Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/fb46bf8072b1d490cdf5a0ccce331f990a7c8eab.roa
File:                     fb46bf8072b1d490cdf5a0ccce331f990a7c8eab.roa (raw, json)
Hash identifier:          yggOGHqa5EhVWQhZC1YneNZFplGOqthWMDWL/wDVl3Q=
Subject key identifier:   AC:31:06:A2:8F:68:2B:22:DB:35:B2:34:4E:55:33:00:E2:F9:63:02
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       17FC24
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/fb46bf8072b1d490cdf5a0ccce331f990a7c8eab.roa
Signing time:             Sat 29 Apr 2023 08:30:02 +0000
ROA not before:           Fri 28 Apr 2023 08:30:02 +0000
ROA not after:            Sun 27 Apr 2025 08:30:02 +0000
asID:                     271809
IP address blocks:        2803:5ce0:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571876 (0x17fc24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Apr 28 08:30:02 2023 GMT
            Not After : Apr 27 08:30:02 2025 GMT
        Subject: CN=fb46bf8072b1d490cdf5a0ccce331f990a7c8eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:57:25:8c:e9:d6:c2:67:7f:4b:22:18:e3:
                    bb:c4:ee:99:6f:8d:38:4a:ba:9e:3e:31:cd:02:12:
                    15:40:84:bb:26:f0:a2:76:f1:95:3c:7f:43:82:2e:
                    43:1c:1f:07:c7:71:e6:35:f1:0d:f7:d0:72:65:28:
                    f6:d2:dc:96:57:2c:ea:5c:ea:f5:67:0d:c5:a2:ea:
                    5e:2c:1a:ca:73:14:c0:4f:c5:9d:0f:12:4b:9d:ae:
                    72:2e:c4:62:a7:e2:6b:1a:6d:b4:2e:0e:8e:3d:b5:
                    e9:19:31:61:25:d3:93:c5:0c:d6:6e:18:2e:f4:91:
                    1b:c1:6e:0f:39:7e:b4:49:6b:94:de:c8:74:3c:24:
                    5e:dd:7e:6c:82:99:ac:93:5a:05:78:1e:12:25:09:
                    d5:05:df:8e:8c:be:5f:64:45:90:cb:0e:07:66:f2:
                    0f:4b:44:ec:f9:4f:42:38:ae:82:ad:6a:7a:b9:07:
                    bc:65:0a:f1:2b:01:55:9d:83:ab:85:cf:b2:c9:99:
                    5a:fb:11:41:0e:e4:0e:24:9a:f1:9b:67:d2:72:3b:
                    82:99:87:46:ae:0c:97:7e:48:28:66:68:b5:e2:32:
                    fc:e0:d9:81:74:82:c5:e5:af:5a:1e:00:be:a2:c0:
                    ea:ac:8d:39:65:ef:0e:a0:04:62:d9:d4:3b:42:bb:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:31:06:A2:8F:68:2B:22:DB:35:B2:34:4E:55:33:00:E2:F9:63:02
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/fb46bf8072b1d490cdf5a0ccce331f990a7c8eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:71:8c:ab:6f:5f:49:70:77:ed:18:dc:6e:8c:0e:14:d4:e8:
         05:ff:b3:d6:d9:db:32:26:92:4e:e8:9b:ea:de:c8:cf:c5:b3:
         db:be:80:94:bb:cc:f7:10:e7:42:98:0e:ce:99:69:5a:7e:7e:
         b7:57:80:ac:bf:74:3d:f0:67:88:ab:49:2c:8f:20:3a:2f:eb:
         7e:98:65:99:a4:b5:b1:14:2d:7a:06:8d:47:d1:8e:80:13:29:
         17:9c:94:c5:66:0c:0c:4c:ca:61:30:b0:bb:4e:71:a3:ef:cf:
         79:91:85:e3:36:a4:5d:28:95:7b:e6:47:0c:c1:4c:2a:eb:dd:
         41:bf:c1:bd:3f:a2:78:d4:15:21:e2:f8:51:23:94:b7:93:39:
         ca:c8:3e:56:68:33:ac:d0:ab:f6:aa:19:ac:02:bc:53:ef:25:
         e6:11:08:0d:d7:58:6f:de:42:b2:c4:27:d7:bf:7e:f1:66:80:
         19:b0:bd:62:18:d7:8b:35:1b:54:58:38:2f:31:70:f6:1a:c8:
         71:d1:70:38:17:85:25:bf:ce:6c:f1:b5:5b:a3:02:e4:de:61:
         32:c0:eb:11:e4:fe:9a:23:e7:31:80:26:df:d2:55:d0:01:3f:
         5c:fb:2e:38:02:2f:ba:98:5e:70:b7:04:1e:26:af:a1:e9:f1:
         2d:01:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org