Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e441a1bf1b5d5820cdbf01eb41b31b0d32a88025.roa
File:                     e441a1bf1b5d5820cdbf01eb41b31b0d32a88025.roa (raw, json)
Hash identifier:          IC0ZQ+SyX/njnwASqLgnZa6OY3mvq4+ziuK1/sXHgdg=
Subject key identifier:   23:38:BC:E5:82:4B:3B:5F:87:5D:D2:85:86:4B:13:1B:DA:B2:F7:F3
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       09D76A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e441a1bf1b5d5820cdbf01eb41b31b0d32a88025.roa
Signing time:             Wed 06 Jul 2022 01:35:41 +0000
ROA not before:           Wed 06 Jul 2022 03:00:00 +0000
ROA not after:            Thu 06 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644970 (0x9d76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul  6 03:00:00 2022 GMT
            Not After : Jul  6 03:00:00 2023 GMT
        Subject: CN=e441a1bf1b5d5820cdbf01eb41b31b0d32a88025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:41:8d:16:9a:b5:e3:77:22:ef:6d:34:d2:
                    0a:47:6c:d5:d1:a4:85:42:cc:b5:95:15:ca:78:8d:
                    ca:40:62:3a:47:57:c0:23:16:86:df:5b:ff:ef:f9:
                    f6:4c:c2:52:9a:0e:51:2e:3d:bc:76:58:fd:8c:db:
                    1d:2e:79:be:8b:25:c2:51:9e:e3:18:0d:47:3c:d9:
                    07:9b:5f:f0:f9:86:81:d9:0e:c7:4c:0e:8b:7c:bd:
                    a4:01:a0:7a:51:aa:83:00:42:43:fd:9f:d8:34:3c:
                    5d:bc:e9:6c:2e:c1:14:b5:dc:32:28:10:82:c2:18:
                    59:bf:b8:98:f8:f7:21:b0:00:88:fe:54:e0:64:75:
                    be:b2:d8:14:54:a3:cd:dd:92:1a:9e:b5:dc:5f:1d:
                    bf:3a:90:3e:74:37:94:a7:30:6a:7d:6f:79:4a:9b:
                    d9:1d:1c:2c:9b:6c:02:4b:53:ae:56:3a:f8:3b:31:
                    b8:42:59:13:5b:f0:f8:bf:08:e6:d4:29:d7:32:bf:
                    e3:b8:ce:e7:35:b2:80:1a:4e:26:9e:90:a2:2d:df:
                    3a:c7:99:01:6a:fa:00:c1:7b:e5:b9:ff:e7:69:cc:
                    c4:4e:73:63:0e:01:52:bc:04:9d:1f:b3:2a:77:4e:
                    2a:84:e1:b2:d5:5f:ad:c5:cb:ec:e4:33:8f:1b:24:
                    a3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:38:BC:E5:82:4B:3B:5F:87:5D:D2:85:86:4B:13:1B:DA:B2:F7:F3
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e441a1bf1b5d5820cdbf01eb41b31b0d32a88025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:9f:41:08:7a:7a:96:29:e6:3a:a7:c1:70:89:e8:6f:89:10:
         0f:73:80:27:94:3c:f4:bb:07:e2:80:61:cd:a8:5a:d5:7f:f3:
         42:bb:81:66:de:45:ac:fb:be:53:31:30:b9:19:38:50:08:ec:
         81:ac:23:93:60:0c:f4:48:fd:3b:6d:52:8e:45:65:29:e8:11:
         80:62:2f:7b:56:c2:d1:b8:a1:49:48:2f:08:12:3f:12:54:96:
         c5:5b:44:af:aa:b3:e6:bb:c4:82:00:da:17:ec:c7:8f:19:bb:
         6b:5f:b1:a1:9a:44:59:d6:29:55:8d:3c:d0:75:85:ee:0b:c2:
         f3:16:f5:cd:ed:80:69:7a:18:40:89:7c:7b:4b:53:c0:e8:2a:
         2b:e1:0e:c9:6a:6e:7a:36:c1:7d:a6:a2:9a:33:ef:b0:6e:8a:
         cf:9c:89:96:b4:8e:7c:4e:30:d3:ad:9c:82:8b:37:c5:1d:b4:
         da:1e:0a:e4:c5:f4:5f:b7:2a:c7:b5:df:c2:05:cb:c0:84:2f:
         90:7e:bb:8e:5f:03:42:35:d7:27:c3:0c:e5:b3:69:d6:d3:57:
         29:5a:74:03:3a:0e:b5:8f:e6:60:62:d4:03:f3:9f:fa:12:35:
         77:09:17:c3:54:1c:20:60:ad:8a:93:03:55:ac:41:23:2b:ff:
         b0:97:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org