Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/480de999ebda16389a6539dd262a2dd33522491e.roa
File:                     480de999ebda16389a6539dd262a2dd33522491e.roa (raw, json)
Hash identifier:          BYpf6bjtsOvJN5CI+E08j3ra4wiuGkXnDG99dm4qfpw=
Subject key identifier:   1E:7F:96:FE:0E:B0:1E:41:B8:DE:3A:73:E2:77:E6:F7:0D:E8:2C:47
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       221F55
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/480de999ebda16389a6539dd262a2dd33522491e.roa
Signing time:             Wed 19 Apr 2023 19:45:26 +0000
ROA not before:           Tue 18 Apr 2023 19:45:26 +0000
ROA not after:            Sat 19 Apr 2025 19:45:26 +0000
asID:                     28000
IP address blocks:        2001:13c7:7020::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2236245 (0x221f55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Apr 18 19:45:26 2023 GMT
            Not After : Apr 19 19:45:26 2025 GMT
        Subject: CN=480de999ebda16389a6539dd262a2dd33522491e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:e0:6b:3c:70:5b:98:43:39:50:d0:a9:e0:
                    55:e3:f3:ea:30:06:ce:4d:b0:cc:bb:62:93:59:56:
                    97:f8:c7:26:1b:43:dd:ac:8d:28:be:d8:90:93:99:
                    95:60:85:1a:11:8f:bd:85:29:2c:a6:1b:ac:45:15:
                    4b:f2:02:1d:1c:a5:f2:e7:ce:85:36:eb:1b:83:4d:
                    d7:3d:07:a2:d4:ac:ca:48:dc:78:d5:44:98:54:3b:
                    7d:63:f9:cf:d4:71:0d:55:3c:16:49:43:65:8b:c1:
                    04:94:72:95:bd:a5:5a:3d:77:db:05:41:20:1d:71:
                    6a:a8:a3:99:3f:4f:e3:41:db:94:fe:9b:ed:90:fb:
                    aa:60:97:1a:6c:fc:6f:99:1c:23:f9:1f:0a:32:0c:
                    7c:78:e8:05:d6:0b:7a:72:51:32:a8:cc:e2:ae:d4:
                    52:88:2d:b2:2d:d7:5f:30:b5:0c:1c:73:18:5b:5f:
                    cb:46:77:09:6a:74:a8:8b:b1:fe:d7:18:de:a6:30:
                    96:ff:d5:5b:6f:b1:25:88:e1:f0:b8:4d:83:c3:e7:
                    1b:3d:e3:a7:35:48:76:f5:99:c5:d8:12:bf:fd:43:
                    69:34:35:43:35:fa:40:3c:f2:0f:03:7d:a1:5c:f2:
                    91:e1:cf:85:9a:7e:7c:e4:35:75:05:6e:89:ec:a4:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7F:96:FE:0E:B0:1E:41:B8:DE:3A:73:E2:77:E6:F7:0D:E8:2C:47
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/480de999ebda16389a6539dd262a2dd33522491e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:d2:cb:e9:29:6a:9e:46:9d:86:75:a0:c9:4e:63:ca:cb:
         56:db:9f:8c:c4:52:5c:e1:bd:b5:b9:7b:62:9f:01:30:7b:fa:
         56:44:66:59:7a:59:d9:f6:6b:8a:bd:33:8d:92:72:22:8e:9b:
         88:10:94:d9:3d:3a:00:3c:08:94:dc:20:8e:a2:10:87:fe:b4:
         2a:6c:32:69:c3:bd:db:c1:fa:3b:1b:87:9c:41:9e:61:1e:03:
         c5:fc:b1:22:da:00:9d:56:88:c4:2a:87:e8:df:03:c3:44:b7:
         7d:1c:b1:44:b0:cb:da:20:0f:10:c5:22:58:ab:35:94:eb:cb:
         23:8b:77:a8:04:ad:ef:4f:26:d2:af:75:3b:93:0e:7c:a0:78:
         c4:b2:87:ad:d6:44:38:2b:db:01:12:aa:c5:27:bb:79:66:37:
         74:d9:53:11:94:3f:7b:ac:81:3f:18:6b:99:be:68:bd:65:b9:
         65:fd:47:ce:b2:94:95:e8:79:be:d9:1f:a8:d4:9a:99:e1:26:
         6a:c6:92:e7:68:c5:62:43:ac:5b:33:1b:f9:01:32:23:ce:ab:
         6a:ae:68:3f:88:2a:e8:fd:38:dd:2f:7b:f3:a0:79:b3:6d:0c:
         e0:f6:39:42:47:a2:aa:34:94:b2:b1:9e:63:71:c0:ca:22:2a:
         86:4d:f3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org