Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/efe57e6e15ebf020a2854726cc045d43e79bd0c6.roa
File:                     efe57e6e15ebf020a2854726cc045d43e79bd0c6.roa (raw, json)
Hash identifier:          z5iN7eB4vuBE0WmniPIqYVm0YtpFI7Q9kNhrwO7EKtc=
Subject key identifier:   81:92:55:FB:67:75:5E:A0:42:A3:6F:5F:CA:FB:CC:42:CB:EC:07:26
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       23FBB5
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/efe57e6e15ebf020a2854726cc045d43e79bd0c6.roa
Signing time:             Tue 06 Jun 2023 13:44:53 +0000
ROA not before:           Mon 05 Jun 2023 13:44:53 +0000
ROA not after:            Fri 06 Jun 2025 13:44:53 +0000
asID:                     28002
IP address blocks:        2001:13c7:7003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2358197 (0x23fbb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jun  5 13:44:53 2023 GMT
            Not After : Jun  6 13:44:53 2025 GMT
        Subject: CN=efe57e6e15ebf020a2854726cc045d43e79bd0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:62:51:7d:b0:06:cc:1d:ec:1b:43:c5:56:
                    8b:16:11:9f:1a:89:e1:2e:f2:53:6b:d0:3f:45:30:
                    47:3d:44:60:e8:1e:42:b1:3b:e7:72:5d:ac:61:05:
                    4b:9d:ea:c8:41:66:40:cb:31:d0:41:2b:9a:0f:eb:
                    f6:41:1f:28:b9:1c:65:59:58:85:68:3c:cc:d7:e3:
                    bb:d7:67:b3:f5:70:f1:eb:0a:b8:e2:3c:fc:ec:d5:
                    bb:51:52:f6:70:73:d6:0b:a2:18:7b:9e:68:82:2a:
                    ee:94:30:d8:b5:3f:2d:e6:2d:c9:e9:0f:88:12:ea:
                    fa:33:27:fc:2a:b2:a3:8e:ae:59:20:f4:ad:55:4b:
                    f0:19:5e:21:ef:26:5b:bd:c0:6e:3e:cd:b5:89:d6:
                    a4:5f:cb:7f:f0:64:1c:9e:c9:71:fe:0e:4c:eb:70:
                    ae:b1:fb:e5:7d:b0:34:ee:ad:53:75:fe:8c:31:2f:
                    c0:4a:9c:13:6b:96:92:2d:0a:f4:99:73:b6:92:80:
                    fa:90:4b:6e:96:5d:e2:cf:76:0e:28:2a:4f:43:03:
                    63:fc:ea:91:2c:87:a9:c5:44:41:19:73:96:66:1d:
                    ec:70:80:08:15:89:de:be:8b:57:62:d2:27:a4:e4:
                    3a:42:e3:8b:9c:4b:85:8b:6d:af:e3:be:3e:0f:a2:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:92:55:FB:67:75:5E:A0:42:A3:6F:5F:CA:FB:CC:42:CB:EC:07:26
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/efe57e6e15ebf020a2854726cc045d43e79bd0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:65:9c:02:5c:c5:d5:ce:ea:2d:3c:7b:08:5b:48:82:63:
         04:78:fc:9f:3f:a7:4c:e0:4e:89:2a:01:8e:98:fa:7c:d2:69:
         b4:57:06:59:94:d4:8a:51:e7:47:6a:38:57:0c:61:93:7b:e7:
         20:56:67:93:0b:7b:c1:55:a3:7b:28:9a:ec:b7:c9:51:10:69:
         29:f5:7d:23:c4:7a:2f:ba:f9:f2:ee:d1:8b:50:82:b6:89:f3:
         ef:86:35:7c:54:74:34:1c:26:9c:57:e0:30:e4:ca:b7:85:85:
         9c:89:84:1d:01:13:8d:5b:6a:69:59:49:f1:75:9c:2a:52:e7:
         a1:77:b1:de:28:39:ba:e5:c9:5a:43:be:23:9e:37:4c:f9:6f:
         26:fc:f2:9c:d3:a2:4b:fd:e8:77:87:5b:52:9f:4e:d2:6a:0d:
         cb:6d:ab:3d:55:8d:fa:f6:4c:91:39:48:63:a8:b0:4e:f3:95:
         69:d9:4e:90:63:80:ee:62:4f:c8:0b:36:cd:91:f5:1c:8d:2d:
         b2:b9:7c:65:34:4d:12:59:73:88:94:20:94:99:3e:8e:cb:f5:
         ae:a3:d7:23:de:76:be:27:a8:df:b8:bc:d2:76:9d:18:a0:30:
         56:00:88:82:25:65:6a:00:a1:f1:77:b3:67:93:04:bd:65:53:
         18:81:b9:d0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDI/u1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjMwNjA1
MTM0NDUzWhcNMjUwNjA2MTM0NDUzWjAzMTEwLwYDVQQDEyhlZmU1N2U2ZTE1ZWJm
MDIwYTI4NTQ3MjZjYzA0NWQ0M2U3OWJkMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoIRiUX2wBswd7BtDxVaLFhGfGonhLvJTa9A/RTBHPURg6B5C
sTvncl2sYQVLnerIQWZAyzHQQSuaD+v2QR8ouRxlWViFaDzM1+O712ez9XDx6wq4
4jz87NW7UVL2cHPWC6IYe55ogirulDDYtT8t5i3J6Q+IEur6Myf8KrKjjq5ZIPSt
VUvwGV4h7yZbvcBuPs21idakX8t/8GQcnslx/g5M63CusfvlfbA07q1Tdf6MMS/A
SpwTa5aSLQr0mXO2koD6kEtull3iz3YOKCpPQwNj/OqRLIepxURBGXOWZh3scIAI
FYnevotXYtInpOQ6QuOLnEuFi22v474+D6LFEQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFIGSVftndV6gQqNvX8r7zELL7AcmMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5L2VmZTU3ZTZlMTVlYmYwMjBhMjg1NDcyNmNjMDQ1ZDQzZTc5YmQwYzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABE8dwAzANBgkqhkiG9w0BAQsFAAOCAQEAjSJlnAJcxdXO
6i08ewhbSIJjBHj8nz+nTOBOiSoBjpj6fNJptFcGWZTUilHnR2o4Vwxhk3vnIFZn
kwt7wVWjeyia7LfJURBpKfV9I8R6L7r58u7Ri1CCtonz74Y1fFR0NBwmnFfgMOTK
t4WFnImEHQETjVtqaVlJ8XWcKlLnoXex3ig5uuXJWkO+I543TPlvJvzynNOiS/3o
d4dbUp9O0moNy22rPVWN+vZMkTlIY6iwTvOVadlOkGOA7mJPyAs2zZH1HI0tsrl8
ZTRNEllziJQglJk+jsv1rqPXI952vieo37i80nadGKAwVgCIgiVlagCh8XezZ5ME
vWVTGIG50A==
-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org