Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/5721e57d4501d308a975fa8cab8707996c83fceb.roa
File:                     5721e57d4501d308a975fa8cab8707996c83fceb.roa (raw, json)
Hash identifier:          ID9lxdxTuhtKyRBvqN6ZuBkwaKOnmjc59MmPJxvJ+Mk=
Subject key identifier:   20:25:01:6B:6C:43:81:38:77:7F:39:FC:08:7D:AB:F7:6B:01:31:43
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       0DAEB6
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/5721e57d4501d308a975fa8cab8707996c83fceb.roa
Signing time:             Wed 24 Mar 2021 14:37:08 +0000
ROA not before:           Wed 24 Mar 2021 14:37:05 +0000
ROA not after:            Tue 24 Mar 2026 14:37:05 +0000
asID:                     52423
IP address blocks:        2803:6900:1::/48 maxlen: 48
                          2803:6900:200::/48 maxlen: 48
                          2803:6900:507::/48 maxlen: 48
                          2803:6900:520::/48 maxlen: 48
                          2803:6900:524::/48 maxlen: 48
                          2803:6900:533::/48 maxlen: 48
                          2803:6900:534::/48 maxlen: 48
                          2803:6900:546::/48 maxlen: 48
                          2803:6900:547::/48 maxlen: 48
                          2803:6900:543::/48 maxlen: 48
                          2803:6900:561::/48 maxlen: 48
                          2803:6900:578::/48 maxlen: 48
                          2803:6900:593::/48 maxlen: 48
                          2803:6900:597::/48 maxlen: 48
                          2803:6900:598::/48 maxlen: 48
                          2803:6900:1400::/48 maxlen: 48
                          2803:6900:1500::/48 maxlen: 48
                          2803:6900:1501::/48 maxlen: 48
                          2803:6900:1503::/48 maxlen: 48
                          2803:6900:1510::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896694 (0xdaeb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=5721e57d4501d308a975fa8cab8707996c83fceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:8e:ea:8d:7b:5f:9d:e8:6d:19:f2:0f:61:
                    87:28:61:6f:47:55:f8:1a:3f:b3:ca:81:19:f0:3a:
                    2e:1a:1a:b5:10:83:fc:1e:7c:6d:1d:86:15:a7:3d:
                    6d:62:71:18:3f:a1:1a:6b:e0:4a:e2:84:86:8f:4b:
                    ab:46:09:5e:f0:c0:20:ed:11:83:05:f7:1c:a3:dc:
                    1d:5d:fe:69:e5:d1:23:34:f6:62:9c:40:8f:cf:f3:
                    e6:bb:88:1d:17:65:84:fc:a8:e3:a8:b2:27:fe:b9:
                    2d:95:e2:1e:56:1f:b1:33:ed:0d:30:ab:a0:7d:95:
                    ee:51:8c:09:d7:8f:26:a8:9d:be:21:ee:4b:a0:96:
                    55:b8:84:a3:df:ce:9d:24:c2:54:39:51:cb:9b:b4:
                    35:9a:8a:e4:55:58:8c:fb:bf:14:e2:42:1d:c3:1f:
                    46:47:f2:35:ca:12:c0:ee:45:b6:1f:61:db:3c:bc:
                    2e:0d:7f:23:a1:9e:e6:88:01:6b:47:f4:51:69:02:
                    e1:b0:eb:49:e3:90:f9:70:d8:fd:07:db:b0:7f:fb:
                    89:d2:06:0b:3b:f2:59:cd:99:fc:3e:79:8d:5d:d4:
                    de:8e:4c:18:79:36:57:5c:76:4f:47:5c:fe:d6:0c:
                    4f:d5:a5:50:4c:73:d3:08:52:57:0c:1e:fa:af:2b:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:25:01:6B:6C:43:81:38:77:7F:39:FC:08:7D:AB:F7:6B:01:31:43
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/5721e57d4501d308a975fa8cab8707996c83fceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1::/48
                  2803:6900:200::/48
                  2803:6900:507::/48
                  2803:6900:520::/48
                  2803:6900:524::/48
                  2803:6900:533::-2803:6900:534:ffff:ffff:ffff:ffff:ffff
                  2803:6900:543::/48
                  2803:6900:546::/47
                  2803:6900:561::/48
                  2803:6900:578::/48
                  2803:6900:593::/48
                  2803:6900:597::-2803:6900:598:ffff:ffff:ffff:ffff:ffff
                  2803:6900:1400::/48
                  2803:6900:1500::/47
                  2803:6900:1503::/48
                  2803:6900:1510::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:c4:f8:c7:8b:4b:29:71:ee:03:20:6b:c3:16:e3:0b:65:9d:
         84:44:33:b6:54:e4:8f:52:24:1c:f8:15:c0:58:b8:24:6e:02:
         bd:c9:9c:7e:29:a5:21:99:48:cd:3a:54:0a:d9:77:7d:aa:02:
         62:d2:0b:17:b6:fa:fd:f8:58:92:0b:f1:5f:a8:46:12:b8:23:
         ba:50:85:c2:88:0e:40:93:0e:71:fd:f8:0e:22:e8:ce:e4:6e:
         7e:ea:60:55:1a:c9:f3:1c:a2:9f:ba:f2:55:1d:a4:b0:39:13:
         50:d3:5f:85:dd:15:63:0d:c5:8b:0a:66:98:bc:72:68:b2:ba:
         95:78:3f:8e:b4:72:e8:69:9e:29:e1:42:a1:83:1a:3f:9d:6f:
         b5:be:b2:86:52:72:d0:a0:0b:a5:c1:a5:de:a2:4a:93:13:95:
         a5:db:e6:2e:9c:15:a2:6f:c9:1d:08:7a:af:a7:2e:5c:9d:20:
         f9:10:d0:f5:7e:32:a8:9d:85:f4:4b:de:c2:e6:94:a1:bc:b1:
         24:67:a6:90:4c:5f:0d:e2:9d:68:7b:19:e4:b9:1f:73:45:6a:
         e4:4b:2a:13:e1:36:13:93:6c:8b:7e:17:66:41:58:15:8e:a8:
         1f:51:0c:8c:8c:2f:e4:9f:48:ad:ef:92:f7:76:8f:fe:82:fc:
         2e:7d:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org