Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/40b6d2d32c0bb635341f8f6c69751938da12f248.roa
File:                     40b6d2d32c0bb635341f8f6c69751938da12f248.roa (raw, json)
Hash identifier:          Vggd8TadDiPorN9NBUppa6kYugBWDOP/rP0QPzijIjA=
Subject key identifier:   15:C9:63:02:9E:11:CF:40:C8:D8:31:9D:D2:5D:1E:C3:C2:3D:C7:C5
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       111ADB
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/40b6d2d32c0bb635341f8f6c69751938da12f248.roa
Signing time:             Fri 29 Oct 2021 18:24:15 +0000
ROA not before:           Fri 29 Oct 2021 03:00:00 +0000
ROA not after:            Fri 31 Oct 2025 03:00:00 +0000
asID:                     267829
IP address blocks:        2803:7860:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120987 (0x111adb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Oct 29 03:00:00 2021 GMT
            Not After : Oct 31 03:00:00 2025 GMT
        Subject: CN=40b6d2d32c0bb635341f8f6c69751938da12f248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:8d:6f:de:a3:d9:ee:62:bb:e5:33:6c:08:
                    f7:c1:90:b3:d9:b7:05:cd:dd:ad:48:e5:9e:eb:eb:
                    4e:c1:94:78:e1:54:a0:1e:59:f7:58:be:46:d3:38:
                    75:05:4c:f5:9c:ba:e4:9e:89:1e:41:bb:46:c8:24:
                    9d:7d:31:37:21:b7:d3:fe:41:97:87:4f:fd:51:57:
                    61:14:39:5c:35:ed:8a:05:a1:3b:af:7f:8b:74:3d:
                    af:fb:6f:eb:24:42:43:e7:94:5f:fe:fd:97:08:f3:
                    53:e2:08:a3:fa:cd:f0:e7:d5:28:e7:c6:2b:61:3b:
                    88:b3:06:ac:b8:8c:56:7f:96:c4:23:07:12:e8:ac:
                    04:0a:e0:6a:8b:f7:71:ce:76:04:a4:0d:8c:02:35:
                    8a:5f:31:cb:9b:33:6a:eb:c3:da:ce:dc:88:7d:25:
                    87:da:f1:1a:68:b9:51:a9:21:4b:93:b5:f8:3e:61:
                    0c:17:d2:b8:c6:76:04:6f:ad:d6:58:85:eb:25:1a:
                    77:48:21:17:09:95:35:37:b8:e6:11:94:e8:85:23:
                    1e:c3:ba:38:b2:eb:24:9b:88:0e:f6:46:3e:26:db:
                    cf:60:6d:0a:74:94:10:49:2c:59:1b:b6:32:45:b5:
                    4b:69:0d:3e:e8:ce:17:54:47:c0:14:2e:04:b7:d7:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C9:63:02:9E:11:CF:40:C8:D8:31:9D:D2:5D:1E:C3:C2:3D:C7:C5
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/40b6d2d32c0bb635341f8f6c69751938da12f248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7860:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:64:61:f6:5a:0a:1a:32:0e:08:c0:d1:81:21:b5:f6:d5:5f:
         9c:af:86:86:63:99:07:57:74:b6:d4:af:8b:77:e8:e4:92:44:
         b6:ff:5a:26:e5:04:d0:9a:e7:54:3b:07:60:07:91:be:59:58:
         ab:fc:dc:55:85:51:4c:8e:ce:ce:44:fe:36:5c:53:ba:08:c1:
         3b:ee:94:02:34:dd:39:91:0a:af:c8:6d:39:4d:59:aa:64:57:
         bf:28:bc:19:65:9d:56:92:69:eb:36:b8:dc:aa:9f:f1:82:57:
         9c:a8:3e:e2:00:da:ba:47:73:07:49:a7:1c:6d:91:d7:56:32:
         07:fd:40:12:0d:da:f3:81:8a:24:57:8f:c6:ce:9b:02:8a:0f:
         5e:7f:e2:13:a1:8c:fd:18:8d:3c:14:24:52:e6:8c:2c:aa:c4:
         ea:a0:b8:5f:88:b3:dd:15:c7:cf:cf:27:70:4b:15:de:fb:ea:
         96:9a:5d:ce:cd:52:52:96:68:bb:06:a0:8e:ce:b7:54:f6:d6:
         f6:8d:48:9d:14:2d:3c:1e:18:c2:2d:ae:ef:04:52:a1:28:d4:
         5a:34:65:0b:e5:b2:18:a6:c9:4a:cb:b1:ed:6e:83:86:a1:f9:
         2b:96:24:44:1c:43:9f:c7:01:a6:23:ee:c9:72:e5:57:65:ab:
         0f:dd:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org