Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d2cfc4a96a63845af8a4d7bb50a8517393a736df.roa
File:                     d2cfc4a96a63845af8a4d7bb50a8517393a736df.roa (raw, json)
Hash identifier:          pYsygh6C+96hb3+keq8uePNLMO/KO3mQLmcjNMNUiR0=
Subject key identifier:   00:6B:7D:DF:4B:02:86:AC:CE:10:B5:BB:3C:61:29:D2:19:69:31:A4
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       088195
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d2cfc4a96a63845af8a4d7bb50a8517393a736df.roa
Signing time:             Sat 04 Jun 2022 04:53:20 +0000
ROA not before:           Sat 04 Jun 2022 03:00:00 +0000
ROA not after:            Sun 04 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557461 (0x88195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun  4 03:00:00 2022 GMT
            Not After : Jun  4 03:00:00 2023 GMT
        Subject: CN=d2cfc4a96a63845af8a4d7bb50a8517393a736df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:c4:7f:b6:96:07:47:47:08:c6:4d:8b:9e:
                    6e:46:97:83:09:45:d6:5d:22:b9:c4:4c:53:5f:66:
                    2c:f0:e2:71:2b:5c:e0:8d:d1:8a:ae:38:db:dc:e3:
                    e0:97:b4:fc:dc:fc:2d:04:bc:25:56:7c:6e:29:d5:
                    46:7b:b7:dc:f2:b9:de:42:b9:88:08:e9:32:96:4c:
                    f5:1f:46:11:90:5d:b9:1a:e8:42:f9:16:e7:15:22:
                    51:8d:38:e1:b0:fd:bc:71:ab:cd:ac:ad:ca:d6:4d:
                    6d:f0:d3:ab:88:8a:e5:76:14:38:11:eb:72:44:e9:
                    c8:02:42:0a:f5:6d:28:af:ca:5c:62:52:2b:a2:4d:
                    d2:e0:af:34:7d:1e:f5:04:35:c5:05:d4:48:08:4d:
                    08:78:26:62:95:c2:b1:6b:73:88:f6:b1:fc:d5:05:
                    f0:ba:2f:49:a7:66:7b:b2:d9:2e:25:ed:81:d9:93:
                    49:43:53:45:25:67:b1:e6:54:50:93:63:e8:4b:9b:
                    13:dc:8f:73:25:44:47:06:f2:c9:5b:b4:a4:0d:a7:
                    a9:03:2b:3c:20:3f:67:a0:c4:21:27:f0:ff:bc:08:
                    fb:1d:06:c9:94:25:48:de:83:ef:4e:e3:dc:39:8c:
                    ed:8d:3a:56:17:e8:71:0f:67:81:08:68:38:c5:03:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6B:7D:DF:4B:02:86:AC:CE:10:B5:BB:3C:61:29:D2:19:69:31:A4
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d2cfc4a96a63845af8a4d7bb50a8517393a736df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:d3:55:6a:b0:e2:7f:ce:05:ee:b0:2d:fd:c0:e0:1f:a8:
         c7:62:6f:ef:46:e5:5b:00:0f:42:86:0d:ac:2a:09:3b:35:00:
         65:f5:48:52:59:cc:da:d0:7a:ed:82:b4:89:79:3f:79:78:da:
         ca:82:f5:65:3d:02:75:03:13:b7:22:bc:0b:14:a8:8b:90:b1:
         4a:0b:c1:69:22:01:6b:e4:05:db:77:e5:e3:2d:c8:68:4f:ae:
         68:0e:7b:3a:af:d4:16:44:f6:bc:75:8b:d6:81:7a:97:d1:32:
         2e:01:28:48:a6:fe:38:47:79:67:07:93:ed:95:82:45:cc:b2:
         b6:97:99:65:41:7a:a2:fa:90:ed:11:3a:b4:0b:b2:c7:04:c7:
         ca:02:68:75:64:af:ad:15:62:f2:2a:34:19:05:f6:bb:d7:db:
         a4:c2:ec:d3:b4:cb:28:63:6c:33:79:29:c8:8b:0f:7c:fb:ce:
         72:aa:18:bc:73:34:2e:08:2b:9c:3c:9e:e5:ba:50:a1:08:fa:
         ee:f0:76:a9:56:e4:2f:9a:20:ea:33:76:a4:0a:cc:28:bd:99:
         47:05:bf:8c:4c:90:22:2a:a0:71:92:ed:d9:bd:28:1f:1d:f1:
         a2:e1:cd:f2:2b:4a:aa:da:8c:43:70:cd:59:f9:18:9e:2d:37:
         46:81:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org