Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/155c735650cf7b7a19053b1f06c4b0e7abfd7912.roa
File:                     155c735650cf7b7a19053b1f06c4b0e7abfd7912.roa (raw, json)
Hash identifier:          guejtnO1NSpjIC7z+mgTn0rYvFzHXp2R/5hb0Z0RSfI=
Subject key identifier:   32:41:0C:ED:43:37:AC:5A:6A:80:BC:8F:D0:15:54:1C:6A:5E:8D:E0
Certificate issuer:       /CN=3d7e92fe67745c4ed93e7215168d5bb095f17102
Certificate serial:       061C40
Authority key identifier: 83:06:15:9A:93:EC:35:FF:9F:A7:18:AC:73:96:0E:B0:1A:68:DB:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d7e92fe67745c4ed93e7215168d5bb095f17102.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/155c735650cf7b7a19053b1f06c4b0e7abfd7912.roa
Signing time:             Mon 14 Feb 2022 14:52:57 +0000
ROA not before:           Wed 09 Jun 2021 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     271916
IP address blocks:        2803:4a10::/32 maxlen: 32
                          2803:4a10:a000::/36 maxlen: 36
                          2803:4a10:e000::/36 maxlen: 36
                          2803:4a10:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400448 (0x61c40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7e92fe67745c4ed93e7215168d5bb095f17102
        Validity
            Not Before: Jun  9 03:00:00 2021 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=155c735650cf7b7a19053b1f06c4b0e7abfd7912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:db:4f:67:0e:48:07:2e:4e:32:43:e9:e8:
                    c9:37:e0:43:79:17:1e:63:c7:b5:62:95:93:f4:97:
                    42:dc:b0:e0:13:e2:83:f6:fb:63:b3:8e:9e:ad:fe:
                    a8:68:08:a3:23:76:6f:0a:ec:12:1d:62:7c:ee:dc:
                    52:ff:6c:00:c1:3a:ca:63:a4:0f:c1:51:d4:d1:9b:
                    5b:87:d1:50:43:36:16:10:2b:10:61:fc:49:6d:83:
                    54:80:48:7e:f3:54:f5:67:92:12:42:2f:c6:13:10:
                    22:f4:db:39:b2:65:f8:9b:45:8c:b7:45:9b:2d:4a:
                    ec:83:1a:19:ab:39:4c:82:02:1e:a6:fd:a2:70:15:
                    94:0f:6b:bf:e7:b8:50:a1:a0:b0:1d:80:55:c5:cc:
                    35:47:59:25:6c:1c:34:98:47:54:99:7b:4f:e9:a1:
                    8d:b5:17:b7:9d:70:6e:41:ab:7d:a3:95:43:8f:78:
                    88:1b:b1:33:c0:a1:c1:be:9a:99:b2:2d:ed:2d:f6:
                    30:62:55:34:79:9e:bf:f2:9e:29:d4:11:7f:e3:7c:
                    1a:96:dc:af:46:cf:ab:f6:8b:ba:98:79:eb:ac:ba:
                    4d:3d:f9:01:ff:58:91:f5:04:88:a3:da:c9:1b:4a:
                    78:95:7d:46:0d:75:17:07:b6:c2:28:d6:af:a2:66:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:41:0C:ED:43:37:AC:5A:6A:80:BC:8F:D0:15:54:1C:6A:5E:8D:E0
            X509v3 Authority Key Identifier:
                keyid:83:06:15:9A:93:EC:35:FF:9F:A7:18:AC:73:96:0E:B0:1A:68:DB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d7e92fe67745c4ed93e7215168d5bb095f17102.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/155c735650cf7b7a19053b1f06c4b0e7abfd7912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/3d7e92fe67745c4ed93e7215168d5bb095f17102.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:6a:f9:53:ef:3b:bb:80:5b:9d:1b:9a:c7:2b:da:cf:14:
         53:d4:8a:37:a0:8f:82:be:1c:c3:b6:6b:3e:95:37:dc:3a:98:
         2b:b4:72:f2:ba:3f:31:54:cd:a7:7e:34:1d:90:14:78:38:ff:
         71:57:c0:8d:26:83:87:55:75:22:07:06:18:1f:70:2b:18:83:
         2a:db:1d:f6:35:36:c5:75:9d:da:7b:5b:10:5e:bb:70:b2:b7:
         7e:28:35:2a:80:88:91:b6:da:b7:95:e4:81:f7:07:21:0b:16:
         93:c5:3c:a2:68:ed:82:e9:14:1c:33:a3:26:d9:b8:85:0e:46:
         4f:8f:af:e8:e9:7f:75:82:2b:4b:7b:b5:0f:4e:8f:fe:2c:83:
         8d:63:be:e7:77:70:22:0c:41:30:14:e4:1e:2f:39:ad:a8:d5:
         52:1b:06:32:a5:52:78:f0:96:6e:97:d3:b2:28:23:d5:09:7f:
         20:3e:db:5d:19:c3:58:f3:66:d1:5a:55:0e:cf:55:87:6f:f5:
         ff:7b:a2:fa:33:e5:b3:87:e2:44:70:72:b1:f8:02:d9:6f:2f:
         a1:1b:0c:f1:22:b8:1a:d2:95:6b:e4:28:36:f2:c2:68:5b:8d:
         7f:2d:13:6c:4c:d7:72:9e:6b:cf:c0:84:3a:65:cb:45:1e:ae:
         35:66:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org