Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/3169f1fc9b74961f664d75bf340fe842e90821c9.roa
File:                     3169f1fc9b74961f664d75bf340fe842e90821c9.roa (raw, json)
Hash identifier:          O6i891nl9IyBLOUvrTlNmrWZ4T7+GhR0PwZ2z1Y2rhQ=
Subject key identifier:   75:E5:F1:D5:C9:A6:C5:CA:98:06:35:08:F6:D7:41:F1:4A:29:73:22
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       010300
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/3169f1fc9b74961f664d75bf340fe842e90821c9.roa
Signing time:             Tue 26 Oct 2021 11:33:28 +0000
ROA not before:           Mon 20 Sep 2021 03:00:00 +0000
ROA not after:            Wed 20 Sep 2023 03:00:00 +0000
asID:                     271956
IP address blocks:        2803:7610:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66304 (0x10300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Sep 20 03:00:00 2021 GMT
            Not After : Sep 20 03:00:00 2023 GMT
        Subject: CN=3169f1fc9b74961f664d75bf340fe842e90821c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:14:fb:f7:03:0c:a6:e3:8a:2f:f4:b4:a0:
                    d5:45:a1:51:69:cb:13:b3:22:b9:58:f7:60:23:90:
                    d6:37:85:68:8c:c6:11:5d:c5:ca:33:d5:c9:76:8d:
                    cd:21:54:ca:d7:ab:d0:2e:8c:21:1c:ee:10:b5:05:
                    cc:51:2e:14:57:02:e6:5a:45:8b:52:ad:24:49:d2:
                    ac:47:03:c1:aa:19:79:c9:a8:74:73:f4:73:ba:46:
                    7a:5e:5d:40:4d:82:b8:fd:2b:6f:b8:20:12:cf:81:
                    12:c0:7d:64:30:3f:c5:0d:36:69:90:f6:8e:96:5c:
                    40:16:94:ac:09:51:0f:d6:3d:81:f2:de:7b:0b:80:
                    b5:61:84:90:76:da:36:05:3f:89:5a:bb:e6:c7:06:
                    13:7a:de:f5:14:85:e3:a9:4f:ac:2f:06:95:06:87:
                    8c:fe:ce:75:86:5e:d8:56:ae:cc:df:70:1d:d1:40:
                    2f:ed:2b:a4:8e:e0:7c:c8:b1:69:dd:37:21:f1:bf:
                    f8:10:7b:5e:40:43:86:00:42:59:dd:52:5c:c0:d5:
                    89:3d:99:2b:e8:ad:2f:c6:85:23:28:a3:ed:f1:15:
                    5f:05:6b:36:64:8e:a0:c1:88:4e:fc:a5:36:34:2b:
                    60:f8:43:c4:9e:a4:ae:dc:81:aa:f4:c4:33:bb:e7:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:F1:D5:C9:A6:C5:CA:98:06:35:08:F6:D7:41:F1:4A:29:73:22
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/3169f1fc9b74961f664d75bf340fe842e90821c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:3b:85:a3:e6:2c:a8:2a:26:ea:57:78:03:1f:98:8c:9a:
         2d:f4:3f:62:12:c5:52:66:3d:49:e4:63:b5:fb:6d:9b:00:b0:
         b6:cb:16:50:07:56:c4:52:c7:c5:f9:8c:20:03:38:ca:e3:75:
         45:e2:1b:76:a4:3f:94:f1:f1:75:37:1a:d6:eb:85:10:3d:71:
         94:54:a0:82:03:a9:ae:a6:5c:70:e8:21:20:d7:bc:81:a4:b8:
         b9:66:cd:80:12:4f:72:3e:1c:df:11:e3:9a:d6:78:60:35:be:
         39:8c:c2:81:0a:62:52:f2:37:93:b2:f0:43:11:0d:89:ab:55:
         f3:03:c3:44:7b:34:4a:6c:3e:2d:3f:de:2d:94:1c:ed:7d:ac:
         83:3f:c4:8e:0c:91:2f:97:73:f7:97:22:5d:d3:ce:88:2e:59:
         01:17:4d:2f:6c:69:a7:26:80:67:99:74:d8:14:3f:6f:93:14:
         6f:97:0b:dc:13:1d:1e:84:b1:88:1f:2f:e3:21:f5:66:a9:c8:
         f4:b3:33:20:de:58:bd:03:58:44:50:aa:79:c6:0e:a7:f6:0a:
         25:a8:e2:da:d2:57:d9:a5:3f:61:d8:73:9d:de:95:0c:6f:43:
         7f:c4:68:81:b4:f0:e6:2b:05:ae:59:af:22:99:54:60:5b:e0:
         b2:40:0e:f1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAQMAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
N2E4YjVhMGMxNTgyNGQ2ZTNjZDBhMTUyODIyMWEwYTdhNDdjZTAwHhcNMjEwOTIw
MDMwMDAwWhcNMjMwOTIwMDMwMDAwWjAzMTEwLwYDVQQDEygzMTY5ZjFmYzliNzQ5
NjFmNjY0ZDc1YmYzNDBmZTg0MmU5MDgyMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk3wU+/cDDKbjii/0tKDVRaFRacsTsyK5WPdgI5DWN4VojMYR
XcXKM9XJdo3NIVTK16vQLowhHO4QtQXMUS4UVwLmWkWLUq0kSdKsRwPBqhl5yah0
c/RzukZ6Xl1ATYK4/StvuCASz4ESwH1kMD/FDTZpkPaOllxAFpSsCVEP1j2B8t57
C4C1YYSQdto2BT+JWrvmxwYTet71FIXjqU+sLwaVBoeM/s51hl7YVq7M33Ad0UAv
7SukjuB8yLFp3Tch8b/4EHteQEOGAEJZ3VJcwNWJPZkr6K0vxoUjKKPt8RVfBWs2
ZI6gwYhO/KU2NCtg+EPEnqSu3IGq9MQzu+d2XwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFHXl8dXJpsXKmAY1CPbXQfFKKXMiMB8GA1UdIwQYMBaAFNovRy7d3oArABJo
64PhvtMbJSMjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2U3YThi
NWEwYzE1ODI0ZDZlM2NkMGExNTI4MjIxYTBhN2E0N2NlMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmVlMzExNGMtNGU5MS00YzNmLWI3YzItYzIxZWU2
YTA2MzE2LzMxNjlmMWZjOWI3NDk2MWY2NjRkNzViZjM0MGZlODQyZTkwODIxYzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZWUzMTE0Yy00ZTkxLTRjM2YtYjdjMi1jMjFl
ZTZhMDYzMTYvY2U3YThiNWEwYzE1ODI0ZDZlM2NkMGExNTI4MjIxYTBhN2E0N2Nl
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDdhAAATANBgkqhkiG9w0BAQsFAAOCAQEAQHw7haPmLKgq
JupXeAMfmIyaLfQ/YhLFUmY9SeRjtfttmwCwtssWUAdWxFLHxfmMIAM4yuN1ReIb
dqQ/lPHxdTca1uuFED1xlFSgggOprqZccOghINe8gaS4uWbNgBJPcj4c3xHjmtZ4
YDW+OYzCgQpiUvI3k7LwQxENiatV8wPDRHs0Smw+LT/eLZQc7X2sgz/EjgyRL5dz
95ciXdPOiC5ZARdNL2xppyaAZ5l02BQ/b5MUb5cL3BMdHoSxiB8v4yH1ZqnI9LMz
IN5YvQNYRFCqecYOp/YKJaji2tJX2aU/Ydhznd6VDG9Df8RogbTw5isFrlmvIplU
YFvgskAO8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org