Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/6f8d121e91b3cce4d17408932a6ed8b27ce958a1.roa
File:                     6f8d121e91b3cce4d17408932a6ed8b27ce958a1.roa (raw, json)
Hash identifier:          5c0lTnnBPFA56iT2vrVqdHgVPzw3cEadzrmgnIvdguc=
Subject key identifier:   66:CF:BC:73:B3:7F:18:5F:A9:82:50:37:A3:09:CB:08:98:E2:53:0A
Certificate issuer:       /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial:       0DAD40
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/6f8d121e91b3cce4d17408932a6ed8b27ce958a1.roa
Signing time:             Wed 24 Mar 2021 14:47:43 +0000
ROA not before:           Wed 24 Mar 2021 14:47:41 +0000
ROA not after:            Tue 24 Mar 2026 14:47:41 +0000
asID:                     264660
IP address blocks:        2803:3c40::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896320 (0xdad40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
        Validity
            Not Before: Mar 24 14:47:41 2021 GMT
            Not After : Mar 24 14:47:41 2026 GMT
        Subject: CN=6f8d121e91b3cce4d17408932a6ed8b27ce958a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:a5:9d:8b:88:7d:68:13:5f:85:b7:5d:95:
                    c4:95:73:f6:a9:e2:0b:86:c7:d8:6b:fa:72:cc:9b:
                    1e:0c:74:72:4c:5c:23:c2:04:2f:1f:cd:cc:41:77:
                    99:0a:d6:39:19:b2:88:06:72:1c:d6:12:52:68:5c:
                    12:e3:f1:57:19:46:70:74:33:e9:57:d1:74:e2:63:
                    0c:91:e4:68:3c:ef:44:61:b1:6a:01:10:56:65:51:
                    79:ba:24:8c:c8:48:5f:73:a0:ed:ed:90:55:d6:49:
                    50:08:33:46:cb:46:13:96:71:04:33:64:f0:54:33:
                    3e:08:13:4d:77:36:50:bc:36:72:1e:2a:46:de:0d:
                    9b:ae:8d:1e:84:36:9a:56:a3:e9:0c:ce:ab:58:ac:
                    7a:e7:c9:14:f6:c7:0b:8a:f0:1c:bf:b9:59:5e:5b:
                    82:e3:61:16:04:20:08:f0:41:03:bf:3b:3f:a3:65:
                    54:65:12:7e:be:7f:eb:87:21:47:58:0d:d7:67:b5:
                    45:dd:ae:e7:2a:47:17:ff:5b:e6:06:67:a4:00:a6:
                    71:4f:a6:34:be:89:d1:24:1b:31:fc:06:79:68:81:
                    69:c5:7e:c9:34:de:46:79:05:b3:d7:01:f7:d9:63:
                    ae:88:40:2e:c4:54:8f:9e:ea:ca:0b:d9:a2:d0:4b:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CF:BC:73:B3:7F:18:5F:A9:82:50:37:A3:09:CB:08:98:E2:53:0A
            X509v3 Authority Key Identifier:
                keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/6f8d121e91b3cce4d17408932a6ed8b27ce958a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c40::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:49:d2:df:6f:9d:ec:6e:88:95:4c:7c:14:77:68:23:fc:b8:
         dc:b9:8e:25:30:36:71:4c:63:e1:54:0e:00:de:dd:13:47:35:
         58:a9:77:58:8b:05:71:99:9c:be:36:61:3c:94:af:61:e2:8e:
         99:63:62:78:d8:90:2d:5b:c2:b6:55:b9:72:34:e8:dc:1d:79:
         b7:37:b6:6e:71:2d:c6:60:c3:b7:60:32:11:18:95:95:a4:8f:
         01:a3:07:b4:5d:93:08:ed:df:e0:6d:23:d4:c2:cb:3c:fc:72:
         f3:ac:0b:45:60:99:d4:01:fe:88:a2:7c:25:7e:2e:8b:f8:67:
         c2:95:76:21:0a:5f:9e:7d:b2:d1:c8:1e:9b:f7:c0:c3:aa:53:
         dd:96:5b:aa:d1:25:80:5d:1c:c7:fa:48:40:36:fb:a9:79:c8:
         2c:dc:d9:a4:ca:fa:cf:fd:03:eb:56:b8:d5:e6:0f:70:68:eb:
         94:fd:18:ab:f3:97:32:26:61:b8:4b:b6:3e:5b:47:34:58:f7:
         d6:5b:18:2c:a7:5f:cb:11:6a:42:e1:95:74:18:36:26:35:55:
         33:34:a5:e1:79:97:4b:8b:52:c0:6b:e3:c1:11:c7:7c:d0:bb:
         03:3f:cf:d2:ce:e7:88:bb:31:6c:f9:83:0f:40:7d:2c:e6:dc:
         58:6e:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org