:05:ce:32:ce:b5:ed:66:d9:cc:7c:1e:2f:1f:61:f5:
         a1:fe:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org