Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/b754e260b4ca5828736ee105497f92519d9d4e92.roa
File:                     b754e260b4ca5828736ee105497f92519d9d4e92.roa (raw, json)
Hash identifier:          iRJ2cX5EB20FFPKTsxuzgnKy1GR4fn6oeYwpUhsTm1M=
Subject key identifier:   7C:31:E2:A0:35:36:A1:1A:C4:C1:CD:09:40:3B:CE:5D:CC:8D:A4:E0
Certificate issuer:       /CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
Certificate serial:       05FC91
Authority key identifier: B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/b754e260b4ca5828736ee105497f92519d9d4e92.roa
Signing time:             Mon 05 Dec 2022 21:50:33 +0000
ROA not before:           Sun 04 Dec 2022 21:50:33 +0000
ROA not after:            Sun 05 Dec 2027 21:50:33 +0000
asID:                     262589
IP address blocks:        2801:1d:8800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392337 (0x5fc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
        Validity
            Not Before: Dec  4 21:50:33 2022 GMT
            Not After : Dec  5 21:50:33 2027 GMT
        Subject: CN=b754e260b4ca5828736ee105497f92519d9d4e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:bd:1e:ac:64:66:58:6b:26:47:32:42:01:
                    a5:3f:cd:78:e7:e4:49:30:0b:3c:b1:b5:dc:bc:71:
                    1b:38:43:5a:51:30:f1:b5:30:01:5d:35:19:dc:3e:
                    90:73:b8:9e:e8:f5:dd:f2:1c:9c:3f:77:89:71:15:
                    11:88:f9:b3:ab:19:a2:db:63:05:a0:cc:25:33:9a:
                    e0:b4:79:77:01:4a:29:51:b1:a4:6e:22:cb:31:41:
                    6b:e5:c2:c6:d5:4f:ab:d7:5b:00:9b:97:27:60:fa:
                    b4:c4:3c:7a:7a:26:4a:39:ad:71:50:bf:14:0c:ae:
                    ae:18:c6:37:c3:d6:e5:64:23:75:eb:54:de:35:1d:
                    c3:19:9a:9f:06:16:ab:ec:45:9b:67:41:35:f7:b5:
                    1e:c4:75:b9:88:d2:5e:0f:64:78:77:b2:98:fc:05:
                    8f:65:98:90:20:53:b1:a0:7e:32:51:01:64:98:d6:
                    af:71:20:c1:da:7c:01:9e:78:5f:90:79:f8:21:4a:
                    38:2d:02:53:cb:22:5d:c6:55:46:51:c4:10:97:4e:
                    dc:02:60:0d:85:bd:46:ea:1b:15:5a:ef:2b:55:c9:
                    c6:b7:cf:03:75:c9:c7:e6:e6:d6:ca:92:7b:7b:96:
                    12:11:b2:05:4f:5f:11:96:db:49:78:25:4b:e2:b2:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:31:E2:A0:35:36:A1:1A:C4:C1:CD:09:40:3B:CE:5D:CC:8D:A4:E0
            X509v3 Authority Key Identifier:
                keyid:B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/b754e260b4ca5828736ee105497f92519d9d4e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/fc6cb1153f9d2823a345e050aa08a59869c1972e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:d1:41:0d:b2:3b:8c:16:cf:f3:cf:a9:c4:23:f3:cb:d3:7e:
         f7:15:68:03:63:95:fa:e4:71:7a:1a:c6:69:62:c4:49:84:dd:
         8d:3c:6d:50:be:23:c7:00:ed:c3:e1:b3:6d:6d:d0:c1:cf:01:
         f7:1b:05:1a:6d:b9:54:af:21:f4:4b:11:46:4e:5d:cb:43:22:
         c4:aa:4e:29:53:51:2b:b3:7a:d4:3f:49:33:95:ae:d1:20:99:
         15:ef:25:d5:ad:61:85:8a:5f:c6:12:6d:bc:41:1c:23:58:e5:
         34:d5:f4:a9:56:22:5e:1e:86:eb:d1:c8:56:a9:66:86:e2:f2:
         63:00:da:85:11:bf:5a:03:19:09:e1:02:7f:c2:d7:fa:43:84:
         9f:74:c4:fd:3c:13:0e:9c:f3:6d:30:f6:f2:5e:eb:91:33:4a:
         86:e1:da:20:77:9c:bb:a8:ac:d0:96:4d:84:18:62:ff:e1:23:
         5b:f8:c5:1f:63:fd:64:a4:6c:3b:7f:5e:7b:b1:7c:81:27:29:
         80:e2:d0:73:f5:96:3f:6c:83:92:a9:cf:47:39:2e:11:65:42:
         8c:96:15:45:b5:e6:99:98:2c:ab:17:1f:e5:3c:60:f2:dd:c4:
         09:ff:61:28:ce:c2:06:2a:b5:2f:2a:f5:71:10:ab:a1:d3:82:
         69:d8:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org