Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/4db1a18f9250c628c9fd2f2d17d6fe1cc44541c3.roa
File:                     4db1a18f9250c628c9fd2f2d17d6fe1cc44541c3.roa (raw, json)
Hash identifier:          QEoPDhzZNYrndm7r3vwXBwNWgy3BjYDyCtND12T0kfA=
Subject key identifier:   3E:A1:E7:F3:4A:A8:00:00:65:9C:77:97:6F:44:77:DB:3A:21:67:8A
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       23513C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/4db1a18f9250c628c9fd2f2d17d6fe1cc44541c3.roa
Signing time:             Thu 18 May 2023 19:05:54 +0000
ROA not before:           Wed 17 May 2023 19:05:54 +0000
ROA not after:            Sun 18 May 2025 19:05:54 +0000
asID:                     264845
IP address blocks:        2001:13c7:7020::/48 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314556 (0x23513c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: May 17 19:05:54 2023 GMT
            Not After : May 18 19:05:54 2025 GMT
        Subject: CN=4db1a18f9250c628c9fd2f2d17d6fe1cc44541c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0d:71:52:3b:c0:8f:c7:ea:1c:b2:d7:ea:4f:
                    d9:2d:a1:91:41:9e:50:89:1a:ec:b7:6e:87:db:86:
                    a7:57:c2:82:83:0b:7b:e9:5f:30:99:2f:1d:4c:54:
                    69:62:1a:e9:61:6b:32:03:7b:5c:43:76:0e:2c:2d:
                    65:8e:1a:6f:41:4c:79:52:f1:15:11:e0:07:ae:7e:
                    37:8b:f9:0d:82:ea:10:c1:5f:41:5b:ea:22:55:05:
                    03:57:02:3a:b3:57:f8:19:70:08:a7:14:a1:2c:3c:
                    a5:39:23:df:50:24:a3:18:af:0f:ef:5b:68:ef:cc:
                    3e:99:1b:6f:a7:c0:66:ef:c3:f5:c3:ab:b5:95:44:
                    b2:98:0f:47:a7:c1:6e:27:cf:5f:04:d1:b4:cb:43:
                    45:63:3f:df:63:6b:85:a4:c7:48:8d:b9:0c:70:0f:
                    22:6a:16:51:ed:47:37:4c:f4:77:b0:22:06:66:77:
                    0e:8c:0c:4c:2a:a0:d6:f1:74:2f:66:d2:06:77:92:
                    a8:46:ac:bc:5b:af:cc:61:58:16:99:d7:05:1c:d7:
                    75:f2:9f:b9:f7:57:31:23:61:d9:d0:b8:e1:27:41:
                    14:30:83:b8:ae:3f:80:76:11:ca:31:78:b7:ca:9a:
                    d1:6d:f3:3d:aa:64:f7:74:74:d7:75:05:11:dc:6c:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A1:E7:F3:4A:A8:00:00:65:9C:77:97:6F:44:77:DB:3A:21:67:8A
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/4db1a18f9250c628c9fd2f2d17d6fe1cc44541c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:a0:66:1f:41:af:8b:09:73:d6:51:9a:46:ec:d0:0b:63:
         49:a5:d3:a3:1f:7c:ff:80:3c:90:06:e3:66:22:58:44:08:eb:
         57:dd:76:16:c7:6f:a3:b8:a1:17:49:0e:7b:1d:0f:a1:eb:c0:
         14:15:0f:56:e5:af:7e:e3:9b:87:2e:e2:ba:2c:4d:9b:c4:4c:
         5d:b7:65:ef:a7:be:9a:3f:29:a2:69:db:f9:32:e5:64:2c:d6:
         79:06:bf:e7:73:fc:70:63:15:28:f7:86:02:22:9e:f6:a2:2e:
         e1:40:1e:92:d3:52:72:ba:04:05:2e:cf:78:84:c7:d0:ee:69:
         00:21:ff:d9:5d:d7:57:4d:24:0a:39:51:f8:b0:8e:00:eb:dc:
         de:2d:c7:87:ba:b5:21:74:ef:08:70:b1:f0:86:c4:74:e2:c0:
         9e:ea:d6:1a:17:f7:0c:a1:ac:d6:ef:94:ad:28:1a:43:8f:6f:
         f1:42:23:d8:44:85:36:05:5c:9a:e4:43:46:5e:fd:84:a1:b4:
         3a:df:18:40:d5:69:aa:a1:d3:a3:f8:03:98:f4:96:03:4e:c6:
         47:61:2e:5a:87:de:e6:08:3c:26:1f:d3:7b:cf:ac:ec:93:c1:
         52:d5:c4:82:90:0a:5e:e7:fd:1f:81:39:62:68:0a:bf:00:fd:
         79:4b:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org