Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/00732b6591eb5ed22c5bde08fc86f3ef7013308d.roa
File:                     00732b6591eb5ed22c5bde08fc86f3ef7013308d.roa (raw, json)
Hash identifier:          tkwEjmvjjCarqNjJnO1wngw0eQsoxl1bJk2Msj6/iMQ=
Subject key identifier:   77:A0:C7:AA:2F:EE:46:FF:5B:D6:3A:C4:3D:F2:4E:CE:71:7C:33:C2
Certificate issuer:       /CN=2992018c1338674cb760d954bf606483b9b3a7d8
Certificate serial:       0D2576
Authority key identifier: 5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/00732b6591eb5ed22c5bde08fc86f3ef7013308d.roa
Signing time:             Mon 06 Feb 2023 13:24:24 +0000
ROA not before:           Sun 05 Feb 2023 13:24:20 +0000
ROA not after:            Thu 06 Feb 2025 13:24:20 +0000
asID:                     271896
IP address blocks:        2803:2210::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861558 (0xd2576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2992018c1338674cb760d954bf606483b9b3a7d8
        Validity
            Not Before: Feb  5 13:24:20 2023 GMT
            Not After : Feb  6 13:24:20 2025 GMT
        Subject: CN=00732b6591eb5ed22c5bde08fc86f3ef7013308d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:a9:7f:a5:ed:0d:42:0f:d1:23:b3:be:d6:
                    21:1f:88:ca:e7:bf:7c:40:89:05:f0:c4:4b:cc:88:
                    f7:ae:81:50:1e:f8:fd:81:8c:2f:7a:5c:cc:7f:f1:
                    d1:69:b5:9b:e4:66:02:90:be:77:bc:c8:b8:12:f9:
                    15:26:d3:29:0f:9a:fe:78:dc:44:f7:f4:63:a0:c4:
                    5a:47:e7:69:19:3b:4b:1f:84:ce:2c:74:5a:1e:a9:
                    bd:a9:0a:05:ea:f2:0b:6b:50:21:12:11:a1:83:10:
                    d6:91:d4:95:0c:b3:4b:ee:1d:ed:10:20:df:6d:d8:
                    da:ef:9f:f4:5d:7c:57:e8:ff:b1:83:8a:1b:27:a2:
                    30:83:b8:5a:8a:df:8c:3c:7d:cb:d0:ea:d3:68:d4:
                    99:bf:c5:9e:39:cb:e6:68:85:65:ad:fe:4b:41:dd:
                    10:9c:6f:e0:fe:1f:3a:ed:fd:26:71:dc:e1:8a:29:
                    ad:f2:a8:bd:52:f9:96:be:8c:ba:fe:ab:59:bd:a7:
                    aa:fb:85:97:99:19:8b:f3:88:ce:59:44:31:42:43:
                    58:38:af:5a:b3:1e:cf:18:95:3e:3e:77:ed:bd:2d:
                    ad:9f:85:82:78:66:af:ac:34:db:a8:98:0b:43:51:
                    b9:6d:c6:dc:51:73:15:f3:d9:7f:47:a5:75:a7:74:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A0:C7:AA:2F:EE:46:FF:5B:D6:3A:C4:3D:F2:4E:CE:71:7C:33:C2
            X509v3 Authority Key Identifier:
                keyid:5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/00732b6591eb5ed22c5bde08fc86f3ef7013308d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/2992018c1338674cb760d954bf606483b9b3a7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2210::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:10:e9:ea:1a:3c:ee:61:dd:f7:e2:ce:f2:97:ba:3d:ec:1b:
         ac:b4:a9:9c:7f:6b:09:55:78:c7:18:d6:29:52:66:23:57:9e:
         5a:8a:b4:e3:7e:c0:e9:86:ee:94:c9:23:81:4c:fc:91:e3:b9:
         a2:fd:fc:0a:8f:1e:8e:a0:3e:06:b5:0c:31:47:6f:33:bd:c7:
         33:9c:26:1d:b7:0c:d0:75:e8:bf:8e:1d:96:2a:63:43:c0:53:
         50:35:60:09:33:a8:4d:0a:a9:78:35:fc:26:e4:3f:c8:f8:46:
         3e:6c:00:aa:83:97:4e:48:4e:5b:51:9d:6e:a3:05:94:dd:17:
         e9:10:71:7c:2c:f2:40:51:44:01:c7:2d:9e:d9:f5:6a:67:2a:
         0d:32:d4:35:32:5e:23:3b:4c:61:97:81:dd:32:76:83:2e:22:
         ac:c0:ac:3b:c5:70:af:91:54:bf:d4:02:5f:22:b1:81:b1:04:
         09:20:b5:81:0e:20:8d:c5:31:72:dc:09:b1:f3:95:7d:34:cc:
         d4:8f:8a:02:d5:b6:e1:2f:50:83:62:16:6f:8a:85:2e:eb:1c:
         6b:fa:09:fa:88:c8:3b:f8:00:21:29:0a:4e:fe:39:02:21:37:
         fd:6c:84:82:f4:bd:50:da:b0:38:bd:77:af:9b:64:5d:af:71:
         e3:33:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org