Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/91c743431655552595cecded03b8f402f41643ac.roa
File:                     91c743431655552595cecded03b8f402f41643ac.roa (raw, json)
Hash identifier:          UCBJkeh4RTXVrXBAhk4+R5GmIbpE9T/F0l0Jp52EuNs=
Subject key identifier:   63:DB:BC:AE:C4:66:31:CF:ED:18:80:6A:FF:C1:90:83:BA:11:60:BA
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       19938B
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/91c743431655552595cecded03b8f402f41643ac.roa
Signing time:             Thu 23 Jun 2022 00:05:47 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28002
IP address blocks:        2801:1b8::/44 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676171 (0x19938b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=91c743431655552595cecded03b8f402f41643ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:58:c8:f4:a9:76:55:1a:f3:d9:14:5d:fe:
                    ca:b4:6c:da:51:85:c1:ab:48:2b:a7:5f:5b:51:60:
                    ed:6f:66:b1:f7:72:45:f6:0d:82:c7:10:8c:96:0e:
                    32:33:7e:3a:d4:12:4b:3e:8b:16:75:82:4c:5f:fc:
                    ff:64:d8:d7:dd:ab:15:70:23:4e:86:ac:3b:3e:c7:
                    e9:2d:a5:18:69:76:1f:a1:38:75:b8:e6:df:99:9f:
                    e8:36:f3:73:67:8d:6e:46:59:78:e6:af:3e:f8:98:
                    e2:0f:96:26:11:d0:bc:fb:c3:ef:5c:ec:3f:b7:46:
                    75:59:9f:fe:5b:5d:a6:61:e2:aa:65:ef:11:1c:6d:
                    01:c2:aa:2d:33:38:8c:ea:dd:f7:41:ba:bf:03:33:
                    6e:7f:d0:ea:c0:f6:a2:99:05:97:1e:98:1c:27:3a:
                    7e:9c:8b:5e:2e:71:0d:5d:d6:47:0c:3a:13:76:70:
                    19:aa:6c:69:68:5f:7b:51:18:4c:5a:9e:48:45:8d:
                    94:aa:b4:d1:48:fb:ca:36:a1:f0:53:7a:78:1a:57:
                    91:1a:ba:83:eb:d8:d9:27:8a:6c:a7:38:5c:5b:5e:
                    db:74:1d:ef:29:46:4c:59:47:20:47:8f:22:4e:90:
                    39:fd:58:b5:64:a8:20:3e:32:03:94:8f:54:8e:b5:
                    1b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DB:BC:AE:C4:66:31:CF:ED:18:80:6A:FF:C1:90:83:BA:11:60:BA
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/91c743431655552595cecded03b8f402f41643ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:35:8f:81:65:9c:71:61:96:b0:50:30:c5:63:cf:63:64:
         48:0e:05:e1:c9:c2:91:12:80:82:91:7e:5b:de:1f:43:f6:ff:
         ff:0b:6e:f3:90:1b:73:b9:b6:e9:13:a6:82:05:cb:ec:66:ac:
         79:74:33:38:cc:58:1e:ed:01:5d:04:c8:70:8e:55:df:cd:52:
         7f:f3:c9:43:00:89:30:8b:d4:0f:23:62:9f:7e:4e:7b:b9:29:
         52:be:0e:ec:55:f7:03:b7:a8:f1:af:eb:c3:13:6f:f5:c2:16:
         d8:68:11:e3:57:fe:de:a4:44:44:53:c5:1f:4a:f8:3c:a2:de:
         0b:91:5e:62:8a:6f:48:27:b8:59:c2:2f:2a:3c:14:95:4f:9c:
         b3:4c:78:d9:6f:ad:1e:71:e4:a5:55:9c:c3:b1:1e:fc:c4:3f:
         f0:9f:e9:cd:bc:8c:91:86:24:f1:f4:89:5a:a6:7a:0d:45:a8:
         81:3a:3d:0c:f3:0d:e9:de:8e:22:6f:98:47:4d:9b:50:f3:a8:
         56:ad:69:a8:d2:8e:5a:d7:13:8d:24:63:bc:6b:f9:b6:42:0a:
         e8:88:87:b6:bb:01:9f:50:0b:0d:02:1a:ee:80:13:f5:eb:f9:
         99:a6:c9:d6:40:3b:32:3a:69:83:d1:48:10:c9:20:cd:d0:95:
         97:1c:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org