Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/00427c05ee532f5551593c45b0bef74ff8a6cfea.roa
File:                     00427c05ee532f5551593c45b0bef74ff8a6cfea.roa (raw, json)
Hash identifier:          LphHsXBm8x1fXq4k3s3JcgtLQ9tYr0DVo0hFsw+J/QQ=
Subject key identifier:   DA:C7:7E:73:A5:3A:61:1A:6F:EA:DE:60:6E:D5:DA:6D:13:F7:F9:23
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       17A8DE
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/00427c05ee532f5551593c45b0bef74ff8a6cfea.roa
Signing time:             Tue 10 May 2022 02:39:22 +0000
ROA not before:           Mon 09 May 2022 03:00:00 +0000
ROA not after:            Thu 09 May 2024 03:00:00 +0000
asID:                     271933
IP address blocks:        2803:2540:13::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550558 (0x17a8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: May  9 03:00:00 2022 GMT
            Not After : May  9 03:00:00 2024 GMT
        Subject: CN=00427c05ee532f5551593c45b0bef74ff8a6cfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:e8:2a:7c:a1:b9:be:87:59:4f:86:ac:45:
                    15:d2:9a:83:3b:0d:bc:a6:72:3e:06:39:38:d9:a2:
                    d3:0a:e2:fa:25:1f:fb:c2:0f:14:4c:7e:66:b1:d2:
                    fa:53:aa:6d:ba:bf:0b:8c:5f:64:03:bc:f1:11:56:
                    61:07:8a:c5:cb:35:ac:17:c4:41:4b:29:ac:cb:12:
                    96:ec:cb:43:27:3b:da:db:57:1a:aa:41:31:ad:ef:
                    85:9d:a5:ac:dd:6f:2f:c1:1a:3f:28:d6:e9:51:9d:
                    83:8c:a5:6c:83:29:eb:89:a8:52:3b:20:3c:2f:1f:
                    fd:c0:17:17:3d:96:bd:de:d9:a0:b3:4a:9f:ba:92:
                    d6:92:54:ff:ae:38:74:16:7e:89:b7:97:32:10:60:
                    a0:78:11:c4:bd:5a:04:97:08:86:e6:21:e8:8d:d2:
                    c1:34:0a:85:5b:c7:15:4d:63:db:4a:84:8e:5d:c7:
                    0c:48:32:5c:1c:b9:71:5e:b7:75:59:fd:b4:81:68:
                    e2:a3:15:66:9b:26:13:ad:3f:50:84:54:a4:26:4a:
                    51:06:f2:84:80:4e:ea:0e:93:42:17:10:24:13:74:
                    f0:f6:0b:e2:b9:18:28:34:80:d8:6f:52:8a:d3:7b:
                    b9:3a:5d:b0:cf:d8:df:d2:ba:7f:ab:35:c4:0f:65:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C7:7E:73:A5:3A:61:1A:6F:EA:DE:60:6E:D5:DA:6D:13:F7:F9:23
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/00427c05ee532f5551593c45b0bef74ff8a6cfea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:36:02:98:49:d9:91:99:94:29:e7:8a:30:06:31:76:15:
         c5:57:8d:88:3a:21:be:45:b6:31:75:55:e3:c8:b2:f1:3b:34:
         45:9a:35:6f:b7:80:26:46:2d:a3:ba:a6:f4:1f:32:fe:f0:82:
         be:5f:20:c6:01:80:cf:a0:8e:2c:92:04:0b:a0:ce:35:76:55:
         ef:10:ea:34:71:fc:bc:54:30:41:c5:6f:c6:d2:b9:a6:2b:95:
         30:4d:ca:b7:74:4e:2b:46:6e:fb:b6:cb:55:45:97:0d:f0:3e:
         f8:03:19:bd:ea:c3:c0:72:5a:32:f0:8e:3b:9e:3d:c3:af:4a:
         ae:90:c5:29:c1:a0:9b:d0:7a:8b:78:8b:5b:76:25:85:38:d4:
         0d:a8:28:da:a4:32:0a:9a:3a:91:eb:df:2b:0d:a3:67:37:b6:
         82:02:b7:78:e6:5c:ca:9c:59:7f:86:b8:cd:b6:e7:f7:1e:dd:
         f1:74:23:d2:54:e9:b8:86:13:04:89:d4:2c:15:9d:c2:83:69:
         3a:9c:4d:c6:34:5a:c7:2a:d6:ae:e1:cd:a1:47:ae:0a:b1:6a:
         b1:33:3e:06:4f:dd:bf:de:aa:66:e2:3c:1f:82:df:40:52:b2:
         43:5f:0b:1b:c5:ee:a5:21:4f:60:b0:3f:2d:d0:65:e9:0c:66:
         0b:04:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org