Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2ce70c11dac20e04b35f2c030728864cb4aa7814.roa
File:                     2ce70c11dac20e04b35f2c030728864cb4aa7814.roa (raw, json)
Hash identifier:          hA7y+jIWISTtbabAdO4zvCTpX/djOeZT2D7mPrlXZ7I=
Subject key identifier:   CA:DD:2F:BE:12:72:8E:E5:A5:91:F5:62:92:D4:7D:83:F5:72:58:3D
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       22EC84
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2ce70c11dac20e04b35f2c030728864cb4aa7814.roa
Signing time:             Wed 10 May 2023 23:39:44 +0000
ROA not before:           Tue 09 May 2023 23:39:44 +0000
ROA not after:            Sat 10 May 2025 23:39:44 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288772 (0x22ec84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: May  9 23:39:44 2023 GMT
            Not After : May 10 23:39:44 2025 GMT
        Subject: CN=2ce70c11dac20e04b35f2c030728864cb4aa7814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:98:47:09:89:cc:c9:06:9d:35:18:d3:0c:
                    78:e5:84:e1:f6:44:d8:ca:8f:e7:e1:d4:9f:fc:1f:
                    04:e9:93:ca:fe:08:85:05:38:9b:cd:64:5a:07:64:
                    04:cd:c6:36:af:bf:70:97:d8:57:39:2d:a3:c2:83:
                    40:4e:1e:33:30:e0:cc:e6:c4:06:df:8b:6e:a5:69:
                    e3:35:3b:d8:ac:d1:ea:69:5e:86:c4:e1:4d:a7:fe:
                    12:e7:b8:95:62:8f:ac:6c:ad:55:b7:c3:66:b6:f9:
                    e5:30:35:71:98:21:29:5d:fd:08:3b:62:1b:c9:12:
                    7e:6f:dc:08:1e:7c:0c:3d:91:0c:b2:df:ab:76:13:
                    51:d4:34:e6:cf:a5:ed:0e:22:bf:43:77:55:07:53:
                    e2:08:70:27:14:07:a3:db:54:c8:80:cc:cf:0d:25:
                    9d:9b:90:4d:fd:26:f3:7a:c7:c3:93:57:fa:0f:52:
                    bd:78:55:ef:11:20:b3:7c:10:3b:e1:e2:01:df:8c:
                    ff:d2:fa:db:65:c9:6a:93:49:df:90:cd:8c:55:c1:
                    ce:85:e5:01:9d:9e:77:18:81:75:a9:6b:ef:89:75:
                    3d:17:53:25:b0:32:7b:75:d2:55:d1:3d:24:97:3a:
                    ee:9b:da:38:ea:74:47:96:7a:de:b4:54:54:83:bc:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:2F:BE:12:72:8E:E5:A5:91:F5:62:92:D4:7D:83:F5:72:58:3D
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2ce70c11dac20e04b35f2c030728864cb4aa7814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:ad:30:f5:36:7e:91:12:1d:e2:dd:6a:54:59:63:82:4e:
         c5:ee:6b:f4:42:32:3b:56:ba:28:20:27:46:68:08:e8:ac:4a:
         88:4f:31:10:3f:a6:55:48:9f:a8:bf:1a:cb:98:6b:13:1c:33:
         4b:1c:f2:a0:9f:8a:a6:5e:38:b4:34:64:7d:aa:ff:63:83:b1:
         05:4d:94:e3:17:be:92:0c:4b:09:6a:a7:4e:98:b3:26:8c:74:
         85:c0:96:b1:cc:b1:5a:45:79:10:8f:b9:19:78:53:3c:ea:60:
         d0:f7:b2:bb:26:fd:ad:ca:49:ea:e7:d5:d7:08:8b:aa:6b:35:
         b2:4b:70:dd:4e:f7:42:37:00:3d:85:41:8e:c9:4e:c8:70:98:
         99:fe:0a:98:4e:70:f9:78:a9:23:9e:b0:5b:4e:10:8c:68:97:
         6f:b7:9b:4e:f0:e3:70:c9:ee:ea:f7:88:a6:25:68:72:ab:c9:
         0a:c0:53:ac:bb:0b:c8:93:9b:49:79:a8:61:79:eb:09:37:95:
         f7:44:46:24:5d:75:57:b7:41:6a:92:0c:24:3e:e6:d0:19:2f:
         3a:4e:52:c6:e8:6a:00:d2:e4:e9:39:cb:c5:73:7e:37:41:3e:
         8e:04:2f:24:e1:cc:68:4a:1c:bc:d2:7e:cc:43:3c:9f:f1:d8:
         29:47:fc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:40:13 2025 by rpki-client