Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/9fc4ad5ba19c40e5d84a921b6256e8739d2bd5ac.roa
File:                     9fc4ad5ba19c40e5d84a921b6256e8739d2bd5ac.roa (raw, json)
Hash identifier:          n9WbVfOITWE++kJvGPCQSDWZMl5nB2sfZoVDMfo9gxU=
Subject key identifier:   11:A8:81:9F:44:51:C0:BC:78:62:B3:2B:7E:E8:03:F7:24:99:61:DE
Certificate issuer:       /CN=958f499ac41f5f1d49e25d2caab8318b95a1c691
Certificate serial:       241D29
Authority key identifier: F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/9fc4ad5ba19c40e5d84a921b6256e8739d2bd5ac.roa
Signing time:             Sat 06 Jan 2024 07:30:00 +0000
ROA not before:           Sat 06 Jan 2024 07:30:00 +0000
ROA not after:            Mon 05 Jan 2026 07:30:00 +0000
asID:                     18747
IP address blocks:        2801:1c2::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366761 (0x241d29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958f499ac41f5f1d49e25d2caab8318b95a1c691
        Validity
            Not Before: Jan  6 07:30:00 2024 GMT
            Not After : Jan  5 07:30:00 2026 GMT
        Subject: CN=9fc4ad5ba19c40e5d84a921b6256e8739d2bd5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:ad:5c:9a:b5:5e:f2:04:2e:61:6c:e9:36:
                    2e:e3:ee:0d:94:4f:6c:b8:b9:97:8a:75:2a:a3:45:
                    41:38:32:a9:6a:93:ba:52:a8:b5:39:4c:c4:1d:07:
                    a4:ca:f2:b5:e5:15:62:86:07:be:39:26:bd:53:bc:
                    e2:cd:9f:d0:32:ec:08:76:4a:a5:b2:8e:fd:62:38:
                    df:88:4e:64:c8:b3:04:4f:82:86:a2:53:49:de:5f:
                    de:ee:f8:03:70:1e:02:23:49:c9:28:de:16:d4:7b:
                    7f:09:fa:b6:ec:f0:76:17:57:d4:d9:6e:32:65:55:
                    79:a9:78:81:e4:3f:69:72:c6:24:f6:0a:4c:90:1e:
                    d1:e0:54:8a:b9:79:a0:81:aa:91:d3:8d:72:59:55:
                    94:1a:e8:25:f6:11:35:a3:b0:80:62:a4:46:98:7a:
                    14:53:fc:05:d2:07:a4:0f:ba:0b:a6:82:af:12:3f:
                    41:4c:03:6c:0f:f7:b3:b0:d8:ac:7e:56:20:57:9e:
                    4d:23:9c:53:40:6b:97:f4:3c:91:98:8b:e0:85:9c:
                    6e:15:b3:e1:be:1a:38:7a:43:12:91:f6:59:c6:3b:
                    48:71:a4:43:33:1c:98:46:65:0f:ad:bf:1e:60:91:
                    1d:a0:44:54:2a:7e:f2:41:a1:81:bc:f2:0a:aa:f4:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A8:81:9F:44:51:C0:BC:78:62:B3:2B:7E:E8:03:F7:24:99:61:DE
            X509v3 Authority Key Identifier:
                keyid:F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/9fc4ad5ba19c40e5d84a921b6256e8739d2bd5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c2::/44

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:84:5f:a8:c0:44:2f:f2:ea:ec:9f:f8:95:ec:ce:4f:48:
         4c:37:69:bb:c7:a7:4c:db:72:96:2a:4a:13:f0:fb:91:5a:13:
         10:7c:4e:68:11:32:39:17:f2:4e:d8:11:83:33:96:d2:e3:41:
         d1:f6:87:08:7d:53:48:e1:33:60:ea:e3:4c:3e:ed:46:aa:d7:
         3e:c2:14:d6:44:56:76:6d:01:97:bf:96:90:8f:75:fb:0f:3f:
         17:74:02:8c:d9:90:ed:7e:50:e5:b0:d7:a7:14:62:48:3e:1b:
         d1:6e:72:ee:9f:e8:e4:6d:9b:cb:db:91:33:e9:f2:2a:29:74:
         5a:9d:b5:12:5c:b2:09:17:80:3a:86:a2:dc:b0:64:2b:5a:de:
         82:f2:2d:df:be:cc:5f:39:ef:d6:6e:71:04:c3:f4:7d:d6:fb:
         ce:85:8a:34:7b:9f:1f:b1:7e:89:e5:46:75:08:04:b9:5a:a0:
         ac:a8:a1:28:ee:3c:d3:f4:3b:c9:1d:2e:3e:2e:de:27:3c:fa:
         d6:24:f0:64:e9:ac:c7:60:bf:5f:9a:95:84:95:7b:5f:06:ac:
         8d:fa:68:8a:a0:40:b7:08:58:d3:74:ce:ae:ea:03:6e:3e:f1:
         10:99:f8:e6:64:62:03:c1:7b:c1:da:2f:08:a3:df:ba:ba:cf:
         91:d1:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org