Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a64a56e0edcd15c2c0e70334eebf9a8e2d8d1346.roa
File:                     a64a56e0edcd15c2c0e70334eebf9a8e2d8d1346.roa (raw, json)
Hash identifier:          QXojzpXr58xru2SXlMaJR7vJ2VsInSPDAFvzr3midyk=
Subject key identifier:   1D:04:D7:A4:CE:47:6D:58:46:41:B4:E9:10:62:62:63:62:98:9D:E4
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       070C1F
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a64a56e0edcd15c2c0e70334eebf9a8e2d8d1346.roa
Signing time:             Tue 03 May 2022 00:21:34 +0000
ROA not before:           Tue 03 May 2022 03:00:00 +0000
ROA not after:            Wed 03 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461855 (0x70c1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May  3 03:00:00 2022 GMT
            Not After : May  3 03:00:00 2023 GMT
        Subject: CN=a64a56e0edcd15c2c0e70334eebf9a8e2d8d1346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:63:01:63:04:a6:25:57:d0:10:28:e5:da:
                    6f:0c:9a:8d:bb:c5:60:72:ce:3e:fd:9b:e0:b7:fc:
                    39:52:8f:73:45:c2:49:38:1e:df:b2:16:bf:58:40:
                    1f:39:76:fb:3f:cf:65:bc:c1:0f:1f:a3:03:b1:1d:
                    68:91:be:6a:fe:15:da:9c:d6:44:42:e2:65:d1:ae:
                    dd:37:15:99:31:57:43:93:51:6e:4d:65:04:ca:0a:
                    43:3e:8f:0f:7a:8c:98:5c:c2:96:bb:11:cd:3a:13:
                    a1:0b:b5:82:71:b7:d3:b0:2e:a4:95:bd:bd:fc:f5:
                    e3:1a:ce:8a:99:2d:49:69:88:9c:75:ce:4f:91:9e:
                    0b:22:fb:ba:15:37:f4:f0:3d:df:25:9b:45:bb:4a:
                    27:e6:7e:75:1a:66:bd:2b:84:6a:60:ed:a2:a5:f9:
                    d3:b9:87:98:cd:ce:91:1e:be:6e:ff:79:8a:ad:46:
                    b5:20:c0:a3:02:1a:58:b8:83:c6:4c:60:e6:33:8e:
                    3a:5a:4a:a2:48:0e:3d:81:be:51:8b:3a:8a:0f:1d:
                    0c:32:b5:a6:0d:95:ba:5a:9f:76:d3:49:aa:14:f0:
                    97:4a:28:0a:07:fd:14:db:54:cf:9e:27:7e:02:41:
                    55:60:05:6c:e9:9c:39:4e:0d:73:fb:ae:a4:11:9f:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:04:D7:A4:CE:47:6D:58:46:41:B4:E9:10:62:62:63:62:98:9D:E4
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a64a56e0edcd15c2c0e70334eebf9a8e2d8d1346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:ca:06:71:80:33:6c:f1:ff:ed:c6:f7:7b:59:9d:20:2c:26:
         8c:10:73:78:82:36:19:3c:85:eb:6a:0e:3c:76:58:5c:c8:67:
         99:44:4a:3f:7f:c9:52:33:04:ac:94:e3:54:19:b3:81:e2:7e:
         ff:57:71:23:9a:f7:1d:36:c7:f7:45:82:4a:33:e7:a6:ff:5f:
         2e:60:8a:32:d5:93:d0:dd:93:d7:fb:1b:97:53:8b:7f:b5:b0:
         49:59:00:26:7a:b4:65:5f:18:a6:f9:fa:cd:b3:e4:7f:f2:aa:
         21:7c:4f:5a:2a:2c:45:23:d6:09:fe:22:88:be:84:c9:2e:70:
         b6:a6:19:55:ca:c3:74:9c:8d:fd:18:ba:a6:15:ab:12:7e:54:
         1c:b2:7e:90:8c:7d:21:f4:c2:74:d6:5e:39:b9:a0:0e:7d:01:
         11:a5:4f:41:a4:10:01:c2:28:3f:02:a5:41:a7:95:d1:1b:ed:
         91:19:02:89:c5:34:88:36:2a:6e:16:62:13:6c:02:79:9b:e5:
         62:fb:0e:1f:ed:91:27:0f:f7:13:d4:b4:ac:fd:2c:7b:3b:0a:
         2f:f1:12:14:0d:79:e2:08:b2:2a:64:e3:65:04:8b:9c:a7:ae:
         ab:44:d6:5b:da:fd:6c:ff:11:85:fa:55:df:ba:a5:03:40:86:
         1f:1a:86:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org