Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/519e9c48ced41845a05e6e5930fe35ce9588403b.roa
File:                     519e9c48ced41845a05e6e5930fe35ce9588403b.roa (raw, json)
Hash identifier:          GCxDfbyjZP3JxGL+cOB4UrjrHxRYvFxKS+HYmlYy0GU=
Subject key identifier:   72:4B:8B:48:84:C6:63:7F:30:F5:AF:02:FF:0E:AF:17:1D:2B:80:B0
Certificate issuer:       /CN=9bb023dfb8c7391beb7a21f28cbab58003195488
Certificate serial:       1689EC
Authority key identifier: 07:42:66:DF:39:FB:E6:4F:E9:DC:83:5C:28:C3:EB:26:EF:E4:0A:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bb023dfb8c7391beb7a21f28cbab58003195488.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/519e9c48ced41845a05e6e5930fe35ce9588403b.roa
Signing time:             Mon 27 Nov 2023 15:10:54 +0000
ROA not before:           Mon 27 Nov 2023 15:10:54 +0000
ROA not after:            Thu 27 Nov 2025 15:10:54 +0000
asID:                     52493
IP address blocks:        2803:5880::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477100 (0x1689ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb023dfb8c7391beb7a21f28cbab58003195488
        Validity
            Not Before: Nov 27 15:10:54 2023 GMT
            Not After : Nov 27 15:10:54 2025 GMT
        Subject: CN=519e9c48ced41845a05e6e5930fe35ce9588403b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:e4:41:24:ea:47:6a:bc:56:13:07:e7:b9:
                    02:d9:ed:51:d5:84:38:10:c6:f1:5a:b3:04:7c:0a:
                    6f:98:5e:12:11:28:16:44:b9:00:04:a5:5d:ec:90:
                    bb:b0:7b:7a:5e:7b:54:c1:36:ef:16:94:13:28:52:
                    ba:45:12:09:44:7a:11:a2:35:bf:60:fd:c1:81:89:
                    38:1a:bf:bc:53:d0:52:34:59:31:33:f4:50:9e:08:
                    f8:dc:b0:8b:89:5d:06:48:0c:93:84:d5:6b:c7:c4:
                    46:95:0b:ea:6a:4e:60:9a:4f:a8:14:4d:60:fe:69:
                    fb:b6:58:4c:40:7c:78:1c:8c:35:88:cd:f1:48:17:
                    02:5e:c2:bd:28:1b:ed:f1:98:21:ac:ff:fc:8d:f4:
                    7f:61:9b:d3:61:09:e4:67:d8:51:f4:99:0f:5f:1c:
                    3d:bb:c0:c0:ab:e1:b5:58:45:6c:56:3a:16:b4:4c:
                    31:ec:a5:54:f5:2b:ea:e7:62:99:2f:37:76:7a:de:
                    91:d9:2d:23:b7:65:f9:99:5d:f8:c3:79:6a:2f:84:
                    03:2a:3f:8f:d5:2a:53:c5:6d:54:6d:a9:32:4b:fa:
                    b7:06:e9:d7:26:fe:f4:8d:2d:1f:fa:54:24:79:4a:
                    5e:07:a3:92:ec:8e:67:13:58:34:d7:30:02:11:0d:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4B:8B:48:84:C6:63:7F:30:F5:AF:02:FF:0E:AF:17:1D:2B:80:B0
            X509v3 Authority Key Identifier:
                keyid:07:42:66:DF:39:FB:E6:4F:E9:DC:83:5C:28:C3:EB:26:EF:E4:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bb023dfb8c7391beb7a21f28cbab58003195488.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/519e9c48ced41845a05e6e5930fe35ce9588403b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/9bb023dfb8c7391beb7a21f28cbab58003195488.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5880::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:8e:d8:01:7b:5c:a2:45:b0:55:dc:34:a8:42:fa:c2:22:18:
         46:02:0a:ca:72:3f:06:05:57:05:e9:3b:7f:f1:58:50:aa:73:
         54:50:5d:75:0f:ef:b8:5b:e8:4c:3b:71:29:bc:23:2c:04:6a:
         df:e4:c7:34:90:a8:85:22:34:32:ba:3c:aa:ed:aa:4b:a4:0d:
         d7:9d:6b:e2:41:50:75:c8:49:aa:c3:aa:6d:10:dc:17:0f:e1:
         12:52:3c:32:40:8b:6d:04:de:c1:3c:47:68:8f:6e:5a:3a:d0:
         8e:5c:5e:db:00:70:64:38:72:ab:19:8b:9e:96:37:78:a7:cd:
         c3:b6:a2:31:05:ff:9a:70:89:c5:78:64:26:08:99:c4:10:13:
         0d:f3:08:46:17:f5:3c:78:37:aa:6c:66:c6:c6:38:c6:6b:79:
         33:31:d9:3c:ff:d9:93:19:9f:e5:ff:34:37:bb:1c:e0:d6:ef:
         d9:20:19:6b:91:c5:06:85:7e:1b:ba:e4:d0:e6:4e:1c:e8:1f:
         c5:e4:1c:74:2a:1e:c8:f6:83:52:4f:ee:28:24:68:f2:7f:cc:
         3b:71:b5:52:f4:ff:d5:40:a7:c7:c0:f5:34:4c:90:7f:e5:01:
         21:e4:95:fe:d0:66:74:76:ed:46:fe:fa:ca:23:fd:5b:d5:3b:
         13:81:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org