Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/e72052ec1680a1825d70d46bfcdde448f34d31f7.roa
File:                     e72052ec1680a1825d70d46bfcdde448f34d31f7.roa (raw, json)
Hash identifier:          +Net3PT7X8sc4lqBtMPIPKcH889FZtBnx4dwYnUYiaU=
Subject key identifier:   21:6A:D3:68:87:00:9A:B9:EB:B6:4E:8C:B7:AD:03:85:9C:97:14:7A
Certificate issuer:       /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial:       0DAF24
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/e72052ec1680a1825d70d46bfcdde448f34d31f7.roa
Signing time:             Fri 28 May 2021 14:37:16 +0000
ROA not before:           Fri 28 May 2021 03:00:00 +0000
ROA not after:            Fri 28 May 2060 03:00:00 +0000
asID:                     26611
IP address blocks:        2800:800::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896804 (0xdaf24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Validity
            Not Before: May 28 03:00:00 2021 GMT
            Not After : May 28 03:00:00 2060 GMT
        Subject: CN=e72052ec1680a1825d70d46bfcdde448f34d31f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:de:98:c6:58:07:e2:40:51:37:e1:f1:18:
                    58:12:bb:04:3c:14:56:9b:c0:44:6e:15:cc:55:9f:
                    a7:1f:cf:6f:93:c7:21:b2:0b:f2:12:15:aa:a9:fb:
                    a4:a0:ca:86:36:17:6a:92:2b:96:0f:aa:66:81:1e:
                    c2:b5:a6:9c:23:2d:ee:c9:1f:a0:c5:2b:52:7c:fa:
                    28:bb:b5:7c:57:fb:53:aa:0e:61:06:6f:60:a9:55:
                    ec:e6:2b:1a:ac:3b:9b:5f:de:be:1c:22:7a:d3:36:
                    04:6f:77:bc:2c:4d:ea:5c:4c:ed:a8:b6:fb:0b:6a:
                    4b:ca:75:6a:ad:62:df:8e:18:d2:34:92:90:53:b0:
                    5e:0d:f4:15:ff:15:7a:32:c9:17:37:18:19:31:c1:
                    45:51:4d:49:bc:7e:32:a3:87:fd:3a:01:d6:28:ee:
                    ef:63:ad:f6:3a:9e:c0:c4:74:d5:f6:bf:fa:5c:a0:
                    be:49:fb:26:94:82:88:78:0d:da:b3:76:4f:dd:05:
                    10:10:9e:34:5b:be:e6:67:43:54:9f:d7:47:10:b6:
                    82:eb:24:a7:48:23:f7:02:ff:9d:fe:b2:f4:b2:72:
                    a3:b1:e6:c0:a9:cb:d3:e9:29:91:8a:cd:5e:fd:0b:
                    aa:c9:35:3f:b8:39:58:22:05:98:1f:dd:67:6e:15:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6A:D3:68:87:00:9A:B9:EB:B6:4E:8C:B7:AD:03:85:9C:97:14:7A
            X509v3 Authority Key Identifier:
                keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/e72052ec1680a1825d70d46bfcdde448f34d31f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:800::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:e1:dc:a5:e5:5e:4f:8a:dd:c8:47:a0:40:ee:bd:aa:84:
         20:dc:49:cb:df:68:e5:e0:a2:d0:1c:a0:45:bd:f1:ef:b1:ba:
         0b:fc:a1:4b:f3:3a:76:e7:72:3d:7b:89:0f:40:42:1d:a4:7d:
         6f:0b:2e:34:75:bc:a4:6e:23:d5:0d:af:e5:b8:f3:ef:58:f9:
         c7:79:62:82:01:4b:f3:ca:50:bb:1c:77:16:08:f5:ac:b4:10:
         bd:b2:9c:3a:b9:bd:1d:49:ce:03:97:6b:30:d5:17:40:f6:9a:
         55:49:6a:7b:ae:2e:86:2f:40:e7:32:f0:63:be:32:6e:c8:1a:
         de:12:6f:0c:25:3d:13:68:f4:ba:c7:88:b2:20:23:1c:9e:99:
         3c:72:fc:19:7f:23:f1:b5:f4:82:f6:fe:39:24:3c:61:c6:05:
         d7:2b:f8:6b:57:a2:a7:07:e8:51:6e:76:b3:7a:35:a1:f3:68:
         1f:66:81:70:86:32:63:60:78:bc:f5:b9:06:bf:ee:44:84:22:
         6a:51:26:6a:8a:a5:5e:2d:8d:85:79:29:02:b1:77:49:97:32:
         15:da:dc:5d:82:c4:b8:4a:0c:37:78:6d:ca:ed:4c:31:5f:b1:
         54:41:bb:a0:bb:f5:1d:1a:0b:90:3c:68:bc:1c:af:00:bd:e8:
         d2:d2:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org