Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/17186458f1791aa70174856606de7024c1498154.roa
File:                     17186458f1791aa70174856606de7024c1498154.roa (raw, json)
Hash identifier:          X7umFGdi5wYk7+F6LRvPAnBJp17zW2kOsPYUesH5EkM=
Subject key identifier:   E5:6A:EA:0A:DE:7C:0C:8D:33:18:6E:1D:39:05:E2:85:E7:82:60:3E
Certificate issuer:       /CN=08a33ea95ff454bf3ca0e41f79f9a22294d74785
Certificate serial:       263F
Authority key identifier: 5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/17186458f1791aa70174856606de7024c1498154.roa
Signing time:             Tue 28 Jun 2022 19:55:34 +0000
ROA not before:           Tue 28 Jun 2022 03:00:00 +0000
ROA not after:            Fri 28 Jun 2024 03:00:00 +0000
asID:                     272146
IP address blocks:        2803:d090:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9791 (0x263f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a33ea95ff454bf3ca0e41f79f9a22294d74785
        Validity
            Not Before: Jun 28 03:00:00 2022 GMT
            Not After : Jun 28 03:00:00 2024 GMT
        Subject: CN=17186458f1791aa70174856606de7024c1498154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ad:d6:5b:d7:ad:bc:fe:4c:c1:78:71:1d:3c:
                    b7:c6:0a:1c:61:22:4a:fa:8f:ec:e5:c0:2a:92:14:
                    44:0f:ae:5f:2d:4a:15:33:eb:ce:63:b1:97:13:e2:
                    cd:b1:66:0e:a7:bf:e7:3f:98:9e:5e:21:07:ae:b7:
                    db:0c:86:35:bc:6e:cf:b6:cd:12:ab:c8:a8:a2:66:
                    ab:26:fb:24:9d:f1:35:55:61:c1:b8:41:cf:e7:63:
                    c7:68:9e:0d:fe:51:2c:d8:e5:0c:1b:df:7b:cf:b1:
                    14:f7:8d:82:25:a5:10:95:8f:8d:43:59:e6:82:36:
                    7c:12:c0:6f:cb:79:d9:91:47:9e:f0:09:c8:06:d8:
                    f4:d2:31:b6:a8:38:cc:b0:44:4d:bd:95:2b:5e:63:
                    15:ce:54:60:da:a3:85:ab:d1:9d:ce:6e:48:a4:f5:
                    c6:f6:1d:c6:ab:9e:74:75:40:52:1a:41:b4:fc:57:
                    ed:d4:b1:11:78:2d:85:d2:f3:01:4a:36:8b:6b:a5:
                    0f:c6:da:ad:34:27:50:7b:9c:48:6f:71:5f:1d:31:
                    20:35:38:f4:8d:cc:f7:1d:20:88:5e:7b:81:16:44:
                    d0:3d:72:f5:27:f4:44:47:b7:69:60:ba:a0:fc:76:
                    71:55:ce:3a:60:11:88:73:e8:3e:b2:ac:16:64:cc:
                    40:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:EA:0A:DE:7C:0C:8D:33:18:6E:1D:39:05:E2:85:E7:82:60:3E
            X509v3 Authority Key Identifier:
                keyid:5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/17186458f1791aa70174856606de7024c1498154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/08a33ea95ff454bf3ca0e41f79f9a22294d74785.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d090:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:64:49:16:4e:85:bb:ae:09:07:33:86:b9:59:3c:9e:17:
         5a:f6:d2:b6:ae:9c:16:1e:03:6d:74:c7:7d:60:92:6b:92:4c:
         fd:06:31:98:1c:75:ac:3b:69:e8:6f:9c:29:65:b8:b7:4b:00:
         9e:09:bb:68:5e:cd:49:ee:f7:06:85:5e:c5:31:23:ea:bf:31:
         0b:6c:a4:c6:22:92:68:fe:8d:b5:56:c2:d6:16:93:28:28:fb:
         93:47:b8:38:1c:d2:52:7d:5f:b0:47:42:77:15:bd:f5:6b:9a:
         75:48:de:7f:06:76:d8:06:96:72:c2:2c:0f:64:c2:65:2e:ef:
         2d:dc:17:fc:be:5c:e5:7a:77:9f:55:84:3c:5a:42:c1:6a:f1:
         57:55:c9:8f:4c:8e:f8:e9:b1:c4:13:7b:1f:7b:cb:8f:b8:47:
         d5:ae:0b:84:4f:a1:90:56:8e:f5:d7:d9:26:39:74:a1:94:e4:
         f6:97:e9:2c:e6:2f:bd:f3:71:16:ca:7a:b5:2f:e6:0c:c2:e9:
         82:54:cf:4f:3b:68:91:97:54:9b:96:db:3e:b3:5f:83:7e:4d:
         f4:13:b4:86:1c:a8:c7:47:1f:cb:59:90:6b:88:65:9b:c1:20:
         44:02:fc:0a:2f:2f:80:b5:8f:60:d3:25:2d:e4:68:5f:dc:96:
         73:13:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org