Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d4519b17b10bc5c51922531424186890d7ef7025.roa
File:                     d4519b17b10bc5c51922531424186890d7ef7025.roa (raw, json)
Hash identifier:          M1Z9KZt9acvVMPSWsfA641ZzbKEDM2Gngz6HNuWSBg4=
Subject key identifier:   6B:FF:38:B4:79:27:6B:B2:38:1C:B0:E9:FC:20:53:C5:36:ED:02:0C
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0E05DC
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d4519b17b10bc5c51922531424186890d7ef7025.roa
Signing time:             Thu 06 Oct 2022 05:05:03 +0000
ROA not before:           Thu 06 Oct 2022 03:00:00 +0000
ROA not after:            Fri 06 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919004 (0xe05dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct  6 03:00:00 2022 GMT
            Not After : Oct  6 03:00:00 2023 GMT
        Subject: CN=d4519b17b10bc5c51922531424186890d7ef7025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:ce:bd:57:90:4c:41:b0:62:4c:ed:a7:b3:
                    52:b0:95:13:c2:f8:5f:c0:ee:08:e2:5b:bd:05:af:
                    42:23:bc:74:6f:9e:e8:39:4b:16:e3:a3:05:d0:8d:
                    ec:94:7e:1b:e5:43:40:85:f8:28:fa:73:39:9d:6c:
                    17:78:30:dd:c1:18:0d:17:41:dc:9e:fe:05:1e:2e:
                    98:e7:96:53:df:aa:55:10:32:f9:e8:a4:8e:4f:ec:
                    2d:63:19:b2:11:a3:53:82:db:16:13:b1:68:3a:9c:
                    e1:8b:2a:de:c7:49:ce:8a:05:30:ce:dd:3d:43:1f:
                    89:6d:96:53:80:b9:ff:04:cb:d7:5c:90:fe:c1:24:
                    1e:29:d1:a7:08:1b:66:d9:1a:cc:02:69:69:52:dd:
                    07:db:cb:be:af:a3:dc:89:f1:27:10:7c:38:2f:75:
                    94:da:09:7f:10:d2:1b:47:59:f2:a4:62:3b:07:9c:
                    8a:de:d4:26:29:09:58:6d:4c:65:c8:a6:4f:c5:31:
                    7d:13:d7:35:f2:f0:8f:44:9d:85:9c:2a:fe:7d:87:
                    e2:bb:cb:7c:cf:c1:c2:cf:78:16:fa:67:32:a3:c4:
                    e8:99:1f:dd:1a:73:e1:ad:e7:58:95:64:c9:d0:e7:
                    81:4c:3a:ce:c3:00:ec:e3:a5:aa:0d:86:ed:13:23:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FF:38:B4:79:27:6B:B2:38:1C:B0:E9:FC:20:53:C5:36:ED:02:0C
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d4519b17b10bc5c51922531424186890d7ef7025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:05:ee:2d:e6:8c:ca:ce:fc:d1:7a:17:4b:b4:0e:78:5e:81:
         a4:0a:0b:96:11:e5:61:eb:c9:e9:b7:4a:cf:ae:a7:6e:75:c9:
         17:ab:2f:a3:62:6a:86:33:8d:37:bf:ff:6b:57:14:59:a1:33:
         ea:2a:46:de:23:ff:bb:1c:7b:1f:fd:1e:b4:70:d1:4d:92:0e:
         d4:f8:9a:02:00:1f:21:72:ce:11:15:ed:ed:ad:22:48:42:fd:
         13:aa:69:bf:4b:4f:40:95:cd:31:69:13:e9:ea:ce:f4:6d:55:
         a8:fe:74:b2:6a:52:14:83:e3:5f:c3:02:1c:83:98:2b:83:9d:
         79:42:36:73:f1:10:30:67:8a:1b:66:0a:7b:ff:2e:9b:48:ad:
         78:4a:f7:37:79:42:8b:8b:31:5e:66:72:2d:ef:13:32:58:c1:
         16:7c:0f:c3:75:8a:f4:c7:47:49:be:ad:36:df:8d:2e:d6:60:
         c8:b3:81:3e:f6:d2:ec:b1:df:93:b8:90:b4:56:b6:98:0f:10:
         8e:e0:97:da:58:17:21:da:8b:3f:c9:44:61:f5:29:c6:61:69:
         99:b1:ce:d6:35:02:5a:2d:7a:6c:f2:0e:df:4f:e5:20:cb:33:
         97:dd:0b:f8:e3:bd:8b:eb:9f:d5:26:e2:bc:6e:c1:1c:2e:d7:
         02:61:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org