Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/7845da20bba0ccec7674fe4a26e5160eca5376d2.roa
File:                     7845da20bba0ccec7674fe4a26e5160eca5376d2.roa (raw, json)
Hash identifier:          SYi1Nk8p724BuXNt6Tq0hiO2oDDwaMTETMLp1A8u1pQ=
Subject key identifier:   3F:84:C7:C6:27:09:89:1A:B1:02:5C:90:0B:10:40:C4:2E:A3:17:76
Certificate issuer:       /CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
Certificate serial:       0891
Authority key identifier: D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/7845da20bba0ccec7674fe4a26e5160eca5376d2.roa
Signing time:             Fri 04 Mar 2022 15:25:12 +0000
ROA not before:           Fri 04 Mar 2022 03:00:00 +0000
ROA not after:            Mon 04 Mar 2024 03:00:00 +0000
asID:                     271835
IP address blocks:        2803:1810::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
        Validity
            Not Before: Mar  4 03:00:00 2022 GMT
            Not After : Mar  4 03:00:00 2024 GMT
        Subject: CN=7845da20bba0ccec7674fe4a26e5160eca5376d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:59:32:35:18:15:b1:a9:2d:a7:6c:44:90:
                    8c:70:ac:e2:07:b4:8b:4f:0a:07:af:a9:df:e1:fb:
                    27:af:6a:c8:a0:61:01:ed:a6:b0:4e:8b:f3:7c:6a:
                    aa:2e:c6:f9:26:c3:a4:08:c8:60:e0:e5:28:d4:e4:
                    59:94:fc:7f:9a:92:8c:05:f7:7e:ac:81:3d:78:b6:
                    97:a9:58:dd:2a:b0:4c:db:24:0e:fd:b8:55:71:f4:
                    2c:43:a3:3d:b0:1c:01:df:51:2c:51:09:2c:21:18:
                    d0:fb:81:17:22:c8:6f:4a:f9:9b:cd:51:53:09:5d:
                    a0:f4:94:11:7c:6a:1f:e5:14:84:53:9d:0c:cc:bb:
                    e0:1c:56:ae:4a:5d:61:b8:73:ce:b2:38:96:e9:a6:
                    94:0e:c3:5e:7e:e6:17:5b:6e:07:50:a2:bc:60:3e:
                    35:d3:59:21:4f:6a:1f:f1:16:34:c5:52:fd:05:eb:
                    f6:bc:77:69:ba:c2:55:48:d1:d8:f8:f7:c6:d1:2a:
                    44:d1:ed:d1:ba:fd:2d:8c:4b:b3:49:40:55:37:82:
                    18:53:6d:38:51:16:85:c7:3d:13:fa:26:0e:49:97:
                    f4:e0:e1:46:34:f9:68:0e:40:3c:34:09:d6:21:4c:
                    94:35:e4:e0:cf:43:bf:0c:e5:26:a5:06:bd:eb:99:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:84:C7:C6:27:09:89:1A:B1:02:5C:90:0B:10:40:C4:2E:A3:17:76
            X509v3 Authority Key Identifier:
                keyid:D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/7845da20bba0ccec7674fe4a26e5160eca5376d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5a93fb330793d475d283f90d1a40a536c6ec17d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1810::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:b5:34:e8:73:57:db:c7:77:44:ff:8f:a4:1d:0a:e9:93:
         8f:0a:2d:d5:f7:b1:eb:2a:7a:07:93:95:5a:3d:52:a2:0c:9c:
         68:8a:ed:c7:2b:46:ad:31:a3:a0:4a:64:fd:ac:c3:17:33:cd:
         7e:98:49:0c:30:2b:12:3d:10:75:e7:fe:59:f8:93:f3:d8:c6:
         1c:e1:6b:8c:e6:fa:cd:c1:b2:ce:56:6b:b4:83:dd:05:28:fd:
         02:08:0f:f3:e4:b6:f6:ad:95:41:67:37:b3:a3:48:69:08:75:
         b5:d2:63:0b:37:ab:ee:30:ef:9f:dc:cb:d9:cb:44:59:f4:4e:
         b3:77:a7:fa:a8:99:98:01:78:ab:f3:9d:ee:63:ee:c6:53:45:
         d0:db:08:9d:01:1a:27:c3:ff:43:47:b9:a9:30:43:76:9f:9e:
         a3:e8:0e:6a:97:9d:bf:5f:7c:6f:3c:b8:d7:f9:b2:c1:d7:3a:
         26:c3:fb:7b:0c:a0:3a:c1:fe:e0:65:cc:ef:cb:8a:94:2a:7a:
         4b:a2:b5:be:d7:33:32:9b:33:bb:88:6d:4d:29:92:f4:d5:85:
         e5:63:1b:26:d2:60:d5:ef:20:ae:96:6d:25:51:9f:86:a0:12:
         fc:ff:34:47:e3:1c:b9:ea:ac:f3:6f:6d:18:b9:07:5c:44:c6:
         74:d4:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org