Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/678f985305344a3badad4d24dd3116e4d8e09e5d.roa
File:                     678f985305344a3badad4d24dd3116e4d8e09e5d.roa (raw, json)
Hash identifier:          6eytxdEs/GEUEouMcCg70HQV6UZkVgxkl2eX4BlIeG8=
Subject key identifier:   47:2A:EF:9E:0E:9B:36:E0:45:09:11:05:6A:32:D4:BC:BC:BC:A5:93
Certificate issuer:       /CN=b9674112d06595f2d6b84802ac8416687159afd1
Certificate serial:       1F4636
Authority key identifier: 54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/678f985305344a3badad4d24dd3116e4d8e09e5d.roa
Signing time:             Fri 24 Mar 2023 08:30:54 +0000
ROA not before:           Thu 23 Mar 2023 08:30:54 +0000
ROA not after:            Sat 22 Mar 2025 08:30:54 +0000
asID:                     262237
IP address blocks:        2803:6200::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049590 (0x1f4636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9674112d06595f2d6b84802ac8416687159afd1
        Validity
            Not Before: Mar 23 08:30:54 2023 GMT
            Not After : Mar 22 08:30:54 2025 GMT
        Subject: CN=678f985305344a3badad4d24dd3116e4d8e09e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:ca:06:dc:52:42:f2:49:ae:fb:4d:7e:16:
                    74:a2:3c:50:22:57:c4:d4:e6:18:16:6f:06:4a:8d:
                    a4:bb:4a:9b:50:05:56:ac:58:b5:81:8d:7f:54:04:
                    91:fa:50:3d:4f:1b:59:33:a6:cb:04:af:ce:93:54:
                    28:dc:dc:9e:c7:55:3a:13:eb:2e:ca:96:47:2e:3f:
                    d9:23:b9:e0:43:19:87:7e:d5:26:bf:f6:4e:bc:be:
                    80:77:2e:e3:ea:ff:c1:27:ce:62:6b:6f:cb:30:2d:
                    3f:aa:53:b2:6c:4e:56:66:de:d3:d2:f8:ae:f9:7a:
                    c5:cb:cd:52:16:cb:3e:ee:5d:ce:e2:e7:78:fd:6f:
                    1b:21:49:12:bf:26:63:8d:83:97:58:b8:44:f1:6c:
                    9e:d8:d5:93:31:5f:5e:2d:a6:64:2a:98:70:aa:b0:
                    b4:5b:9c:96:52:5f:93:11:78:5f:ed:7a:ec:b9:24:
                    4f:e2:05:f6:cc:5d:3a:43:8e:a2:5b:5f:0c:50:b8:
                    91:aa:e2:97:91:e8:27:7e:14:09:71:50:76:3f:f9:
                    bc:fa:01:f5:c8:1d:6b:29:ee:21:f5:38:0b:e9:ee:
                    56:69:4a:40:4f:de:77:bf:6d:b0:f3:81:c8:d2:f3:
                    bc:e0:94:f3:d1:0d:85:66:be:16:26:fc:1c:d0:80:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2A:EF:9E:0E:9B:36:E0:45:09:11:05:6A:32:D4:BC:BC:BC:A5:93
            X509v3 Authority Key Identifier:
                keyid:54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/678f985305344a3badad4d24dd3116e4d8e09e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b9674112d06595f2d6b84802ac8416687159afd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6200::/64

