Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/81e0efe1cd6adccf8fa6c7b74f4cd302484895c5.roa
File:                     81e0efe1cd6adccf8fa6c7b74f4cd302484895c5.roa (raw, json)
Hash identifier:          5lQws4KWsO7/oz5T5xrS2VYroErVqIj2EJ2rhZGJELI=
Subject key identifier:   D0:37:A0:A8:A8:78:CF:B1:33:47:40:76:D9:05:AE:20:F9:6B:69:57
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       203322
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/81e0efe1cd6adccf8fa6c7b74f4cd302484895c5.roa
Signing time:             Tue 14 Mar 2023 18:05:34 +0000
ROA not before:           Sun 25 Dec 2022 15:07:53 +0000
ROA not after:            Wed 29 Dec 2027 15:07:53 +0000
asID:                     272121
IP address blocks:        2803:2220::/33 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110242 (0x203322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Dec 25 15:07:53 2022 GMT
            Not After : Dec 29 15:07:53 2027 GMT
        Subject: CN=81e0efe1cd6adccf8fa6c7b74f4cd302484895c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:df:aa:29:62:41:da:59:b1:cb:3c:17:69:
                    2c:9a:5c:7a:8c:e0:1f:93:3c:90:50:ac:9f:2c:86:
                    1d:cb:76:29:10:fd:26:db:d9:23:cb:03:c9:f1:36:
                    ab:60:a8:6a:54:7b:36:f3:70:ee:be:3d:81:95:94:
                    7f:9e:bd:9f:98:98:e6:51:49:5f:ac:b0:5b:bd:fb:
                    21:78:71:e7:23:95:80:5d:f8:02:72:12:c3:4a:48:
                    af:25:9a:96:ca:ef:3f:e0:31:a8:28:f9:9c:e6:71:
                    c4:9b:85:f1:3d:86:34:dd:cd:e4:4f:8a:5c:8d:3f:
                    f3:c2:0e:32:34:77:1f:2c:0b:e6:fc:da:b2:bb:95:
                    ea:27:fb:fe:07:1a:ff:10:6c:45:ee:66:5c:8b:61:
                    40:24:de:6c:29:bb:76:dd:4a:66:5f:c8:1c:89:ed:
                    16:a6:8a:c7:02:10:6e:9a:e0:e6:d1:8b:b5:e9:a0:
                    22:0e:10:d7:84:9e:83:cc:aa:8b:00:39:97:d2:98:
                    95:75:b2:86:e4:29:f8:44:bc:71:7a:18:7c:72:90:
                    66:57:75:2f:45:c4:c5:cf:4a:95:76:6d:00:29:e9:
                    f9:e6:c0:6d:b9:5f:f9:f9:14:bd:f3:af:6d:e4:14:
                    6b:76:a2:7a:a9:78:ce:78:33:ac:f4:37:fb:27:5e:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:37:A0:A8:A8:78:CF:B1:33:47:40:76:D9:05:AE:20:F9:6B:69:57
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/81e0efe1cd6adccf8fa6c7b74f4cd302484895c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220::/33

    Signature Algorithm: sha256WithRSAEncryption
         45:ca:99:99:97:1c:a6:8d:e5:3e:74:be:cf:52:77:d3:66:3c:
         9f:40:8c:ca:0b:4f:48:25:10:1c:51:02:c4:bd:d2:94:21:55:
         00:cf:a3:be:aa:10:f8:dd:fa:5c:d0:5f:69:99:0c:7b:88:29:
         3c:9f:e0:06:8b:76:ed:43:48:fd:7a:75:03:33:0f:bc:1b:cf:
         61:57:0d:e6:de:68:1f:22:83:8f:bd:08:c1:18:18:4f:dc:92:
         8f:5b:ab:ed:16:8f:5c:b8:74:87:8b:ef:ea:72:02:84:34:6e:
         c9:32:10:ad:f5:5f:4b:9d:f9:9b:e4:17:ad:fe:0f:e4:f5:9c:
         7a:4a:71:03:29:1d:9a:6a:7e:e1:a8:46:b5:8b:cd:a5:7e:4b:
         8f:96:65:1b:59:73:21:51:a0:a3:3d:3a:1a:63:9c:59:9b:37:
         6d:b0:11:e9:c6:aa:94:8b:ba:f2:8f:17:48:79:da:87:89:cb:
         4d:f0:51:47:97:36:01:ba:b3:41:c1:52:f2:0f:58:82:9d:77:
         b2:c3:97:20:09:30:4e:98:7c:60:d1:0d:99:71:cd:72:ee:7c:
         39:7e:ad:75:0e:99:08:e3:a2:73:41:25:65:b5:08:6a:19:fc:
         e8:45:f6:7c:a4:9b:97:df:ca:97:e7:d0:60:30:3a:6a:61:44:
         d7:ca:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org