Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/13f7f7f86cc80f116fdb348ec8e68b5d53971423.roa
File:                     13f7f7f86cc80f116fdb348ec8e68b5d53971423.roa (raw, json)
Hash identifier:          4BFFfXP3KfCPlNapBcrG2+I+cQym5qUNToRFP09T9i8=
Subject key identifier:   2F:F6:6D:89:33:05:AC:46:21:6D:14:2C:3C:7C:A8:CF:3B:AC:11:35
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       243098
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/13f7f7f86cc80f116fdb348ec8e68b5d53971423.roa
Signing time:             Fri 09 Jun 2023 20:25:44 +0000
ROA not before:           Thu 08 Jun 2023 20:25:44 +0000
ROA not after:            Mon 09 Jun 2025 20:25:44 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371736 (0x243098)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jun  8 20:25:44 2023 GMT
            Not After : Jun  9 20:25:44 2025 GMT
        Subject: CN=13f7f7f86cc80f116fdb348ec8e68b5d53971423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:01:b8:a9:0d:e5:f1:91:50:2d:75:75:28:
                    0c:ce:d4:94:2f:61:5e:9c:35:66:56:58:69:9d:84:
                    f9:87:0e:06:02:a3:51:bf:95:7f:6e:c1:f1:98:0e:
                    57:96:1c:7b:06:8b:97:56:68:48:12:5d:f8:72:ac:
                    d5:fe:ed:ca:21:60:94:0d:6b:58:b5:38:00:ba:99:
                    73:50:ff:39:38:d3:be:22:d4:33:b7:c4:ba:29:82:
                    92:5b:2e:5d:41:ba:02:cd:84:d2:81:2c:47:40:ee:
                    1b:62:9a:7f:17:5c:06:49:36:c5:52:b7:27:48:22:
                    ae:62:3e:da:5a:5b:80:93:1b:4f:e1:1b:ab:74:c6:
                    ad:20:40:a3:07:54:ac:b1:37:d7:9e:df:71:dc:0c:
                    3a:b1:b1:7f:16:a1:03:32:cf:eb:48:10:3c:33:fd:
                    71:aa:f7:72:ac:4b:2e:b7:76:93:11:c4:4c:71:69:
                    2c:eb:6c:1a:59:c0:87:62:0c:d0:8c:a9:05:87:dd:
                    e1:84:39:e0:2d:08:dd:ad:a0:a0:d8:b1:84:6e:91:
                    22:54:88:b5:c5:7f:23:59:82:a1:ee:da:de:07:3e:
                    e2:d9:8e:41:b5:57:a0:79:4e:d9:4f:d0:1e:f7:c6:
                    6a:f7:87:d9:b4:15:a3:02:32:4c:79:f3:18:35:80:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F6:6D:89:33:05:AC:46:21:6D:14:2C:3C:7C:A8:CF:3B:AC:11:35
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/13f7f7f86cc80f116fdb348ec8e68b5d53971423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:45:13:62:ed:99:3d:e7:f8:03:87:11:8e:b2:68:90:a0:
         24:44:5c:9a:d2:13:a1:d3:f0:2d:cd:70:f4:e8:cf:6b:ba:3a:
         0c:cb:64:82:fb:c9:68:bc:48:ba:30:97:da:c6:5d:09:2f:c6:
         a5:a3:a1:f0:41:03:1d:b2:47:34:be:99:3f:cb:34:d2:c3:50:
         fc:ee:be:fa:ec:fb:01:1f:ff:0c:78:40:fd:8a:fc:91:36:b8:
         f3:65:29:b0:d5:bb:3d:c7:6d:d5:69:9a:f7:01:08:0e:bc:3d:
         54:3b:2b:07:db:88:1d:41:10:ce:86:7f:59:52:f9:59:0a:59:
         2d:bc:bc:b5:67:38:68:22:15:49:e4:e3:10:f3:57:bf:4d:31:
         38:94:3a:84:98:f6:57:de:bb:36:ac:a6:56:d3:48:6e:b7:6f:
         73:3f:6d:b9:59:fa:43:32:c9:48:b1:54:51:77:f6:29:78:65:
         fc:58:5d:18:ab:c4:43:84:c6:8d:c1:66:ac:b8:00:71:8a:11:
         df:ae:5c:6d:d9:7c:80:ff:e3:bf:f9:3f:91:37:d0:ca:c3:af:
         bb:79:8f:11:2e:de:83:17:67:74:22:57:2f:4c:fc:71:95:ee:
         1b:f3:f8:21:83:3c:22:99:d0:f8:c1:a8:97:a0:3e:25:1f:21:
         3b:75:20:9d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJDCYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjMwNjA4
MjAyNTQ0WhcNMjUwNjA5MjAyNTQ0WjAzMTEwLwYDVQQDEygxM2Y3ZjdmODZjYzgw
ZjExNmZkYjM0OGVjOGU2OGI1ZDUzOTcxNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnnQBuKkN5fGRUC11dSgMztSUL2FenDVmVlhpnYT5hw4GAqNR
v5V/bsHxmA5Xlhx7BouXVmhIEl34cqzV/u3KIWCUDWtYtTgAuplzUP85ONO+ItQz
t8S6KYKSWy5dQboCzYTSgSxHQO4bYpp/F1wGSTbFUrcnSCKuYj7aWluAkxtP4Rur
dMatIECjB1SssTfXnt9x3Aw6sbF/FqEDMs/rSBA8M/1xqvdyrEsut3aTEcRMcWks
62waWcCHYgzQjKkFh93hhDngLQjdraCg2LGEbpEiVIi1xX8jWYKh7treBz7i2Y5B
tVegeU7ZT9Ae98Zq94fZtBWjAjJMefMYNYA7/QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFC/2bYkzBaxGIW0ULDx8qM87rBE1MB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzEzZjdmN2Y4NmNjODBmMTE2ZmRiMzQ4ZWM4ZTY4YjVkNTM5NzE0MjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCABE8dwIDANBgkqhkiG9w0BAQsFAAOCAQEAaN1FE2LtmT3n
+AOHEY6yaJCgJERcmtITodPwLc1w9OjPa7o6DMtkgvvJaLxIujCX2sZdCS/GpaOh
8EEDHbJHNL6ZP8s00sNQ/O6++uz7AR//DHhA/Yr8kTa482UpsNW7Pcdt1Wma9wEI
Drw9VDsrB9uIHUEQzoZ/WVL5WQpZLby8tWc4aCIVSeTjEPNXv00xOJQ6hJj2V967
NqymVtNIbrdvcz9tuVn6QzLJSLFUUXf2KXhl/FhdGKvEQ4TGjcFmrLgAcYoR365c
bdl8gP/jv/k/kTfQysOvu3mPES7egxdndCJXL0z8cZXuG/P4IYM8IpnQ+MGol6A+
JR8hO3UgnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org