Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/745d4f835cdd78a82dfbce54bc657a44fa8713ef.roa
File:                     745d4f835cdd78a82dfbce54bc657a44fa8713ef.roa (raw, json)
Hash identifier:          D91fYFQ1lVveBhrKlTWKecTkcHaS18ulLYrp5ykQ1aY=
Subject key identifier:   08:37:AE:25:48:B4:97:F1:8E:F0:1F:64:43:94:77:59:8D:E3:C0:43
Certificate issuer:       /CN=aa9626805288e743eebc32afd6c5d414b8f13c2d
Certificate serial:       074970
Authority key identifier: F9:64:EC:EE:24:59:60:D9:D0:46:23:3D:B0:F9:5D:D9:DC:E6:DA:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa9626805288e743eebc32afd6c5d414b8f13c2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/745d4f835cdd78a82dfbce54bc657a44fa8713ef.roa
Signing time:             Tue 02 Apr 2024 20:07:55 +0000
ROA not before:           Tue 02 Apr 2024 20:07:54 +0000
ROA not after:            Thu 02 Apr 2026 20:07:54 +0000
asID:                     271890
IP address blocks:        2801:19e::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477552 (0x74970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9626805288e743eebc32afd6c5d414b8f13c2d
        Validity
            Not Before: Apr  2 20:07:54 2024 GMT
            Not After : Apr  2 20:07:54 2026 GMT
        Subject: CN=745d4f835cdd78a82dfbce54bc657a44fa8713ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c2:2b:ab:70:f6:58:60:0c:ad:88:8a:55:f6:
                    5b:1a:16:56:de:a7:fc:47:4e:4a:50:74:9a:84:c7:
                    72:46:27:33:07:67:4f:00:6a:d3:99:16:54:2b:18:
                    e3:2d:88:e0:ec:56:b7:13:a0:36:09:ba:20:4f:78:
                    c7:6d:b9:a3:2d:e4:01:56:72:90:20:f4:9f:9f:bf:
                    02:ad:4a:72:25:f3:15:1e:44:c2:a1:af:b9:51:e7:
                    fd:c3:91:07:ae:03:5e:45:a4:f1:45:e5:43:6e:bc:
                    73:fe:f2:ba:fb:db:42:ec:fd:e3:c9:bb:d9:ed:37:
                    a5:ff:b5:53:e8:e0:95:4c:c2:69:b8:00:9f:1e:0b:
                    47:a2:ee:a9:24:a9:4a:88:ff:73:f7:66:cd:05:0b:
                    c1:50:01:9e:41:e5:6a:33:87:5a:ed:1c:37:72:26:
                    20:0e:7f:89:e8:f3:5c:70:4c:44:45:3d:29:1d:79:
                    19:3c:87:21:d5:11:13:17:ba:df:8d:14:50:34:99:
                    c2:e7:07:de:7f:83:4b:4a:58:ca:d4:85:da:ba:07:
                    a4:a4:27:63:3e:46:be:1f:cd:e4:72:95:de:0e:ca:
                    80:d6:10:ab:28:1b:73:a8:f3:9e:45:6a:f1:9c:be:
                    ec:23:da:9a:47:89:db:af:1b:72:81:f3:e9:d5:80:
                    cc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:37:AE:25:48:B4:97:F1:8E:F0:1F:64:43:94:77:59:8D:E3:C0:43
            X509v3 Authority Key Identifier:
                keyid:F9:64:EC:EE:24:59:60:D9:D0:46:23:3D:B0:F9:5D:D9:DC:E6:DA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa9626805288e743eebc32afd6c5d414b8f13c2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/745d4f835cdd78a82dfbce54bc657a44fa8713ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/aa9626805288e743eebc32afd6c5d414b8f13c2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19e::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:43:b1:54:29:a1:9a:5b:88:12:a8:48:64:c1:c5:9e:87:3c:
         88:6b:86:fb:4e:92:e0:f0:1e:1c:73:83:43:ca:77:2d:c9:9d:
         7d:c7:e1:2a:fd:3f:53:54:18:2b:e9:2b:51:ca:a4:48:b1:0a:
         99:0c:d3:fa:bb:cf:65:c7:a1:62:78:2b:64:7c:a9:55:41:ea:
         49:d6:aa:c2:30:1d:cd:90:32:40:47:b4:82:ce:e1:cd:d9:27:
         8f:24:3d:a0:c3:aa:ab:3a:43:35:08:45:31:5e:7c:8f:c2:9a:
         0a:67:5f:17:96:ec:b5:95:1f:f7:72:11:3c:d1:c6:a6:0d:95:
         61:4c:d1:31:90:95:53:b7:b5:14:17:db:aa:49:38:db:5c:7b:
         e5:99:d3:20:f6:25:82:86:28:3a:fc:77:ae:11:fe:56:f5:ab:
         bd:b6:ef:e0:61:84:54:59:65:35:38:8e:f3:23:f2:ab:53:64:
         7b:29:0e:ac:65:bb:ce:60:b1:45:5b:4c:58:71:38:5e:2f:59:
         1f:3b:c8:3b:22:5e:bb:68:fe:81:c5:b3:a7:ab:d2:44:5b:83:
         55:b1:a1:8f:6b:38:84:5c:1b:c7:5f:37:7f:59:96:f6:65:fa:
         e9:c3:f3:ed:dd:3b:08:8f:42:2e:42:b3:3e:0d:69:ad:eb:2a:
         d1:e9:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org