Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/74dcc8eabe72ca731365808829e8b5edf73cbab5.roa
File:                     74dcc8eabe72ca731365808829e8b5edf73cbab5.roa (raw, json)
Hash identifier:          okomrLerozxMd4GNxmNOa7R/nAVrAm9wOh6GgGICJdk=
Subject key identifier:   52:A7:37:97:99:E1:97:7D:D8:14:2B:50:7F:38:D2:C4:C9:63:7E:33
Certificate issuer:       /CN=0617fe284eadaecc300caf805a55753001bc6052
Certificate serial:       54C8
Authority key identifier: 23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/74dcc8eabe72ca731365808829e8b5edf73cbab5.roa
Signing time:             Fri 11 Nov 2022 23:00:25 +0000
ROA not before:           Thu 10 Nov 2022 22:58:39 +0000
ROA not after:            Mon 11 Nov 2024 22:58:39 +0000
asID:                     270141
IP address blocks:        2806:3dc:fffe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21704 (0x54c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0617fe284eadaecc300caf805a55753001bc6052
        Validity
            Not Before: Nov 10 22:58:39 2022 GMT
            Not After : Nov 11 22:58:39 2024 GMT
        Subject: CN=74dcc8eabe72ca731365808829e8b5edf73cbab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:70:e0:48:e0:1a:45:ed:62:32:21:d3:df:
                    28:49:45:c6:26:05:65:1b:d4:d5:5e:8b:8a:9e:5e:
                    29:bc:f1:36:65:0b:85:67:09:1f:80:23:4b:68:5a:
                    e3:c9:b9:69:6d:24:9f:4b:b1:35:94:c5:8c:e3:fe:
                    c4:ff:62:65:8e:46:09:37:e7:12:02:9b:0f:a6:14:
                    67:d6:c7:b3:58:77:b8:93:98:3c:a9:f6:fe:ff:a5:
                    4a:2d:84:84:ec:af:45:e5:ba:0d:08:c5:44:31:d2:
                    96:c1:9f:8c:e8:a5:e4:e3:22:45:c0:e0:6b:10:23:
                    92:7f:2b:0a:78:b5:c2:ea:d7:bb:a0:b8:c9:44:14:
                    80:9e:b1:bb:18:17:1b:51:ef:80:c6:be:89:7a:49:
                    3a:49:d1:25:3c:69:6a:50:85:62:9c:65:37:b0:01:
                    9e:7e:5d:e8:de:1e:0e:fc:dd:a6:3d:89:cb:25:00:
                    20:29:63:9c:5d:b2:d4:16:99:5b:42:8f:83:72:2b:
                    30:c2:ee:dd:62:e1:05:e4:49:c8:ac:86:c7:32:70:
                    87:79:e2:f4:e1:0c:5e:89:df:56:2f:ca:73:53:c0:
                    32:24:ff:9f:84:8f:17:5d:20:28:fc:c6:59:9e:02:
                    f7:06:73:3b:3d:26:99:e0:27:aa:46:ce:fe:e7:c7:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A7:37:97:99:E1:97:7D:D8:14:2B:50:7F:38:D2:C4:C9:63:7E:33
            X509v3 Authority Key Identifier:
                keyid:23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/74dcc8eabe72ca731365808829e8b5edf73cbab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/0617fe284eadaecc300caf805a55753001bc6052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:34:69:c5:5b:5a:21:6d:e1:4a:a4:80:2d:6e:e8:4d:07:ce:
         6d:0c:2c:34:5d:44:36:d5:61:06:32:3d:e6:ff:e0:e1:f8:63:
         14:fd:51:60:0d:af:30:e2:29:cf:59:62:56:3c:1b:b8:d9:58:
         f1:cb:86:f8:60:be:e0:74:47:82:90:1d:ce:9d:7e:d0:79:55:
         30:1d:3c:c5:55:06:af:e1:0d:67:10:24:4c:e4:38:60:46:fa:
         79:10:36:7f:65:5e:32:6f:61:56:53:f4:94:61:86:01:34:f1:
         38:7a:bb:78:c0:0f:90:ba:4e:42:67:cd:0a:5c:7d:60:18:b5:
         d4:a9:da:36:0b:c0:33:d1:2f:40:98:3f:8f:d5:20:4d:a1:74:
         95:e0:0c:c7:3c:f3:1d:bc:a7:d4:0c:f5:62:bc:9c:ef:d0:5e:
         15:a7:d9:df:8f:d3:ab:b8:3b:da:02:70:58:4f:b4:9e:03:83:
         a2:c6:a4:6f:8c:87:70:a6:c7:32:a5:1c:60:c8:ef:48:6b:32:
         e5:0f:ff:ca:d3:24:33:c6:37:ca:95:86:9a:1e:94:a6:a4:9b:
         2f:b5:6d:c1:06:c6:82:e8:45:cb:d3:e4:eb:c2:82:96:61:81:
         fd:b3:9d:c4:9f:ab:df:58:8b:3a:48:09:69:8d:79:0d:fc:ff:
         e5:5f:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org