Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/39d657d92a2e7821f69eb82c8c6ceb52f2a66e66.roa
File:                     39d657d92a2e7821f69eb82c8c6ceb52f2a66e66.roa (raw, json)
Hash identifier:          4rtoOt75jmnaOHM0AasSSgaGseMZnzWmONNQWqKeUU0=
Subject key identifier:   06:84:1F:C6:8A:3F:6F:99:00:67:0A:BF:71:BC:29:8D:8D:BA:6B:C1
Certificate issuer:       /CN=d573448457c811688599e168f723018473dc9d89
Certificate serial:       0CBBA0
Authority key identifier: B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/39d657d92a2e7821f69eb82c8c6ceb52f2a66e66.roa
Signing time:             Mon 08 May 2023 03:09:55 +0000
ROA not before:           Sun 07 May 2023 03:09:55 +0000
ROA not after:            Thu 08 May 2025 03:09:55 +0000
asID:                     64136
IP address blocks:        2803:9910:c000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834464 (0xcbba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d573448457c811688599e168f723018473dc9d89
        Validity
            Not Before: May  7 03:09:55 2023 GMT
            Not After : May  8 03:09:55 2025 GMT
        Subject: CN=39d657d92a2e7821f69eb82c8c6ceb52f2a66e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:ab:9d:fb:98:11:42:e6:d4:98:ad:91:a8:
                    80:a4:ac:a8:17:44:7e:c3:fe:b9:dc:8f:8b:13:4e:
                    73:64:48:08:ed:fe:40:e2:f7:2d:9f:60:16:69:11:
                    2f:1b:b3:a2:a3:be:92:fc:ec:46:b4:57:0a:62:73:
                    f3:4e:49:72:2b:2d:25:a0:79:f5:fd:57:5a:fb:d3:
                    08:9a:67:2a:de:2b:37:bb:15:df:cc:eb:6c:4b:8c:
                    43:4b:85:ca:77:d3:5b:15:88:1c:86:3f:94:14:34:
                    fd:d7:f4:90:1d:a5:a3:1b:3e:87:87:ae:42:e7:24:
                    62:ca:df:e7:cd:0e:7f:0e:c8:65:10:4c:4e:f6:2b:
                    63:0f:e1:ac:78:2e:00:09:1a:36:b2:9b:86:cc:4d:
                    20:04:44:b6:38:fc:30:3e:1c:d3:e2:b0:2f:6e:13:
                    e9:ba:2d:31:73:24:51:38:22:19:37:bd:e1:7e:2e:
                    7e:59:37:68:cb:40:42:34:f7:4f:3a:64:25:15:b8:
                    31:07:2e:57:34:79:6a:82:bc:e1:d7:e8:ec:83:0a:
                    90:28:06:99:90:fe:e8:f7:eb:0c:a6:62:bc:dc:57:
                    c1:2c:90:50:4e:f3:cf:a5:c7:9c:23:5d:c4:68:74:
                    49:f8:1d:28:ca:e0:fa:af:f5:37:5f:ab:09:7e:bd:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:84:1F:C6:8A:3F:6F:99:00:67:0A:BF:71:BC:29:8D:8D:BA:6B:C1
            X509v3 Authority Key Identifier:
                keyid:B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/39d657d92a2e7821f69eb82c8c6ceb52f2a66e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/d573448457c811688599e168f723018473dc9d89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:f9:63:c2:4d:ad:ea:59:df:32:a9:0d:c0:b0:73:b6:7a:ad:
         d5:e8:a3:30:3a:2c:d3:ef:62:f8:98:2a:95:a4:92:aa:0d:08:
         ea:5f:3a:72:9d:ad:76:91:54:10:ce:cd:4a:13:1c:ac:1c:4f:
         f6:c9:23:f8:d5:70:8d:f7:e5:87:24:5a:90:b8:1a:d2:36:a6:
         35:ad:79:0c:59:dd:e9:e2:f5:13:b9:cf:9a:f4:c2:33:49:be:
         15:2b:17:e9:ee:60:e7:fa:8f:04:24:28:6c:6d:46:d4:87:41:
         3e:59:4c:06:1e:dd:ff:9f:c6:f1:2d:4a:2d:cd:d1:ba:e3:da:
         b9:c7:2f:6d:81:af:0a:76:52:ed:86:b2:43:c2:be:55:c5:2a:
         b4:7c:73:f8:1d:89:a8:60:52:77:17:e1:6e:0b:28:7c:30:50:
         53:cf:35:ce:ee:a0:b9:68:29:49:06:a3:0b:26:95:04:d1:2a:
         6a:54:33:4c:97:6a:11:12:a5:7f:34:64:4c:80:ac:79:8e:dc:
         fb:cc:9a:7c:6f:f5:40:06:46:da:78:8c:b6:fc:fd:8c:e7:45:
         95:19:34:c8:78:55:90:93:70:84:9e:2a:7c:6b:2f:10:e6:f9:
         86:59:eb:2a:33:c9:a1:4f:9c:2a:fd:94:00:d9:72:6b:17:0d:
         a2:6b:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org