    Signature Algorithm: sha256WithRSAEncryption
         39:3f:6a:77:83:46:1d:ec:01:e7:95:97:1f:d6:c4:76:72:3f:
         7c:e7:11:ea:53:07:b7:ae:28:7f:6f:8e:5a:07:3a:de:02:21:
         7f:7e:b0:c9:79:b5:a3:79:a9:4d:b8:8a:b7:3b:67:77:d3:47:
         69:be:65:f0:54:b5:fe:cb:e2:10:a2:1e:dc:ac:20:20:0f:24:
         b0:1f:7a:fb:74:7a:9a:12:c2:4f:6c:72:95:ef:31:40:e1:8a:
         8c:d8:a6:03:be:9b:9f:f8:2b:68:52:84:05:4b:37:97:6d:55:
         6a:8a:c4:66:c6:e7:e6:6d:b7:5f:29:6c:10:c8:cb:d6:58:2e:
         6d:95:d3:14:ec:4c:52:5a:15:72:45:f7:bb:32:85:3f:11:67:
         2a:88:6c:b5:30:43:3d:7e:ab:61:cd:ca:4e:8c:47:39:60:cb:
         62:84:99:78:f1:9e:32:90:31:52:39:f9:26:55:9c:8a:a8:90:
         71:30:6b:af:89:24:65:14:95:84:e3:cf:0d:84:02:3d:dc:53:
         ca:a2:93:94:29:4f:33:85:d3:4b:07:b7:2e:be:55:43:27:79:
         b3:8b:8d:b8:bb:d1:a6:00:bd:4e:28:74:1a:c7:0b:77:5f:80:
         e8:3b:1b:65:1e:a4:d0:ff:a3:71:33:c5:51:3f:2d:79:10:9e:
         3d:90:c7:01
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIDH0Y2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI5
Njc0MTEyZDA2NTk1ZjJkNmI4NDgwMmFjODQxNjY4NzE1OWFmZDEwHhcNMjMwMzIz
MDgzMDU0WhcNMjUwMzIyMDgzMDU0WjAzMTEwLwYDVQQDEyg2NzhmOTg1MzA1MzQ0
YTNiYWRhZDRkMjRkZDMxMTZlNGQ4ZTA5ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhJPKBtxSQvJJrvtNfhZ0ojxQIlfE1OYYFm8GSo2ku0qbUAVW
rFi1gY1/VASR+lA9TxtZM6bLBK/Ok1Qo3Nyex1U6E+suypZHLj/ZI7ngQxmHftUm
v/ZOvL6Ady7j6v/BJ85ia2/LMC0/qlOybE5WZt7T0viu+XrFy81SFss+7l3O4ud4
/W8bIUkSvyZjjYOXWLhE8Wye2NWTMV9eLaZkKphwqrC0W5yWUl+TEXhf7XrsuSRP
4gX2zF06Q46iW18MULiRquKXkegnfhQJcVB2P/m8+gH1yB1rKe4h9TgL6e5WaUpA
T953v22w84HI0vO84JTz0Q2FZr4WJvwc0IBFJwIDAQABo4ICYDCCAlwwHQYDVR0O
BBYEFEcq754OmzbgRQkRBWoy1Ly8vKWTMB8GA1UdIwQYMBaAFFQIICT2Cjg+OCJP
j3d34uU1Xp8kMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjk2NzQx
MTJkMDY1OTVmMmQ2Yjg0ODAyYWM4NDE2Njg3MTU5YWZkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTZiZTM0N2QtN2JmMS00MTM1LTliOGYtM2JmNzk3
N2IyZDhhLzY3OGY5ODUzMDUzNDRhM2JhZGFkNGQyNGRkMzExNmU0ZDhlMDllNWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNmJlMzQ3ZC03YmYxLTQxMzUtOWI4Zi0zYmY3
OTc3YjJkOGEvYjk2NzQxMTJkMDY1OTVmMmQ2Yjg0ODAyYWM4NDE2Njg3MTU5YWZk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQV
MBMwEQQCAAIwCwMJACgDYgAAAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQA5P2p3g0Yd
7AHnlZcf1sR2cj985xHqUwe3rih/b45aBzreAiF/frDJebWjealNuIq3O2d300dp
vmXwVLX+y+IQoh7crCAgDySwH3r7dHqaEsJPbHKV7zFA4YqM2KYDvpuf+CtoUoQF
SzeXbVVqisRmxufmbbdfKWwQyMvWWC5tldMU7ExSWhVyRfe7MoU/EWcqiGy1MEM9
fqthzcpOjEc5YMtihJl48Z4ykDFSOfkmVZyKqJBxMGuviSRlFJWE488NhAI93FPK
opOUKU8zhdNLB7cuvlVDJ3mzi424u9GmAL1OKHQaxwt3X4DoOxtlHqTQ/6NxM8VR
Py15EJ49kMcB
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org