Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/448064a4997fb54374163e68ffa1859cfe1f0097.roa
File:                     448064a4997fb54374163e68ffa1859cfe1f0097.roa (raw, json)
Hash identifier:          m9077GcPmLWPKXwcEUCfkPagXblZy+NEajkNkH+zfMI=
Subject key identifier:   38:64:4A:34:75:D4:9C:08:8C:E6:61:9E:6F:AD:9F:06:70:96:C6:A8
Certificate issuer:       /CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
Certificate serial:       09C224
Authority key identifier: B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/448064a4997fb54374163e68ffa1859cfe1f0097.roa
Signing time:             Wed 10 May 2023 20:26:24 +0000
ROA not before:           Tue 09 May 2023 20:26:24 +0000
ROA not after:            Sat 10 May 2025 20:26:24 +0000
asID:                     262589
IP address blocks:        2801:1d:8800::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639524 (0x9c224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
        Validity
            Not Before: May  9 20:26:24 2023 GMT
            Not After : May 10 20:26:24 2025 GMT
        Subject: CN=448064a4997fb54374163e68ffa1859cfe1f0097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:da:4f:8d:dd:3b:cd:34:41:57:a3:4f:9f:ac:
                    6f:77:97:db:70:4b:d7:a2:5c:33:51:48:50:e9:f7:
                    b7:01:72:23:41:db:f2:b7:6a:e0:ab:9f:1f:f6:32:
                    c3:a8:d0:5d:43:9a:4f:1c:f1:39:35:a2:f3:38:aa:
                    90:ec:69:65:c8:d0:f5:bf:0d:61:97:2d:36:31:27:
                    c5:d5:b8:26:9c:4f:b4:2a:e6:09:8f:00:ff:6d:58:
                    47:a0:16:d1:b6:91:97:6b:40:e3:af:fc:8d:8b:19:
                    d0:fe:d5:b2:c2:8b:c1:5f:63:48:d2:43:92:a3:5c:
                    5c:84:37:af:6f:53:33:8b:cb:f9:24:fb:9b:e8:a7:
                    0b:2d:61:63:ea:71:b0:a9:dd:9e:fc:23:bd:a9:35:
                    d1:d2:f7:b9:40:50:18:07:ca:12:6a:ce:bc:4b:e7:
                    35:c6:12:f6:41:05:ce:f5:b3:aa:bc:ae:a1:1a:9a:
                    9f:01:a3:c4:57:56:bf:c8:52:e8:ef:61:19:50:2f:
                    67:3f:6d:74:4e:bc:e3:e8:15:af:8c:44:72:12:19:
                    94:64:58:cf:11:62:b6:bb:7a:fa:73:4c:27:e4:2a:
                    c9:17:f5:eb:f7:a2:7d:bb:d8:32:fa:92:d1:7e:61:
                    4b:a2:b6:3f:b0:8e:fe:17:35:43:9c:7b:03:e5:49:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:64:4A:34:75:D4:9C:08:8C:E6:61:9E:6F:AD:9F:06:70:96:C6:A8
            X509v3 Authority Key Identifier:
                keyid:B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/448064a4997fb54374163e68ffa1859cfe1f0097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/fc6cb1153f9d2823a345e050aa08a59869c1972e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8800::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:29:68:88:77:5f:3c:4e:c5:83:f7:0b:3f:71:e2:15:d0:f1:
         c7:0e:f7:6b:c9:ae:53:3c:21:cf:6f:22:4d:d8:08:b2:5d:a8:
         eb:02:6b:fd:fa:d1:2a:c2:e1:bb:00:31:a2:e3:0c:c6:cd:2b:
         f5:d1:fa:89:b8:87:5d:b8:e0:c5:8e:57:25:29:28:43:4a:e0:
         de:1f:32:cd:b9:66:ae:d0:70:7f:1c:6f:b5:ad:2b:0d:5c:de:
         e5:e8:c3:86:09:86:e1:ab:4d:b6:8b:25:fb:8e:e2:06:ea:88:
         33:30:e1:fb:ce:b9:bf:6c:2e:cf:c6:eb:3d:58:f5:ea:55:bf:
         8f:e2:66:1a:61:cf:9e:b0:67:5e:57:25:58:1c:04:d0:61:57:
         bc:c9:82:03:3f:44:73:cf:ab:e3:10:bf:f2:f8:df:1d:0b:e2:
         4d:d0:aa:21:0c:47:c0:19:2f:aa:8b:cd:4d:3d:8d:87:cd:7b:
         87:10:3a:6b:8c:de:aa:72:e4:59:0c:f7:bd:03:a9:4c:a5:f5:
         e8:8c:c5:2b:a6:b3:fd:7c:cd:16:fd:13:df:36:7e:27:2c:24:
         11:1c:e8:84:9f:c8:e5:c1:92:09:15:ab:3d:8b:76:a0:a0:2f:
         f4:64:dd:ba:a6:cf:c6:f9:5c:99:fc:df:ff:30:8f:43:27:ed:
         a9:58:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org