Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/784bb84d32a631a53c83c63e39991883484a58fb.roa
File:                     784bb84d32a631a53c83c63e39991883484a58fb.roa (raw, json)
Hash identifier:          qdm7D0WW/9KSsq6+yThp2gkosWbGioQfp5lW3q1W2ic=
Subject key identifier:   4C:27:4F:EA:E5:DA:F7:F5:ED:4B:27:20:3D:28:30:9E:04:C3:CB:C7
Certificate issuer:       /CN=0317b9d1456b48aa14ec8d784f305e45943a6533
Certificate serial:       05FB68
Authority key identifier: F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/784bb84d32a631a53c83c63e39991883484a58fb.roa
Signing time:             Wed 11 Jan 2023 17:41:36 +0000
ROA not before:           Tue 10 Jan 2023 17:39:57 +0000
ROA not after:            Sat 11 Jan 2025 17:39:57 +0000
asID:                     265622
IP address blocks:        2806:3a3:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392040 (0x5fb68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0317b9d1456b48aa14ec8d784f305e45943a6533
        Validity
            Not Before: Jan 10 17:39:57 2023 GMT
            Not After : Jan 11 17:39:57 2025 GMT
        Subject: CN=784bb84d32a631a53c83c63e39991883484a58fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:a4:ae:22:85:41:4e:a2:13:d3:7d:4a:e8:
                    50:d5:f3:ac:ef:66:b8:79:21:bd:ec:97:7f:98:ca:
                    dd:ec:45:89:c4:66:88:c7:5a:8f:2f:49:04:4d:d7:
                    46:63:e5:86:f1:de:a3:e4:25:f3:68:6d:67:b0:04:
                    ce:8a:40:22:4c:af:ec:06:d9:b4:6c:65:dc:16:ab:
                    4a:20:01:3a:75:42:32:47:c0:25:59:72:a6:87:cf:
                    d5:30:b8:4c:e3:c9:3a:9c:80:0b:88:aa:6a:d9:6c:
                    b9:52:9e:27:4d:4b:e5:77:f4:54:c6:98:5c:5c:0c:
                    e2:01:42:7f:1a:78:b8:1d:96:1d:03:9e:98:88:89:
                    4b:62:80:08:ec:02:8a:ec:65:0b:53:5b:9a:e8:72:
                    43:c5:11:6b:53:33:99:f0:5c:5e:4e:89:30:c5:2b:
                    c3:a3:84:10:f3:20:42:a4:5a:c5:55:e9:16:f8:43:
                    d7:80:1b:4e:dc:b8:96:10:72:23:bc:4f:8c:3a:49:
                    0f:33:40:75:9e:05:c2:32:72:f6:61:de:87:ad:b5:
                    5c:5a:83:de:38:7b:ee:ae:2a:74:6e:78:11:47:e4:
                    67:0c:47:0d:54:ad:b8:5f:06:c7:db:cc:a1:a3:15:
                    74:e5:b6:02:66:ba:51:a3:31:dd:06:58:92:fd:64:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:27:4F:EA:E5:DA:F7:F5:ED:4B:27:20:3D:28:30:9E:04:C3:CB:C7
            X509v3 Authority Key Identifier:
                keyid:F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/784bb84d32a631a53c83c63e39991883484a58fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/0317b9d1456b48aa14ec8d784f305e45943a6533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5f:2b:42:7d:ee:77:fd:58:f0:a7:6e:c5:38:42:45:77:83:6a:
         1b:3a:72:c8:10:a8:19:b2:f5:0a:a2:64:18:86:5e:98:47:e9:
         4f:3d:2b:52:f4:78:74:55:dc:a0:a3:74:e0:59:f5:f1:78:d4:
         ea:a2:7f:97:da:27:c2:2f:cb:88:99:da:45:1b:b7:38:fd:f6:
         44:ee:40:bb:9b:96:f1:6c:99:d3:7d:f4:fd:94:cf:37:72:58:
         10:6f:3a:4b:c1:5d:1e:5f:48:4e:6d:5a:93:d8:47:92:43:d6:
         6a:f5:d7:94:a9:6a:44:25:5d:35:d9:fe:24:a5:cc:15:e9:4d:
         ad:3a:1c:c8:8a:d2:d3:6b:e9:78:dc:ed:67:c5:68:d6:c0:fb:
         09:cc:9a:c8:09:1d:07:d6:f1:7a:72:18:03:ff:bf:60:77:92:
         e3:aa:96:fd:8b:46:6c:c1:41:32:25:9e:9b:2a:2e:a9:b2:41:
         9b:b6:21:01:a4:7e:33:f6:b4:fa:b0:97:1c:95:ce:bc:22:d8:
         69:7c:cc:88:7c:95:55:31:1b:37:92:9d:91:25:81:9b:22:ff:
         80:a6:27:50:09:22:3f:cb:a1:de:d3:5d:b4:96:d0:77:98:7d:
         e5:9c:ec:bf:80:4e:00:b6:c4:29:b2:6e:c6:94:67:86:4b:32:
         5e:0a:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org