Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/965b03cd2c0dcd4a413e8687e00d64d6aa4746e9.roa
File:                     965b03cd2c0dcd4a413e8687e00d64d6aa4746e9.roa (raw, json)
Hash identifier:          wBxT0wJJNjti1vsZ20LwOcFm8gjDgck8/jtvcxySxKo=
Subject key identifier:   C6:6A:1B:41:89:DF:16:45:2B:C6:84:F2:25:47:DF:38:87:2E:54:81
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0C8294
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/965b03cd2c0dcd4a413e8687e00d64d6aa4746e9.roa
Signing time:             Mon 05 Sep 2022 03:58:04 +0000
ROA not before:           Mon 05 Sep 2022 03:00:00 +0000
ROA not after:            Tue 05 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819860 (0xc8294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep  5 03:00:00 2022 GMT
            Not After : Sep  5 03:00:00 2023 GMT
        Subject: CN=965b03cd2c0dcd4a413e8687e00d64d6aa4746e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:da:02:a8:0d:53:75:6d:b3:8b:39:8c:31:
                    d2:03:cb:7e:3d:c8:ef:55:fe:40:11:b6:ec:00:b9:
                    ac:61:a2:80:a8:82:b0:d1:44:9f:53:1d:1e:c5:a8:
                    17:47:ab:03:4c:67:34:a2:38:dc:c4:a1:15:d6:c6:
                    7c:e8:c6:a0:f2:af:15:6e:90:91:ca:69:46:4f:a3:
                    d5:d4:8e:48:49:78:29:3b:ad:df:92:cb:67:10:5b:
                    55:77:7e:b1:c2:8c:d8:6c:67:0d:0f:a5:82:99:30:
                    77:67:46:a6:f3:fd:0e:80:d1:57:2f:60:33:ce:07:
                    db:ce:81:ff:35:c4:7d:21:52:09:93:b7:77:65:90:
                    f9:8f:8a:33:16:3b:5f:96:d6:5e:0d:5d:af:99:f7:
                    15:c4:a7:7c:d8:eb:9a:b5:ff:0a:0c:a5:43:c2:89:
                    18:0c:06:2c:71:7f:80:6d:6b:dd:56:5d:da:f4:ac:
                    c9:a8:be:e5:dd:9c:51:04:c0:0e:0d:8e:4a:8c:cd:
                    27:22:2e:92:34:fa:f7:07:f2:5f:2e:6f:aa:ec:ff:
                    c5:2a:bf:8c:ba:22:47:64:37:51:75:42:b4:4d:a2:
                    44:54:76:29:b8:09:29:42:cb:3c:8d:69:7d:28:d6:
                    ad:c7:84:02:ce:73:52:d1:e8:35:be:e2:8b:1a:54:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6A:1B:41:89:DF:16:45:2B:C6:84:F2:25:47:DF:38:87:2E:54:81
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/965b03cd2c0dcd4a413e8687e00d64d6aa4746e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:97:ad:96:df:5c:bf:02:96:fc:93:66:8b:2d:b5:ca:29:38:
         81:c6:82:5f:65:63:52:ba:ed:76:48:00:9d:ae:04:c1:5d:b6:
         9a:90:62:6a:86:b7:59:d6:6f:b1:fe:bb:ee:87:7a:a3:ee:31:
         b2:53:85:1e:b3:3f:52:07:e2:24:80:79:4a:d9:5e:87:35:52:
         4d:4f:30:55:f6:e6:3c:2c:4f:a3:63:83:b1:9d:cc:5b:5c:61:
         f0:1d:7e:45:0d:c5:64:8a:20:f7:cf:57:cf:d4:be:e6:16:cb:
         86:f8:af:eb:fe:db:d5:cf:fa:87:97:0a:47:a7:56:bf:a1:12:
         07:07:78:f0:c2:23:56:75:ce:a9:59:06:f4:78:f3:48:e7:4d:
         8b:a3:be:da:08:cd:e7:fa:51:42:a7:15:c8:e3:d0:a8:af:7d:
         18:eb:8b:8b:e2:22:41:ec:be:39:13:1c:47:b8:43:4d:b9:92:
         00:49:8a:19:c7:2a:ab:bd:33:1f:5e:59:ce:92:5f:3e:7b:91:
         f1:d8:05:9e:89:2d:14:42:72:62:53:80:a7:20:de:75:27:4c:
         f2:2a:f3:76:ca:79:51:9c:ec:aa:28:b2:d2:8f:a0:11:ae:ed:
         93:e4:80:ab:0e:85:f2:92:b6:ca:8d:1b:cc:de:7a:45:90:5f:
         16:c5:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org