Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/0007f9ed15313987028389bf5a049ffdfb815b25.roa
File:                     0007f9ed15313987028389bf5a049ffdfb815b25.roa (raw, json)
Hash identifier:          Fh8zjfDpnMuaYViKlVb9/RCMobNZmUhlbGnK6l3WDvw=
Subject key identifier:   AB:41:34:5E:C2:34:A9:06:EE:B8:3B:D7:F1:4F:C0:6B:0C:E4:DC:30
Certificate issuer:       /CN=b0dc41738b385a57fce144119e9f086e5efc1042
Certificate serial:       0D0B22
Authority key identifier: D1:AC:D3:9A:54:A4:49:6D:F6:99:E2:43:FC:F0:2E:72:D9:70:B6:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dc41738b385a57fce144119e9f086e5efc1042.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/0007f9ed15313987028389bf5a049ffdfb815b25.roa
Signing time:             Wed 24 Mar 2021 22:52:16 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     21765
IP address blocks:        2801:17:3000::/48 maxlen: 120

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854818 (0xd0b22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0dc41738b385a57fce144119e9f086e5efc1042
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=0007f9ed15313987028389bf5a049ffdfb815b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:ae:e4:56:7a:ba:d6:ba:01:5f:26:0b:76:
                    60:f6:64:b4:25:56:48:5c:aa:16:ac:61:e1:18:75:
                    e9:f5:21:3b:4f:6c:d7:e9:a7:f5:c5:ce:c1:c0:54:
                    b6:15:1b:55:b3:26:83:4b:f2:c2:73:38:40:6b:06:
                    ad:2e:f4:61:3a:db:65:b5:57:2a:be:a2:fa:21:2e:
                    57:a5:fb:c4:27:27:19:05:e0:d0:20:bd:50:a2:37:
                    fc:2e:87:70:79:3d:16:ff:fc:2a:3a:f3:81:5e:28:
                    48:2e:2d:91:9c:f2:b6:01:19:53:12:75:5b:60:80:
                    d9:65:e2:29:06:a5:38:43:79:f7:8b:73:27:1b:86:
                    f4:23:fd:27:f1:02:ce:30:92:50:e4:e1:54:f2:9f:
                    fd:12:7d:08:44:e1:89:f8:09:6f:ea:44:db:9b:b0:
                    ec:0e:3b:41:ee:8b:c2:8e:3f:8d:17:0c:03:7a:8a:
                    5d:4a:a3:3e:5e:4d:76:c9:cb:5f:af:43:ac:b7:3b:
                    ed:23:2d:75:f4:03:1b:db:18:3f:c7:75:9d:42:6d:
                    26:92:cb:f9:92:d5:86:94:be:b6:11:48:3b:ab:a0:
                    34:6b:b8:63:b2:d2:a1:c9:2b:89:85:ff:a7:be:ea:
                    ae:f3:43:47:b5:ea:dc:bb:57:56:81:18:7d:d5:1e:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:41:34:5E:C2:34:A9:06:EE:B8:3B:D7:F1:4F:C0:6B:0C:E4:DC:30
            X509v3 Authority Key Identifier:
                keyid:D1:AC:D3:9A:54:A4:49:6D:F6:99:E2:43:FC:F0:2E:72:D9:70:B6:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dc41738b385a57fce144119e9f086e5efc1042.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/0007f9ed15313987028389bf5a049ffdfb815b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/b0dc41738b385a57fce144119e9f086e5efc1042.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:d9:92:f8:27:31:3e:1e:01:74:20:bc:ce:70:38:08:48:
         c4:4c:7f:ae:6f:c1:c1:33:24:05:87:af:40:94:81:69:04:53:
         23:1f:43:75:16:c1:78:59:18:e9:e0:df:ee:80:b5:a2:65:af:
         1e:b5:2a:93:9f:cf:65:c3:6e:d5:43:d0:d5:f9:d5:37:cf:c9:
         de:64:d1:b3:74:8f:09:5d:91:e4:47:f0:a5:67:6e:13:60:b4:
         34:3b:99:b7:ce:5a:9a:0a:05:99:e9:09:e3:a0:0d:32:cc:75:
         5b:54:98:c0:01:cd:5f:17:8c:fc:0f:91:31:a1:27:92:e4:49:
         52:69:1c:85:14:9c:03:ca:d2:35:ab:6e:91:83:40:9e:f0:f7:
         ca:97:4d:d2:23:4c:73:47:31:b9:31:54:4b:d0:37:bd:db:e7:
         88:4d:44:a5:54:91:d8:16:37:2d:8d:3f:c2:43:c8:d1:d7:0f:
         5a:40:b5:bb:b6:ad:83:42:8f:0d:79:1f:c0:a1:dc:a2:0a:38:
         25:13:a8:9b:e5:d6:d7:27:ac:75:82:4c:5a:d5:68:0f:ca:90:
         ae:62:3d:bf:24:a2:c2:60:b6:57:33:9c:91:48:7d:28:79:85:
         13:5b:b5:7b:7b:8c:41:96:ed:f0:8f:8b:7b:13:08:5b:8e:c8:
         5a:9a:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org