Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/52468367b7b2b31cbd8c55c5f40064bd0d7a9979.roa
File:                     52468367b7b2b31cbd8c55c5f40064bd0d7a9979.roa (raw, json)
Hash identifier:          AImeNBFpXGxzU7WSzFYDt0VaHBe/SViVhcGSgQd7exM=
Subject key identifier:   8F:A7:1E:77:C1:6B:C3:8B:C0:D2:7E:B3:5E:5B:47:16:1D:39:16:8B
Certificate issuer:       /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial:       1C8666
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/52468367b7b2b31cbd8c55c5f40064bd0d7a9979.roa
Signing time:             Thu 15 Feb 2024 13:14:45 +0000
ROA not before:           Thu 15 Feb 2024 13:14:45 +0000
ROA not after:            Sun 15 Feb 2026 13:14:45 +0000
asID:                     272992
IP address blocks:        2803:8b80:100::/48 maxlen: 48
                          2803:8b80:101::/48 maxlen: 48
                          2803:8b80:102::/48 maxlen: 48
                          2803:8b80:103::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869414 (0x1c8666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
        Validity
            Not Before: Feb 15 13:14:45 2024 GMT
            Not After : Feb 15 13:14:45 2026 GMT
        Subject: CN=52468367b7b2b31cbd8c55c5f40064bd0d7a9979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:cd:4a:4a:b3:98:8c:b1:49:e5:90:9c:c9:
                    60:c5:e3:47:f1:b9:4b:2e:7b:70:b7:4d:aa:38:04:
                    6e:1d:49:88:ee:56:95:f9:bb:dd:f8:91:a4:be:0a:
                    d1:20:7e:19:71:45:2c:72:1f:b6:52:44:06:2e:a8:
                    f7:3a:fd:3c:e2:ac:7a:ab:76:a7:2d:2a:ab:8b:07:
                    60:35:f3:d0:2d:db:9a:32:93:ab:3f:a7:17:92:34:
                    b9:10:29:cd:b9:d3:58:85:bc:43:39:14:f3:5d:1d:
                    e5:64:91:5c:25:2d:81:53:ef:07:e7:26:b4:32:83:
                    fa:19:d6:77:af:a2:b7:47:c2:5c:45:12:15:b2:ea:
                    5c:04:b5:3f:37:a7:4b:cb:f0:f6:a8:fc:d9:6e:49:
                    ef:24:76:d8:34:12:fe:2f:df:56:39:7f:52:32:16:
                    df:54:da:25:f8:2e:5b:f2:55:16:6f:b1:05:fa:6d:
                    43:7e:23:91:a3:7b:be:76:90:6a:53:d8:12:e3:23:
                    f7:6b:fa:e8:46:c8:f8:a3:81:14:75:90:e1:c1:02:
                    f2:4a:40:44:25:f0:1e:aa:e7:c7:3e:73:62:94:c9:
                    b6:e0:fa:ca:dd:79:5e:a4:af:45:68:20:a2:dd:6c:
                    83:07:4b:00:11:e6:db:73:a1:0c:31:52:7e:37:4f:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:1E:77:C1:6B:C3:8B:C0:D2:7E:B3:5E:5B:47:16:1D:39:16:8B
            X509v3 Authority Key Identifier:
                keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/52468367b7b2b31cbd8c55c5f40064bd0d7a9979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b80:100::/46

    Signature Algorithm: sha256WithRSAEncryption
         7d:89:d5:0b:e0:88:17:fa:6a:86:65:6a:6e:45:a8:da:ea:90:
         f6:1d:4d:8e:9c:e1:c7:15:61:f0:f9:d0:a4:1a:43:3a:36:23:
         00:b2:db:1b:9b:b5:7c:d2:bc:2d:d9:b7:2b:72:17:f9:8e:7b:
         27:3b:8c:37:c8:ff:86:ca:db:85:26:6a:84:d6:42:e4:a5:40:
         e6:bc:bd:fc:e5:e6:cd:af:17:bf:f0:26:f6:e9:86:ce:0d:b0:
         fc:49:10:49:20:1f:76:0e:a2:21:8a:9f:0e:74:ea:6d:25:1a:
         61:9b:31:40:3f:57:a0:9e:48:b0:9d:a5:42:f4:5b:b2:fa:8c:
         bd:c2:8b:db:f8:f2:74:a3:90:a6:1a:04:79:37:2a:2d:a9:49:
         fd:69:8a:6b:f2:cb:e5:33:7d:0f:ad:86:3d:0c:be:af:ff:cc:
         41:43:5b:aa:1c:d7:59:03:b0:5a:a6:fa:ce:02:56:cf:88:08:
         9e:19:24:dc:13:e7:65:3c:22:10:0f:43:a5:64:a3:4c:c1:7d:
         a6:2a:01:35:de:6f:3f:be:66:99:06:92:a6:65:86:8a:f7:bc:
         d0:97:e0:a7:04:d8:6b:94:f2:03:25:46:c3:f0:29:f7:5b:b9:
         2a:77:7a:67:de:a9:7f:f5:59:d5:2d:93:96:f0:3b:c0:07:fc:
         10:d7:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org