Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e837e980391600b4ac8d7674bf4e0e5fec8683c9.roa
File:                     e837e980391600b4ac8d7674bf4e0e5fec8683c9.roa (raw, json)
Hash identifier:          TFhzejDqcmWGIRyt4FAwFUe34ahtWncOrcrw/peiAC4=
Subject key identifier:   A1:E4:5C:61:58:6B:1E:C0:AC:62:49:28:0B:3E:9B:EC:B3:BF:55:DB
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       23A446
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e837e980391600b4ac8d7674bf4e0e5fec8683c9.roa
Signing time:             Fri 26 May 2023 22:15:07 +0000
ROA not before:           Thu 25 May 2023 22:15:07 +0000
ROA not after:            Mon 26 May 2025 22:15:07 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 54
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335814 (0x23a446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: May 25 22:15:07 2023 GMT
            Not After : May 26 22:15:07 2025 GMT
        Subject: CN=e837e980391600b4ac8d7674bf4e0e5fec8683c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:75:9f:1a:93:ab:c0:af:cb:e9:36:45:84:
                    0f:97:78:2a:7e:15:d7:bf:d2:a3:0a:ba:01:89:3a:
                    da:b6:03:70:d3:09:fd:3a:1a:f9:50:c3:01:bf:1d:
                    29:69:5e:c2:98:c3:a6:60:19:1c:49:88:69:30:26:
                    32:43:6c:30:4c:5e:b4:59:9e:cb:d5:62:59:ae:17:
                    a1:35:af:0b:fa:ac:4d:55:fb:85:3c:84:bc:91:83:
                    c0:90:66:34:6b:15:c9:f6:7e:96:50:c4:19:e9:18:
                    20:a7:fa:c8:15:30:5e:2f:dd:43:70:2f:0e:54:f5:
                    51:a2:4c:e2:64:aa:1f:48:59:ad:3b:62:18:2c:ce:
                    4d:76:c4:4c:19:c2:1f:d9:6c:76:2d:75:0f:d7:79:
                    2a:f0:22:2d:a0:29:05:1f:b6:6b:a2:59:c3:3a:28:
                    d1:cb:dd:14:fa:26:f6:d5:25:30:70:9d:b8:20:c4:
                    f6:88:ba:2f:9d:c6:b5:5e:6b:be:d5:0b:26:1e:ca:
                    8f:df:e0:56:30:bc:d9:06:0f:cf:80:ae:f1:84:7c:
                    97:40:88:23:f1:9c:a5:18:cb:38:a9:60:7b:fd:ee:
                    c9:7c:e4:f0:2e:a3:9d:d2:5b:e3:41:1c:4f:e5:34:
                    49:8d:b3:d1:83:6a:0f:5e:8f:38:14:04:28:f9:5d:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E4:5C:61:58:6B:1E:C0:AC:62:49:28:0B:3E:9B:EC:B3:BF:55:DB
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e837e980391600b4ac8d7674bf4e0e5fec8683c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:d3:4d:a4:3a:bf:6d:fc:ca:e0:13:48:81:b7:af:9a:39:
         3a:c2:50:e8:53:1d:03:57:24:ec:bc:73:45:d9:6f:67:1f:a2:
         a3:e1:fc:d4:fe:51:aa:ac:5d:af:15:cb:9a:d4:8b:b8:98:f2:
         21:3a:30:f2:94:ac:a9:e8:1a:4a:7f:f4:12:90:ca:20:41:48:
         02:02:46:7b:55:8a:ce:7d:20:a6:42:f7:38:ca:72:d9:0a:29:
         8d:68:99:d8:5d:1a:0f:c9:7e:b4:91:16:c9:18:e5:a0:e8:ff:
         c3:3f:47:49:c6:4e:51:e2:ef:ea:37:78:fa:4a:4e:bd:34:91:
         83:ed:e6:af:f9:63:ac:62:58:1f:bd:2d:e4:e3:8b:27:2b:0e:
         f4:57:af:73:56:d4:56:11:5b:f5:45:04:7c:a4:96:05:32:8a:
         3a:57:d4:2d:3c:29:02:ff:dd:29:75:7b:52:cb:df:c6:a8:25:
         ee:8d:b1:86:28:f1:82:ea:5d:1e:85:7c:77:c7:f9:98:90:ec:
         7f:00:57:bc:8c:fd:a9:66:d2:ae:19:7d:60:ae:a5:a9:00:68:
         04:8e:27:eb:a5:95:c1:05:10:90:43:1b:84:5d:24:b2:83:91:
         46:2d:2f:de:5c:4e:f5:56:85:38:71:80:c9:b3:b8:c9:5f:02:
         eb:6d:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:11:32 2025 by rpki-client