Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a6d2af0c614dd8f141de7bb6f0b91b582e926095.roa
File:                     a6d2af0c614dd8f141de7bb6f0b91b582e926095.roa (raw, json)
Hash identifier:          +ZwtQbdr6e3NKHeNUPriNBt/hmFjm7RVbrbubwCTP9E=
Subject key identifier:   80:3B:4B:58:8B:12:9C:83:C1:EA:7D:9A:67:01:24:DB:22:D5:09:8C
Certificate issuer:       /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial:       0D4A2F
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a6d2af0c614dd8f141de7bb6f0b91b582e926095.roa
Signing time:             Fri 09 Apr 2021 07:02:59 +0000
ROA not before:           Fri 09 Apr 2021 03:00:00 +0000
ROA not after:            Sun 09 Apr 2023 03:00:00 +0000
asID:                     28032
IP address blocks:        2800:650:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870959 (0xd4a2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
        Validity
            Not Before: Apr  9 03:00:00 2021 GMT
            Not After : Apr  9 03:00:00 2023 GMT
        Subject: CN=a6d2af0c614dd8f141de7bb6f0b91b582e926095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:22:34:b5:f4:06:c3:73:b6:ca:57:55:8d:
                    94:e5:f0:c5:6c:19:22:5c:40:03:59:2e:99:d5:d6:
                    df:0b:9b:e6:21:45:7a:4f:23:5a:ff:34:6d:69:f2:
                    c3:ea:cd:d5:4a:8d:60:cf:27:4d:16:1f:28:e3:b3:
                    aa:11:d8:aa:ec:17:13:41:6c:1a:41:af:5f:24:4c:
                    36:9b:34:79:cf:88:c2:1b:b2:e7:75:43:95:38:e0:
                    4b:f8:fe:31:ee:af:23:b1:09:78:2f:5b:13:8a:01:
                    e1:09:4e:8b:06:e8:0b:23:3f:52:3b:31:cc:7b:e4:
                    5b:31:d5:16:6c:92:1b:07:26:36:69:c5:14:2f:cf:
                    22:99:35:54:eb:5c:e0:72:f7:36:e3:0d:a4:cb:e0:
                    30:c2:e2:75:55:85:c2:e9:6b:07:aa:ac:a5:7e:28:
                    58:84:a1:61:3a:6e:9f:e9:fb:ef:e6:24:1b:98:39:
                    17:2b:bc:26:87:74:c6:5c:dc:55:0a:97:13:b1:b2:
                    1c:e0:34:39:ac:1d:e8:d3:c4:ea:ed:3e:d1:20:88:
                    8e:17:e5:59:af:2b:47:95:ad:e1:08:25:10:62:6a:
                    9c:26:af:cc:f7:b8:1f:8c:e9:92:ef:59:42:2f:73:
                    0d:1b:0e:d7:88:8f:c5:1a:6d:fa:30:77:c5:42:0a:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3B:4B:58:8B:12:9C:83:C1:EA:7D:9A:67:01:24:DB:22:D5:09:8C
            X509v3 Authority Key Identifier:
                keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a6d2af0c614dd8f141de7bb6f0b91b582e926095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:f7:46:1d:26:25:a3:2d:55:ce:c8:b3:3e:3a:a8:39:0d:b8:
         cb:02:4a:cb:7b:2b:aa:ba:9a:88:37:76:b8:64:7c:b9:e4:09:
         2c:c3:01:f0:d7:3a:1b:93:d3:51:e0:ba:1c:3b:f2:70:f0:63:
         58:4d:e0:b0:d5:a4:74:30:82:1f:fc:2d:e5:c1:1b:35:0b:a9:
         cf:f5:b6:d2:01:73:12:86:29:f8:c8:a8:01:e5:58:65:6a:1d:
         9f:fb:44:a1:54:aa:5f:c5:5f:77:b9:78:74:cc:d9:06:3c:c8:
         80:86:37:58:c3:b4:e8:b1:67:6b:f8:9b:d4:f9:e7:2e:16:cb:
         a0:ff:7a:48:c0:06:88:ce:05:23:03:cf:b0:3c:b3:62:11:6b:
         17:c6:bd:03:a1:e2:be:5e:2e:d8:5e:31:1a:fc:99:4f:d1:4c:
         74:da:65:dc:79:f1:b6:76:30:25:a3:94:3b:00:32:10:55:98:
         34:87:21:65:4d:ae:0f:c6:23:24:36:73:e3:4a:88:29:06:5d:
         70:3f:67:b5:de:34:82:d3:90:2c:d2:d6:0d:e6:fa:83:43:ef:
         03:b7:b5:b5:d7:38:b1:7c:35:bb:c5:2e:f3:d1:29:60:96:5f:
         a1:1d:16:f2:ea:a6:5a:13:cd:d5:b5:4b:33:a0:73:eb:8a:0c:
         40:78:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org