Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/07a2940a3ef3d95ff4346bca1e5c3357b5e7b210.roa
File:                     07a2940a3ef3d95ff4346bca1e5c3357b5e7b210.roa (raw, json)
Hash identifier:          fg3sThwrcLGLFvMAjE06YTk8AOICbcia/9HrHbsW/r0=
Subject key identifier:   7D:A8:21:5C:DB:98:5C:0E:1F:9D:24:C7:F4:6D:EA:1F:00:44:E4:1D
Certificate issuer:       /CN=817a536b86ea7256ab7c344eee7cb72670fc8a1e
Certificate serial:       182747
Authority key identifier: D7:C9:E7:54:2F:28:E6:C6:8B:5F:40:C0:AB:34:59:AA:3F:38:6C:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817a536b86ea7256ab7c344eee7cb72670fc8a1e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/07a2940a3ef3d95ff4346bca1e5c3357b5e7b210.roa
Signing time:             Wed 24 Jan 2024 14:37:41 +0000
ROA not before:           Wed 24 Jan 2024 14:37:41 +0000
ROA not after:            Wed 24 Jan 2029 14:37:41 +0000
asID:                     52493
IP address blocks:        2803:5880::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582919 (0x182747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817a536b86ea7256ab7c344eee7cb72670fc8a1e
        Validity
            Not Before: Jan 24 14:37:41 2024 GMT
            Not After : Jan 24 14:37:41 2029 GMT
        Subject: CN=07a2940a3ef3d95ff4346bca1e5c3357b5e7b210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d7:a5:37:1b:49:5d:cb:4f:a0:d0:5f:70:ad:
                    e5:dc:56:0a:55:25:df:86:36:9f:1c:2f:ad:f0:6e:
                    34:47:e8:12:56:39:0b:8d:0c:6c:50:bb:6b:8a:66:
                    8c:08:d8:d4:00:6a:1e:0f:e7:ac:4b:34:62:f3:f1:
                    0a:78:02:65:5c:d3:6a:4d:d1:9e:54:94:de:19:45:
                    16:e9:1c:83:31:c7:86:54:a8:3f:51:01:62:e4:d2:
                    97:dd:8c:b9:ab:73:06:df:b7:fd:5c:a4:ac:c5:85:
                    f9:44:90:6e:1a:22:09:4f:46:ed:a5:32:c2:04:44:
                    36:19:d5:de:a8:35:49:ed:a3:fd:94:99:18:8e:82:
                    f0:13:5b:dd:5e:f4:35:a6:22:83:8f:58:31:96:40:
                    63:20:fe:96:ee:5d:01:5a:95:53:0a:bc:1a:13:ee:
                    57:d1:58:19:4f:02:09:fd:a2:30:0f:11:ce:d8:34:
                    7d:79:1e:3d:d5:dc:91:23:39:ed:cd:0a:6b:57:eb:
                    5a:ca:fe:dc:01:a9:c7:01:7c:d0:69:97:3a:95:e4:
                    db:16:d1:3e:8d:bc:c1:90:18:bf:c0:3e:98:0f:56:
                    12:b7:a6:30:c1:95:16:f0:1e:a9:28:b8:0d:5e:85:
                    30:b7:16:2d:79:7f:c5:14:13:3d:92:ff:53:aa:28:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A8:21:5C:DB:98:5C:0E:1F:9D:24:C7:F4:6D:EA:1F:00:44:E4:1D
            X509v3 Authority Key Identifier:
                keyid:D7:C9:E7:54:2F:28:E6:C6:8B:5F:40:C0:AB:34:59:AA:3F:38:6C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817a536b86ea7256ab7c344eee7cb72670fc8a1e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/07a2940a3ef3d95ff4346bca1e5c3357b5e7b210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/817a536b86ea7256ab7c344eee7cb72670fc8a1e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5880::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:82:45:fd:37:3f:9e:f1:35:05:93:0f:a7:47:a7:9d:ad:
         3d:a4:40:cd:cb:e3:db:5e:89:e0:99:88:b6:7b:d5:d4:fb:c1:
         c6:b7:08:b9:5f:59:a3:29:b9:d1:4f:89:05:b2:92:6c:af:fa:
         6d:e9:63:25:6c:f0:86:62:54:93:d5:31:bf:73:81:c4:0c:7c:
         13:da:b3:51:22:f6:84:19:06:22:c1:70:7d:06:86:59:a0:65:
         3e:e3:77:c8:39:23:b8:cc:d9:83:82:a0:78:bd:e0:69:c8:97:
         ba:25:8c:19:50:c8:bd:55:85:ad:7f:08:cf:b2:48:37:91:ec:
         92:ae:3c:6e:99:27:52:00:27:c4:13:92:d2:c2:71:c6:58:c2:
         da:68:c0:e9:6e:b4:7f:af:53:71:5a:97:56:a9:d7:3f:69:5e:
         c4:d8:a8:a8:a7:8d:43:6c:10:e5:7e:de:48:4b:d2:fe:41:17:
         21:a8:8f:f3:f6:f0:a9:13:4f:06:85:85:66:ac:c2:ad:43:5e:
         b4:d0:1b:cc:63:64:72:b8:f6:63:d1:a8:4f:b2:71:fb:ab:97:
         8f:de:32:75:94:42:9a:20:b1:11:25:b2:0f:e3:22:0d:f0:15:
         4d:25:c4:1f:5d:be:2a:2b:9d:94:8a:d0:c0:5e:53:38:02:d0:
         df:a3:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org