Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/17943ba114a1bf842949a14fab9f8f46a91a4169.roa
File:                     17943ba114a1bf842949a14fab9f8f46a91a4169.roa (raw, json)
Hash identifier:          EaoLplg7VXqyM4dJO9tLkjUyx/7qACvaUdKQ3/fogPY=
Subject key identifier:   10:20:89:BD:33:BF:D4:0E:58:B6:AB:4B:55:D7:AC:80:6D:32:F9:8B
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       111897
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/17943ba114a1bf842949a14fab9f8f46a91a4169.roa
Signing time:             Fri 29 Oct 2021 18:22:56 +0000
ROA not before:           Fri 29 Oct 2021 03:00:00 +0000
ROA not after:            Fri 31 Oct 2025 03:00:00 +0000
asID:                     267829
IP address blocks:        2803:7860::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120407 (0x111897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Oct 29 03:00:00 2021 GMT
            Not After : Oct 31 03:00:00 2025 GMT
        Subject: CN=17943ba114a1bf842949a14fab9f8f46a91a4169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:d1:be:fb:db:aa:1d:3f:13:9a:f5:e0:f6:
                    86:c9:fe:c4:4b:f1:48:59:24:66:86:f3:c7:5c:df:
                    1c:ea:03:f0:1b:a7:1a:eb:82:99:a7:d8:f0:ec:91:
                    8a:f5:27:59:91:95:b5:1b:83:5d:47:f8:81:f9:ef:
                    fe:1d:50:7c:fc:37:32:a7:45:d3:50:45:13:cb:ea:
                    79:6b:4e:66:e5:03:ca:4c:d8:9b:9b:aa:28:73:eb:
                    fc:55:25:09:86:e0:84:3f:04:81:62:be:a9:5d:9b:
                    b7:b2:a4:44:1c:fd:44:28:bf:73:02:6a:5d:f5:6f:
                    29:c6:2a:a3:0f:9f:ea:fd:16:55:ba:a4:9b:a7:d0:
                    40:d7:00:57:6c:00:73:07:10:de:15:cb:1f:93:25:
                    9e:e5:2a:7f:cf:25:38:d5:22:89:ec:7c:31:45:ef:
                    dc:71:3a:68:0e:07:a6:6d:1f:80:b8:83:da:5d:ac:
                    47:86:a0:39:58:38:43:ec:64:34:a7:ff:fb:1b:d5:
                    33:79:05:ea:c8:12:fc:ac:e8:03:35:76:05:35:a8:
                    a9:27:d3:76:cd:4a:73:7f:9e:65:1a:5f:52:f4:ba:
                    4e:91:13:cb:b1:03:3a:a2:ca:89:d9:30:90:89:99:
                    f2:30:3b:f8:45:c9:7f:11:ed:7f:fc:e9:64:db:9b:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:20:89:BD:33:BF:D4:0E:58:B6:AB:4B:55:D7:AC:80:6D:32:F9:8B
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/17943ba114a1bf842949a14fab9f8f46a91a4169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7860::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:49:8b:1e:13:b3:59:31:99:45:8d:06:47:1c:e8:a3:52:2f:
         a0:b4:6a:5c:a6:73:49:c5:d1:a3:43:72:62:d8:a1:19:a5:60:
         a3:0a:2e:5d:71:97:58:68:d6:69:04:8b:a5:51:e7:3e:3d:21:
         38:9d:13:f0:40:d7:8e:35:9e:f3:c0:75:72:67:e1:07:d9:fe:
         74:52:c6:d9:ba:34:c9:b5:82:87:15:6f:7b:3a:ef:c3:ed:76:
         89:d8:32:35:2f:a8:e3:e3:bd:08:46:47:bb:07:57:ab:08:5c:
         7a:26:00:22:d5:1e:23:32:ee:80:f5:17:2e:8a:d4:a8:a6:8b:
         7d:a9:e3:9d:c1:db:0f:de:ca:45:43:87:d4:e7:b6:7b:a0:81:
         2c:86:2b:d9:0b:e3:ec:12:a3:9e:fd:e1:20:1f:76:d9:a0:9e:
         8a:54:79:04:fe:c3:07:0a:05:29:ac:bb:e5:72:68:42:e8:0c:
         78:03:be:dd:0a:9a:7a:39:62:f7:38:03:1e:9a:98:57:d8:60:
         d7:be:2d:f4:72:e7:db:21:80:f6:b5:cb:7d:fa:c9:14:af:3c:
         29:7f:14:4f:d8:4d:72:66:a4:42:c2:1e:b9:21:d4:3c:c6:eb:
         a9:c4:3b:c3:a3:06:7d:4a:24:c3:dc:24:31:f6:c4:48:f5:ed:
         fb:e6:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org