Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b19d43b7fbf89fd4d7916669b2e7e7045b54ae6a.roa
File:                     b19d43b7fbf89fd4d7916669b2e7e7045b54ae6a.roa (raw, json)
Hash identifier:          nNsznSlYi0R5R14qLfCaPpTnJ6G1ic6DSm7TaXRq8fM=
Subject key identifier:   40:88:72:29:9D:48:8D:DF:34:04:5C:7E:FE:B1:67:8D:B8:4B:63:86
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       24713C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b19d43b7fbf89fd4d7916669b2e7e7045b54ae6a.roa
Signing time:             Fri 09 Jun 2023 21:44:03 +0000
ROA not before:           Thu 08 Jun 2023 21:44:03 +0000
ROA not after:            Mon 09 Jun 2025 21:44:03 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388284 (0x24713c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jun  8 21:44:03 2023 GMT
            Not After : Jun  9 21:44:03 2025 GMT
        Subject: CN=b19d43b7fbf89fd4d7916669b2e7e7045b54ae6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:91:53:7c:f1:ee:89:f3:88:59:e5:b4:35:
                    dd:54:00:f8:98:25:c4:e5:8f:84:0b:7b:af:ce:f3:
                    3b:45:06:37:9f:d8:0f:18:32:51:ca:9b:0c:94:15:
                    1f:79:aa:34:34:e0:b3:89:dd:b9:73:fd:42:31:88:
                    3a:d9:a6:5c:74:d6:49:c7:3f:42:21:1e:40:1c:9a:
                    f2:2f:ce:fe:7f:0a:f3:67:09:50:b3:ef:bd:73:7d:
                    a5:90:5d:48:3e:11:bc:e2:5f:58:d3:2b:4d:f1:df:
                    cc:2f:a3:05:ea:6f:e9:99:8f:6e:47:61:e4:5e:1a:
                    25:b4:39:db:74:b4:82:ea:16:e7:21:83:7f:7d:4b:
                    dd:be:21:7a:4b:77:bb:9e:ce:e0:b1:62:36:32:1a:
                    a4:5d:17:a7:a7:b4:09:e2:46:51:88:66:19:dc:b5:
                    87:85:46:97:9c:73:d8:77:17:ba:76:77:b2:d0:e6:
                    75:75:16:cf:9b:de:3b:e7:c6:18:c2:4b:71:ce:b7:
                    b7:10:85:8e:3a:4d:e7:eb:c7:8f:95:80:6d:0b:c9:
                    b8:48:9f:6e:e3:0d:7d:a1:8b:df:8a:e3:f1:b4:0d:
                    56:fc:e4:76:3c:9c:bf:09:20:7e:5e:f6:84:57:c9:
                    38:5c:15:4d:7c:ea:5f:e4:f5:94:4b:c3:06:ef:a9:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:88:72:29:9D:48:8D:DF:34:04:5C:7E:FE:B1:67:8D:B8:4B:63:86
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b19d43b7fbf89fd4d7916669b2e7e7045b54ae6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:a1:6e:be:fa:11:90:b9:36:45:13:da:80:d9:21:76:dc:c4:
         e2:1e:e1:ed:67:b6:d5:a3:9d:02:ae:f5:1a:30:9c:4b:02:3a:
         b9:a5:be:8a:11:cb:65:88:c0:ff:b0:65:2a:8f:1e:82:41:12:
         9e:70:9e:cd:60:1d:78:8b:ff:e0:2d:94:a2:62:a8:ac:52:d3:
         70:93:41:6b:94:ab:10:95:48:2b:5c:54:77:cc:a1:9e:51:1b:
         7b:d8:24:59:e3:0f:c7:64:1a:94:bb:f1:8e:21:b0:46:6c:72:
         a0:dc:2c:37:4b:81:eb:f4:63:b1:56:26:15:5f:16:91:16:eb:
         a4:0d:72:6e:16:09:4c:29:9c:75:50:44:bb:e0:92:72:40:52:
         c3:54:a1:9c:56:2d:5d:5d:e5:73:06:e3:ee:53:25:3a:e9:43:
         32:1d:ad:ea:c9:c3:6e:aa:a2:bc:ab:8f:0b:7d:6f:9e:c8:9a:
         44:d9:b5:61:e8:de:95:c8:63:9d:18:9f:1e:15:b2:6e:82:8f:
         ae:ac:a2:5c:fa:b0:0c:13:3e:8d:45:13:33:b6:b1:98:58:08:
         c1:de:48:07:b2:7b:27:c9:99:91:68:99:9b:04:b3:f2:8c:ea:
         9d:47:68:cc:aa:9d:ae:24:58:f0:7d:08:aa:23:e3:e0:bb:e3:
         17:89:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org