Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/77c6e7eb4f4d236db0f6bdaac1dc204c4a60686a.roa
File:                     77c6e7eb4f4d236db0f6bdaac1dc204c4a60686a.roa (raw, json)
Hash identifier:          pL8j8wR3DsXhz1darOQaKhfTN649QElPgT4TzhNRuck=
Subject key identifier:   BC:A4:1B:5C:70:24:AE:9B:85:F7:16:16:3C:8C:5F:1D:20:C6:9B:7D
Certificate issuer:       /CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
Certificate serial:       092E4E
Authority key identifier: EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/77c6e7eb4f4d236db0f6bdaac1dc204c4a60686a.roa
Signing time:             Thu 18 Jan 2024 22:57:30 +0000
ROA not before:           Thu 18 Jan 2024 22:57:29 +0000
ROA not after:            Sun 18 Jan 2026 22:57:29 +0000
asID:                     272937
IP address blocks:        2803:3190:d000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601678 (0x92e4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
        Validity
            Not Before: Jan 18 22:57:29 2024 GMT
            Not After : Jan 18 22:57:29 2026 GMT
        Subject: CN=77c6e7eb4f4d236db0f6bdaac1dc204c4a60686a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:70:c8:86:92:ca:9a:61:45:83:ef:6a:cd:
                    08:10:86:82:f2:74:38:37:22:47:00:71:80:f5:67:
                    27:93:66:e7:03:c8:14:14:e3:20:fd:a2:29:a4:0f:
                    20:66:5b:ea:ef:ee:8d:fb:a1:79:50:95:88:9b:d0:
                    8f:b1:73:45:90:7a:06:99:0f:8b:33:75:c4:dd:f5:
                    d0:0a:24:5c:20:5f:93:9b:f2:0a:f0:ca:46:5d:46:
                    30:56:cf:af:3c:49:99:f1:81:9f:6e:f6:7a:8a:ac:
                    5a:42:96:e1:0a:f0:8b:0e:67:57:59:4d:19:00:cb:
                    dc:6e:41:9a:79:1d:54:a2:9d:bf:7f:ea:97:09:1a:
                    a3:b9:65:c7:c9:65:c9:2c:0d:74:1a:1a:dc:ca:bd:
                    a2:4a:75:15:b9:c8:75:68:a3:03:f6:a5:fa:67:8d:
                    e5:d5:06:64:a7:e8:73:3a:f7:66:11:f6:c2:87:bf:
                    2b:77:79:8f:ba:d6:c8:2f:82:ef:ce:f9:3d:c5:71:
                    66:7f:69:bf:68:7e:04:f2:b0:08:6d:5e:20:a8:54:
                    55:60:f1:de:56:da:4b:3a:87:44:bf:d2:db:90:74:
                    a2:b8:8b:a2:d1:11:52:c9:b4:ea:20:09:77:af:8b:
                    9b:77:26:91:a3:e8:4c:6f:f6:96:77:25:12:cb:6b:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:1B:5C:70:24:AE:9B:85:F7:16:16:3C:8C:5F:1D:20:C6:9B:7D
            X509v3 Authority Key Identifier:
                keyid:EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/77c6e7eb4f4d236db0f6bdaac1dc204c4a60686a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         60:b2:78:27:05:ea:43:c3:8c:b4:d3:4d:01:cd:ea:7a:38:14:
         a0:60:c8:cc:fc:9f:0e:0f:bc:0d:34:01:47:0f:3d:8f:bf:7c:
         72:ce:b0:5f:b7:85:3c:10:5e:20:07:6a:01:da:c0:72:80:97:
         6e:bc:48:57:ca:2c:aa:c5:bf:73:43:ea:73:81:d8:0c:23:7e:
         3e:a9:be:2f:b8:47:c5:2d:22:5f:8c:04:16:54:37:d1:99:b0:
         b7:19:2d:1f:3f:ca:75:0b:20:74:f7:a4:ff:6a:66:2e:91:bc:
         f5:80:62:75:4f:60:42:52:46:14:2a:24:56:7b:48:2b:4e:e8:
         07:47:6b:a9:27:26:3c:e6:98:22:09:5a:d8:04:40:9b:d7:23:
         ea:a4:d7:06:35:aa:bc:0a:de:05:f3:b7:70:07:35:c1:c7:88:
         55:b6:9e:67:ac:51:2a:e4:57:56:4f:d1:d1:0c:34:08:a7:cd:
         c1:c1:25:cb:d0:bd:38:9b:55:d1:f1:e5:b8:fc:1f:3d:c3:7f:
         22:9b:7b:73:5f:94:f4:b4:2b:cc:6c:c9:88:0b:08:f7:20:19:
         39:3b:cb:10:d3:6c:ff:4c:3a:bb:0c:7f:84:27:84:bb:3c:82:
         e7:73:10:24:c4:0b:41:1a:3c:ea:8c:1d:26:8f:f3:b9:d9:e0:
         9d:71:0e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org