Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/830b1626-0393-4f23-94d0-529ef5e1adcc/7d58c4f96db28e735880b99e75cc2c8a52f7f420.roa
File:                     7d58c4f96db28e735880b99e75cc2c8a52f7f420.roa (raw, json)
Hash identifier:          nU9oyp2kdlXMu3tXsrZCyXrGTyltiBRQBkGj39voKFw=
Subject key identifier:   97:6F:A9:E2:4C:05:74:72:3E:BE:7A:7F:4D:78:B2:92:5B:E3:89:BA
Certificate issuer:       /CN=849653be4263556bf853cd5be59595d8a2b8b7de
Certificate serial:       01385B
Authority key identifier: A3:7E:04:FD:54:1F:A8:BD:7C:AC:14:AC:BA:0A:AA:4F:8F:52:0D:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/849653be4263556bf853cd5be59595d8a2b8b7de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/830b1626-0393-4f23-94d0-529ef5e1adcc/7d58c4f96db28e735880b99e75cc2c8a52f7f420.roa
Signing time:             Mon 26 Dec 2022 15:29:31 +0000
ROA not before:           Sun 06 Nov 2022 19:31:53 +0000
ROA not after:            Fri 08 Nov 2024 19:31:53 +0000
asID:                     272920
IP address blocks:        2801:1c9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79963 (0x1385b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849653be4263556bf853cd5be59595d8a2b8b7de
        Validity
            Not Before: Nov  6 19:31:53 2022 GMT
            Not After : Nov  8 19:31:53 2024 GMT
        Subject: CN=7d58c4f96db28e735880b99e75cc2c8a52f7f420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:1a:49:f8:54:f2:71:90:25:7a:bc:02:d6:
                    4f:90:1e:23:c2:04:49:6b:3e:b4:e6:9a:6b:b7:76:
                    4b:21:a3:45:a5:8f:07:0e:7d:c2:5b:9a:4d:f8:0b:
                    46:2b:f8:32:72:a5:13:d4:08:fe:8e:2f:4e:70:d7:
                    29:83:f3:fb:00:60:8f:91:c1:2f:60:f1:8e:d5:74:
                    88:43:c4:70:98:96:cf:98:c4:67:ca:24:bf:f8:5e:
                    ba:fd:3e:34:28:91:c6:ef:9a:80:ba:c6:0b:35:5a:
                    4c:0d:c6:1b:ea:e5:d8:88:08:90:1b:36:b0:5a:32:
                    8f:e8:3c:c8:4f:fb:f4:70:08:32:e8:23:c7:f2:cb:
                    6a:5c:be:8b:65:04:91:e0:20:e8:59:8d:24:cb:dc:
                    b3:ad:78:3f:8a:e4:cf:af:bb:81:58:57:11:46:a3:
                    20:97:68:f3:4f:22:ef:40:47:44:b9:1b:fa:29:41:
                    b0:df:b9:b3:73:de:87:6a:db:53:2c:67:d6:94:20:
                    ce:28:fa:f6:64:a8:f1:cd:b3:5a:cf:e8:57:1e:fd:
                    28:aa:af:14:b7:ed:fb:87:52:0b:a6:bb:00:08:0e:
                    91:ae:e8:e6:17:4b:c1:a5:ff:92:67:50:90:1a:5e:
                    62:cb:79:49:76:ba:d4:45:ce:dd:33:7e:e2:72:3b:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6F:A9:E2:4C:05:74:72:3E:BE:7A:7F:4D:78:B2:92:5B:E3:89:BA
            X509v3 Authority Key Identifier:
                keyid:A3:7E:04:FD:54:1F:A8:BD:7C:AC:14:AC:BA:0A:AA:4F:8F:52:0D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/849653be4263556bf853cd5be59595d8a2b8b7de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/830b1626-0393-4f23-94d0-529ef5e1adcc/7d58c4f96db28e735880b99e75cc2c8a52f7f420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/830b1626-0393-4f23-94d0-529ef5e1adcc/849653be4263556bf853cd5be59595d8a2b8b7de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c9::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:9a:02:92:2d:de:e5:04:3b:c0:3f:19:2a:71:e3:ee:43:4e:
         dd:fe:e5:f5:8d:d7:4c:eb:06:6b:80:df:6f:a4:3f:59:6a:15:
         fd:e7:cb:18:15:9e:6b:d4:6e:2a:0b:3f:5f:bc:88:52:7a:51:
         07:ff:b5:9c:89:c4:ec:9b:52:16:62:7c:65:a8:15:a0:92:88:
         c6:2b:6f:2d:13:12:4e:a3:cc:76:91:b9:a4:5d:30:bb:7d:55:
         04:b8:5c:99:85:51:da:31:0a:30:4e:1a:6f:43:96:79:ff:01:
         03:5d:bf:d4:bc:a9:8e:1d:b0:b2:4a:e1:99:28:d4:bc:10:5d:
         29:37:15:d2:f4:c9:a9:25:c5:b9:cb:2d:d7:f1:81:41:91:58:
         61:c3:84:1f:2c:ae:6e:4c:63:68:b3:19:84:c0:da:31:61:3e:
         7c:70:59:1b:4f:de:db:f3:e4:e9:0a:bd:92:8e:55:02:3b:65:
         ab:83:e3:99:dd:3b:33:85:d3:73:30:09:08:24:7d:15:22:e3:
         0c:06:de:97:6a:47:34:4c:40:9a:29:13:f6:56:b8:c4:2f:a5:
         b8:90:29:23:e4:1a:9e:fc:f3:cd:03:be:2d:ef:94:31:cc:21:
         65:5f:f8:c8:dd:85:d9:f2:85:b0:5a:1d:93:06:82:0f:3b:4b:
         2f:58:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org