Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/034a81d72cac0b7811be805b2a64284d0cd36d9f.roa
File:                     034a81d72cac0b7811be805b2a64284d0cd36d9f.roa (raw, json)
Hash identifier:          X5nG/HLSEsq21JhZ/ioe6eLeV33ql/TjsBOZpb4SwbM=
Subject key identifier:   34:CA:30:CB:39:74:A9:F4:56:3B:9C:B0:89:00:BE:51:F0:99:92:D9
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       0E1B01
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/034a81d72cac0b7811be805b2a64284d0cd36d9f.roa
Signing time:             Wed 24 Mar 2021 14:42:05 +0000
ROA not before:           Wed 24 Mar 2021 14:42:05 +0000
ROA not after:            Tue 24 Mar 2026 14:42:05 +0000
asID:                     262206
IP address blocks:        2803:16a0:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924417 (0xe1b01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Mar 24 14:42:05 2021 GMT
            Not After : Mar 24 14:42:05 2026 GMT
        Subject: CN=034a81d72cac0b7811be805b2a64284d0cd36d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:9c:ea:83:59:cb:1a:dc:c8:0e:13:fc:04:
                    45:11:6f:6a:08:54:38:80:46:ba:bf:6f:0d:c8:47:
                    1b:60:ea:8c:24:38:0a:de:33:6b:67:83:4d:de:ad:
                    8e:fa:d6:43:79:7b:68:81:74:31:4d:c0:a6:76:4c:
                    56:cd:5a:ed:4b:30:7f:ae:b3:c7:8a:59:98:30:7c:
                    e4:3e:c8:a1:fc:e2:ce:91:b6:95:1a:fd:ab:9c:94:
                    f7:9e:99:83:96:a8:a2:72:c6:db:a8:28:8f:67:cb:
                    df:de:a3:43:f0:2f:50:74:4b:21:a2:fd:37:93:0e:
                    6a:3b:72:11:a4:1b:8c:01:35:12:35:d1:7c:6e:80:
                    f8:49:96:8c:51:ed:0b:b7:41:56:16:f1:f6:2c:74:
                    20:a6:6b:39:47:ac:ae:6d:14:52:98:43:cb:5a:63:
                    b2:3c:62:13:dc:06:b7:33:eb:b7:46:39:52:bd:31:
                    0f:54:dc:b6:c6:20:41:af:40:79:8c:db:46:b4:59:
                    40:62:71:88:26:65:dc:07:70:2b:1d:21:21:d7:09:
                    a4:e9:c7:e2:1c:9a:59:be:d8:7a:4d:07:f1:27:f9:
                    60:ae:21:e7:7f:87:15:cd:e3:3d:9b:7c:72:33:bb:
                    b4:0a:f3:5f:a2:9b:02:8e:56:61:4f:68:17:9f:d2:
                    4f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CA:30:CB:39:74:A9:F4:56:3B:9C:B0:89:00:BE:51:F0:99:92:D9
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/034a81d72cac0b7811be805b2a64284d0cd36d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:16a0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:75:6e:ec:be:c9:9f:de:df:35:b5:f0:c9:7e:10:87:69:c5:
         3e:ff:04:4b:96:89:de:91:14:e1:75:d8:1f:73:82:16:a5:45:
         fc:f0:99:13:80:f4:b3:5c:85:b9:80:dd:33:f0:9f:83:45:7f:
         70:81:59:fe:a7:f9:f2:f8:a6:d0:c3:53:7c:53:1c:9e:77:55:
         0b:53:c1:c5:87:64:c2:6a:43:d5:fb:04:4e:49:16:12:61:f7:
         09:e0:94:c5:09:8e:e2:38:59:95:83:1d:b9:21:d6:84:34:f8:
         37:57:e3:fe:3f:eb:e0:68:6b:cc:f9:9e:65:81:87:1d:90:42:
         94:c3:d8:09:f7:82:25:b5:6b:42:23:5d:e9:d6:f8:00:42:e5:
         f1:8a:a2:60:de:84:8c:d2:b7:d2:c7:d8:9b:9f:12:3b:4b:52:
         31:30:66:c2:a1:8a:a7:09:22:70:1b:16:74:1b:4b:19:00:8e:
         20:e7:34:83:7a:3b:ac:f5:f6:bd:33:68:34:97:60:2b:c1:f2:
         31:3a:27:ab:a5:5f:df:57:15:53:61:81:6a:34:27:09:07:78:
         f0:fe:01:fc:f4:21:8f:4b:0b:45:aa:03:db:00:34:e3:7a:bd:
         d4:38:29:ca:d4:e4:b9:62:1a:c4:2f:70:be:20:8c:f7:ee:8b:
         e9:37:e6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 00:39:15 2024 by rpki-client on console-fra.rpki-client.org