Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/d913f5a44a6ba1382c7c2276e183dfa8d1ac40f2.roa
File:                     d913f5a44a6ba1382c7c2276e183dfa8d1ac40f2.roa (raw, json)
Hash identifier:          727vqXt9eENo5yjOQgyXGAQi2j47xBvgPrska3wTA5M=
Subject key identifier:   9F:03:EA:98:5B:44:F0:36:C3:F4:74:52:99:52:61:C7:20:01:BC:05
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       0EEFC1
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/d913f5a44a6ba1382c7c2276e183dfa8d1ac40f2.roa
Signing time:             Tue 20 Apr 2021 15:57:46 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28002
IP address blocks:        2801:1b8::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978881 (0xeefc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d913f5a44a6ba1382c7c2276e183dfa8d1ac40f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:83:b8:b4:de:e3:1e:dc:63:e6:f1:68:1a:
                    e2:eb:61:2c:05:a9:e0:44:bc:1c:4d:ef:32:ca:b4:
                    18:1d:10:d5:93:1a:5e:49:c1:8f:11:ed:e7:2a:dc:
                    5e:04:bc:33:db:55:a8:49:5a:66:91:fc:3b:97:ee:
                    2e:e3:2c:a0:a9:7a:9e:37:5d:5d:e1:fb:63:5f:d4:
                    4f:52:94:d4:21:09:c7:97:c4:87:97:4b:54:53:c3:
                    74:9a:40:a2:44:b1:a3:7e:99:09:01:05:ec:01:01:
                    a3:30:b0:0c:25:21:14:76:13:fb:44:4c:fe:ec:e3:
                    9e:86:49:40:90:f7:88:0d:22:ad:21:0c:15:1e:7b:
                    d8:ac:18:64:36:19:42:17:1a:cf:0f:54:75:60:a1:
                    eb:d9:bc:4e:e6:0f:7e:ce:6c:fd:4b:74:5f:88:1f:
                    57:e4:64:48:db:c4:90:ee:09:51:04:df:48:a0:5b:
                    be:4c:ee:e0:fb:5f:80:eb:24:b0:5c:c8:fc:4d:45:
                    06:92:69:0e:1b:a8:96:8a:25:e9:89:93:8a:88:76:
                    d2:cc:13:68:23:86:32:09:09:55:8c:64:a7:6c:af:
                    82:9a:01:a5:d6:9c:c1:ce:c2:20:55:eb:16:bb:b9:
                    5f:ee:6b:d4:43:5c:9d:4a:cd:e2:9f:0f:b8:95:2e:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:03:EA:98:5B:44:F0:36:C3:F4:74:52:99:52:61:C7:20:01:BC:05
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/d913f5a44a6ba1382c7c2276e183dfa8d1ac40f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:a2:ed:93:9a:15:01:dc:7a:a0:e3:04:62:31:0d:7f:2a:0d:
         a2:52:38:44:26:7a:1a:60:a8:4d:6e:2d:21:d0:83:32:d3:f6:
         a1:01:bd:0a:d4:c8:c7:da:b0:65:17:2f:be:1f:a6:cb:71:eb:
         33:3a:4d:c1:e2:d6:6c:6a:9d:78:cb:f8:84:17:96:26:d3:20:
         43:9c:3f:de:f8:62:ab:81:f0:63:48:42:d6:23:39:23:94:2c:
         0b:0d:5f:ab:ff:85:92:85:41:41:e7:01:92:01:55:c5:95:e8:
         7d:aa:78:24:73:f3:8a:f5:22:88:16:19:72:24:bd:be:c8:9f:
         bf:02:39:10:c9:cf:65:57:df:0c:b8:0f:fb:b1:02:3b:a0:55:
         79:60:19:08:74:e4:17:73:b1:f8:e7:da:ac:39:04:00:9b:5e:
         59:6d:e5:8e:c0:67:58:0e:01:fe:12:cd:7c:50:47:a8:b2:bc:
         30:4b:57:83:e3:e2:bc:8c:8b:f1:0d:69:6d:16:86:10:cb:3b:
         2b:a5:22:c8:8c:66:08:90:33:39:32:6f:d1:1f:3b:20:f3:ea:
         e8:66:33:aa:ce:63:ca:dd:22:20:52:bb:5a:51:9c:1e:24:00:
         50:62:40:20:5f:1b:89:58:3b:ba:b9:73:36:e1:1d:19:e0:98:
         60:8b:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org