Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/12caabf04f69b0e953ef2be75f5db6d29625b2f5.roa
File:                     12caabf04f69b0e953ef2be75f5db6d29625b2f5.roa (raw, json)
Hash identifier:          kedy/TqC3CISA1CCwVC+OuiRKCcMva+paIWI4N26lKo=
Subject key identifier:   B4:D8:38:5E:B8:51:3D:F6:60:DD:AC:CB:B9:FE:EB:6B:58:30:E5:15
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0CBAAA
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/12caabf04f69b0e953ef2be75f5db6d29625b2f5.roa
Signing time:             Wed 27 Sep 2023 18:23:59 +0000
ROA not before:           Tue 26 Sep 2023 18:23:59 +0000
ROA not after:            Sat 27 Sep 2025 18:23:59 +0000
asID:                     17072
IP address blocks:        2806:2f0:5000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834218 (0xcbaaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Sep 26 18:23:59 2023 GMT
            Not After : Sep 27 18:23:59 2025 GMT
        Subject: CN=12caabf04f69b0e953ef2be75f5db6d29625b2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:27:fb:92:24:b0:e3:23:12:14:c7:98:ef:
                    c8:b3:c5:7d:2f:1f:4d:91:1f:13:f8:0b:87:89:18:
                    68:fa:d8:75:39:fe:de:58:16:35:c8:3a:37:a7:ea:
                    d6:4a:80:15:43:3e:61:98:18:6d:4d:c1:54:7c:86:
                    9f:97:b8:44:cd:69:63:8e:8d:dd:f7:20:45:ff:08:
                    53:9f:27:e1:20:2c:0f:f6:ed:3f:d6:e2:42:f0:21:
                    ea:72:0b:93:a2:11:8c:05:37:80:7b:d1:b8:f7:04:
                    67:e4:b8:64:b5:a6:5f:ea:d0:08:5f:4f:d1:d7:d9:
                    4b:70:2c:73:a1:29:02:27:6c:08:8c:6a:a4:50:88:
                    19:a0:78:61:9e:4f:75:f7:a6:9d:e8:8e:81:47:c7:
                    c3:dd:d6:dc:e7:df:07:05:c2:c5:50:8e:b3:b2:ec:
                    26:cc:d2:9a:43:a1:77:ca:db:9d:85:58:02:05:9e:
                    6b:40:6d:04:ea:4a:c5:39:4a:82:8a:07:b9:49:0e:
                    f3:b1:e0:7b:bb:2f:08:ea:64:93:0a:0a:8f:54:3c:
                    61:80:1b:89:55:20:84:e7:f4:8a:97:ba:38:44:9a:
                    1b:83:b4:0a:39:fe:3e:97:6f:63:cd:00:e7:89:c7:
                    08:43:69:79:e6:65:be:38:62:67:ba:91:5d:07:cf:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D8:38:5E:B8:51:3D:F6:60:DD:AC:CB:B9:FE:EB:6B:58:30:E5:15
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/12caabf04f69b0e953ef2be75f5db6d29625b2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2f0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         86:6b:58:91:f3:ca:7e:e7:53:bb:37:ba:77:11:fb:de:4e:a1:
         97:be:6f:0d:38:86:80:8f:13:37:2c:69:c0:1a:4e:cd:77:18:
         11:6b:1d:3c:f3:32:f2:c8:0d:d0:7e:4e:d2:8c:41:d6:7e:7e:
         70:30:bd:9f:16:b7:c8:b0:28:be:90:c9:5f:cc:ba:10:a2:bc:
         48:c4:50:ca:d1:57:02:30:31:f8:6d:37:fe:f4:c3:3a:81:8b:
         ed:ff:da:5d:50:e0:18:65:8c:38:6f:03:76:7e:ef:7f:5a:54:
         b3:96:d0:21:a5:3a:8d:71:be:77:ca:f0:0f:a5:16:47:95:57:
         85:72:61:cc:a3:17:4f:ca:aa:8e:11:8f:db:f3:97:cf:19:41:
         4d:6d:75:2d:e1:4c:6f:25:3f:e0:b0:0c:8b:db:6f:66:1d:e0:
         c3:99:79:5c:c3:83:53:56:c2:39:9b:fb:64:56:67:16:01:6d:
         c2:60:7b:32:b5:19:b4:67:93:87:3f:a9:76:4b:f5:25:6d:65:
         00:23:74:bf:41:bc:dd:7e:3c:ad:8b:cb:07:26:d0:9d:15:32:
         12:fb:af:01:ae:65:7e:81:14:41:48:1e:f0:51:27:9b:79:4c:
         92:49:c5:33:47:dd:b2:ce:04:44:ab:ea:b3:96:d0:ee:ae:87:
         7c:f7:8f:90
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDDLqqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMwOTI2
MTgyMzU5WhcNMjUwOTI3MTgyMzU5WjAzMTEwLwYDVQQDEygxMmNhYWJmMDRmNjli
MGU5NTNlZjJiZTc1ZjVkYjZkMjk2MjViMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx2gn+5IksOMjEhTHmO/Is8V9Lx9NkR8T+AuHiRho+th1Of7e
WBY1yDo3p+rWSoAVQz5hmBhtTcFUfIafl7hEzWljjo3d9yBF/whTnyfhICwP9u0/
1uJC8CHqcguTohGMBTeAe9G49wRn5LhktaZf6tAIX0/R19lLcCxzoSkCJ2wIjGqk
UIgZoHhhnk9196ad6I6BR8fD3dbc598HBcLFUI6zsuwmzNKaQ6F3ytudhVgCBZ5r
QG0E6krFOUqCige5SQ7zseB7uy8I6mSTCgqPVDxhgBuJVSCE5/SKl7o4RJobg7QK
Of4+l29jzQDniccIQ2l55mW+OGJnupFdB884CQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFLTYOF64UT32YN2sy7n+62tYMOUVMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzEyY2FhYmYwNGY2OWIwZTk1M2VmMmJlNzVmNWRiNmQyOTYyNWIyZjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBCgGAvBQMA0GCSqGSIb3DQEBCwUAA4IBAQCGa1iR88p+51O7
N7p3EfveTqGXvm8NOIaAjxM3LGnAGk7NdxgRax088zLyyA3Qfk7SjEHWfn5wML2f
FrfIsCi+kMlfzLoQorxIxFDK0VcCMDH4bTf+9MM6gYvt/9pdUOAYZYw4bwN2fu9/
WlSzltAhpTqNcb53yvAPpRZHlVeFcmHMoxdPyqqOEY/b85fPGUFNbXUt4UxvJT/g
sAyL229mHeDDmXlcw4NTVsI5m/tkVmcWAW3CYHsytRm0Z5OHP6l2S/UlbWUAI3S/
Qbzdfjyti8sHJtCdFTIS+68BrmV+gRRBSB7wUSebeUySScUzR92yzgREq+qzltDu
rod894+Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org