Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e7b9bff32ef51e6ab16c89b06396a907dd9d7b13.roa
File:                     e7b9bff32ef51e6ab16c89b06396a907dd9d7b13.roa (raw, json)
Hash identifier:          lBwiht0j/g9sPvX7FsvOESkAO0M/O1TbjDRvh85fEEQ=
Subject key identifier:   23:E1:D4:8E:33:08:5E:F6:9D:13:30:ED:87:63:94:DE:77:83:30:9A
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0CBE62
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e7b9bff32ef51e6ab16c89b06396a907dd9d7b13.roa
Signing time:             Fri 09 Sep 2022 04:08:47 +0000
ROA not before:           Fri 09 Sep 2022 03:00:00 +0000
ROA not after:            Sat 09 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835170 (0xcbe62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep  9 03:00:00 2022 GMT
            Not After : Sep  9 03:00:00 2023 GMT
        Subject: CN=e7b9bff32ef51e6ab16c89b06396a907dd9d7b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:9b:56:a2:b7:b6:70:6f:07:06:24:c7:b4:
                    58:5a:e5:4f:22:da:9c:87:0b:c9:99:c3:39:ba:fa:
                    fc:a0:f1:3a:4d:1f:56:8d:c8:5f:e1:cd:09:bc:15:
                    c6:46:d7:55:eb:22:8a:46:c9:ac:70:4b:a9:76:9f:
                    01:0a:1a:0a:3e:b0:09:93:ba:5b:ce:6c:a3:c8:74:
                    cc:1e:08:a3:0b:7d:8e:7a:05:84:c4:ca:14:f0:d6:
                    0b:c7:72:c0:7b:99:d8:e8:b9:7e:ed:89:e0:65:db:
                    cf:91:99:3d:38:ee:9e:f8:fe:20:6d:3a:42:4c:cf:
                    74:a4:e5:82:ac:b7:ff:cb:d2:04:05:6a:31:aa:e2:
                    33:00:b2:66:0f:91:1a:85:16:19:73:a0:21:dd:8c:
                    01:db:0f:13:82:93:61:c9:e6:7d:2d:12:f1:0c:9d:
                    cc:ee:37:79:9e:c8:e2:b1:f3:40:87:dd:c6:2c:ee:
                    73:6e:e2:7e:60:ec:56:ea:78:c2:e6:2e:99:19:8c:
                    5b:ed:23:1a:c6:af:37:48:1e:9b:f8:ca:81:92:b5:
                    17:67:47:2d:d1:a9:ed:02:93:5c:1a:86:4d:28:4c:
                    1e:0f:80:8a:f2:72:2f:0c:ae:77:4c:79:f9:f0:9c:
                    04:c3:7d:b6:2c:56:a9:13:de:c8:83:39:64:9e:c3:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E1:D4:8E:33:08:5E:F6:9D:13:30:ED:87:63:94:DE:77:83:30:9A
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e7b9bff32ef51e6ab16c89b06396a907dd9d7b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:dc:89:bb:af:4b:ee:92:b5:bf:f9:54:db:f6:58:ed:c4:
         ca:f6:1b:2b:17:84:fe:a2:06:9e:6d:a2:bd:ac:43:14:21:ee:
         ad:63:74:2e:8e:9b:a5:42:3d:dc:36:6b:d7:b4:ce:bc:81:b3:
         fc:5c:9d:36:a4:04:8b:63:3a:81:24:9d:45:bb:29:32:bb:a0:
         90:a0:67:ad:d6:78:1f:a4:de:c1:c8:ba:f3:e2:2c:f1:c5:70:
         38:dc:83:52:a3:60:50:ed:7d:11:75:98:9d:97:5c:32:f9:48:
         ac:88:9c:36:81:3e:f5:0b:44:1c:81:88:6e:60:c8:72:74:a8:
         57:1f:26:df:1a:96:b2:20:55:a1:fd:91:cf:87:ae:2c:d2:a1:
         bc:ef:7e:37:ce:2f:d2:11:a4:39:9d:b7:44:c4:2c:1e:6e:66:
         f4:ad:3b:50:06:21:c1:30:6f:4d:01:ff:a1:59:c8:bc:7a:23:
         de:d7:84:d4:bc:d3:e5:7e:17:8c:87:64:02:f9:51:e2:2a:c3:
         97:99:bb:38:5d:a4:63:d2:7a:cc:a6:a7:df:a3:37:13:ae:c1:
         9c:ac:30:c4:8f:f4:33:8f:6e:cb:c4:34:ab:12:47:25:a5:7a:
         b3:4e:19:00:84:76:17:aa:83:6d:7d:7a:e0:d7:68:77:fe:46:
         1e:0a:37:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org