Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e8eb543e88800c46aca8f6e47229a1860b598905.roa
File:                     e8eb543e88800c46aca8f6e47229a1860b598905.roa (raw, json)
Hash identifier:          L+Lg4LVF/of+pmrBQT7z57vL2iR7qdVgKEE8eKenbYA=
Subject key identifier:   1A:46:CA:44:5A:FB:49:E2:B4:E9:1B:70:99:D3:C5:8B:23:6E:6D:9E
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       05B52C
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e8eb543e88800c46aca8f6e47229a1860b598905.roa
Signing time:             Sun 03 Apr 2022 00:37:03 +0000
ROA not before:           Sun 03 Apr 2022 03:00:00 +0000
ROA not after:            Mon 03 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374060 (0x5b52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr  3 03:00:00 2022 GMT
            Not After : Apr  3 03:00:00 2023 GMT
        Subject: CN=e8eb543e88800c46aca8f6e47229a1860b598905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:c8:17:60:16:e7:ce:ea:c5:fa:79:81:a4:
                    83:ed:c8:fb:73:b5:7c:cb:04:18:71:c3:51:32:76:
                    a4:29:fe:8e:89:e4:31:c9:1e:f9:7a:33:e3:4b:1e:
                    6f:18:3c:34:6d:df:e5:91:fc:ee:fd:9c:53:02:18:
                    70:51:87:95:82:66:86:aa:01:58:b0:58:02:27:d3:
                    bd:d3:2c:0d:e1:b5:03:54:c6:11:b9:73:f6:32:d8:
                    75:f7:1f:20:11:6f:14:36:dc:63:2e:3e:97:e0:92:
                    3e:7e:03:f9:84:f0:f4:72:b2:96:ed:77:9e:c2:42:
                    f3:af:6d:6c:e0:f0:ae:09:27:4c:ae:69:65:31:a0:
                    72:66:a4:69:fc:df:23:5b:dc:25:03:07:ae:21:49:
                    81:3b:0b:98:a3:55:17:7a:ed:5b:60:25:07:d1:76:
                    ed:4a:93:e6:a3:c0:2a:c0:82:49:76:ce:84:11:18:
                    9e:5c:bb:72:59:74:a0:b5:6d:ad:0e:13:0f:5e:56:
                    d4:4f:59:98:d5:aa:83:78:1c:0e:79:d9:50:b5:11:
                    6b:5a:ef:af:d1:90:41:4a:4d:4f:6d:49:3d:e6:a4:
                    e8:a0:b9:10:22:d7:24:4d:8a:0a:b6:37:55:df:7c:
                    5f:5e:36:de:33:76:f8:ff:bf:f2:e8:02:c9:1b:ee:
                    b9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:46:CA:44:5A:FB:49:E2:B4:E9:1B:70:99:D3:C5:8B:23:6E:6D:9E
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e8eb543e88800c46aca8f6e47229a1860b598905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:6a:4f:48:32:85:38:0f:50:85:39:3b:2b:17:04:a2:f4:f0:
         3d:61:79:b3:3d:65:19:33:f1:43:e7:78:0d:27:bb:41:13:32:
         b6:36:08:49:dc:fd:1b:32:60:01:fb:e1:09:63:9e:2c:c4:48:
         c2:61:58:14:9c:70:61:c2:52:88:c0:9f:09:d8:8c:6c:24:53:
         45:b8:88:24:a2:f1:80:05:97:00:5b:e8:46:70:55:d7:1b:74:
         60:1b:79:34:f9:89:2b:e9:de:7b:94:4a:47:d9:9b:3f:16:18:
         1d:02:92:92:7b:36:c6:10:64:7b:ed:a1:45:74:38:f9:7b:db:
         45:23:06:92:ab:54:42:d0:32:0b:6e:80:67:a3:dd:4b:f0:b6:
         42:e7:6a:70:1d:18:56:c3:26:be:09:29:5a:16:ef:2d:40:71:
         e5:2e:be:01:ba:4a:66:53:82:c9:6d:25:c9:45:8e:49:d1:9b:
         6f:ad:6a:a8:4d:1a:4d:ff:8d:10:f7:a8:25:2c:b0:c7:76:90:
         89:7e:8e:61:aa:f6:5e:db:b7:2f:7e:6e:22:5c:58:b5:71:a1:
         4b:2b:95:24:d7:fe:42:05:b0:79:a0:17:10:6d:76:fa:c2:cb:
         fc:34:cd:d9:8b:b7:67:d9:3a:26:2d:80:2b:14:ed:cd:80:95:
         5f:6e:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org