Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/f07e30f01de322b849bbb4e8249408ba94b0e9f8.roa
File:                     f07e30f01de322b849bbb4e8249408ba94b0e9f8.roa (raw, json)
Hash identifier:          f3tcrKW+lRuQDzun0wMiyIxK/OXNFA/3f7k5zhaPX6c=
Subject key identifier:   57:A8:50:24:4F:37:18:BD:FF:12:E1:92:9B:92:BC:B3:3A:B9:62:23
Certificate issuer:       /CN=ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2
Certificate serial:       0274D1
Authority key identifier: 4D:C4:BE:E7:70:29:F1:7F:3B:E4:82:4E:CE:46:ED:A4:FC:8A:A5:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/f07e30f01de322b849bbb4e8249408ba94b0e9f8.roa
Signing time:             Sat 12 Aug 2023 21:13:29 +0000
ROA not before:           Fri 11 Aug 2023 21:13:29 +0000
ROA not after:            Tue 12 Aug 2025 21:13:29 +0000
asID:                     272966
IP address blocks:        2803:8590::/40 maxlen: 40
                          2803:8590:100::/40 maxlen: 40
                          2803:8590:200::/40 maxlen: 40
                          2803:8590:300::/40 maxlen: 40
                          2803:8590:400::/40 maxlen: 40
                          2803:8590:500::/40 maxlen: 40
                          2803:8590:600::/40 maxlen: 40
                          2803:8590:700::/40 maxlen: 40
                          2803:8590:800::/40 maxlen: 40
                          2803:8590:900::/40 maxlen: 40
                          2803:8590:a00::/40 maxlen: 40
                          2803:8590:b00::/40 maxlen: 40
                          2803:8590:c00::/40 maxlen: 40
                          2803:8590:d00::/40 maxlen: 40
                          2803:8590:e00::/40 maxlen: 40
                          2803:8590:f00::/40 maxlen: 40
                          2803:8590:1000::/40 maxlen: 40
                          2803:8590:1100::/40 maxlen: 40
                          2803:8590:1200::/40 maxlen: 40
                          2803:8590:1300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160977 (0x274d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2
        Validity
            Not Before: Aug 11 21:13:29 2023 GMT
            Not After : Aug 12 21:13:29 2025 GMT
        Subject: CN=f07e30f01de322b849bbb4e8249408ba94b0e9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:9d:0a:da:c2:47:a0:da:b0:f9:5a:e9:cd:
                    d3:bd:b6:94:78:8d:5d:9a:d3:c4:b8:77:c4:14:38:
                    93:13:24:fd:37:92:5d:0c:9b:47:ad:0d:ed:70:e7:
                    79:70:0c:30:08:83:82:5d:bf:06:71:b5:ed:25:56:
                    68:6b:56:49:aa:22:a7:9d:7b:46:7e:5c:99:ff:57:
                    5f:27:51:c7:32:d5:d2:f7:7e:fd:48:04:8e:2b:5b:
                    d7:8d:5c:c4:5e:f2:be:eb:4b:c9:51:87:0d:97:05:
                    85:0f:2c:59:28:a8:a5:70:0a:51:d9:93:11:0b:13:
                    a1:99:31:18:22:e8:db:f9:68:e2:31:8d:b0:05:f5:
                    23:31:5f:25:1f:17:e4:ce:65:ac:0a:00:43:73:ef:
                    18:79:c8:ff:69:d7:2c:51:17:ca:e6:80:10:c3:f9:
                    a9:db:d9:56:43:7e:67:00:a5:ac:9c:b2:e8:82:e7:
                    42:ae:a7:18:4b:76:03:e0:9e:58:11:f7:65:f7:27:
                    71:b1:62:6a:f9:5e:67:d5:18:d2:7b:7d:1c:2f:b2:
                    39:df:c5:f2:9b:5f:f6:cb:f8:ad:9f:f4:68:cd:eb:
                    e9:3b:96:f3:2e:66:04:86:c9:c5:53:d9:ff:a0:a9:
                    81:60:f0:91:eb:95:45:31:a0:56:3c:53:91:6e:6d:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A8:50:24:4F:37:18:BD:FF:12:E1:92:9B:92:BC:B3:3A:B9:62:23
            X509v3 Authority Key Identifier:
                keyid:4D:C4:BE:E7:70:29:F1:7F:3B:E4:82:4E:CE:46:ED:A4:FC:8A:A5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/f07e30f01de322b849bbb4e8249408ba94b0e9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590::-2803:8590:13ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         03:93:41:d1:8f:df:a0:96:a7:c4:b7:ac:80:4d:eb:ea:57:db:
         41:09:08:b0:0d:9a:ab:81:55:be:52:a7:8e:e8:32:e9:13:26:
         f0:a7:8e:59:e4:2a:83:12:e1:22:64:67:88:db:7f:03:c3:c6:
         81:3b:a5:31:76:76:e3:d9:2d:1a:f6:aa:e9:6a:79:b9:0e:79:
         f3:cc:27:4d:57:0e:97:e5:83:0a:b3:4b:a0:0f:44:4f:95:81:
         a4:50:5a:61:c5:59:c2:2e:f6:6f:fc:88:49:52:90:11:9b:2b:
         65:de:d3:70:ad:b6:bc:f0:60:9c:05:b2:cc:a5:fc:75:be:2a:
         79:4b:48:e4:7e:a3:af:09:2e:73:3d:01:5c:55:37:b0:49:ca:
         a2:56:b2:6a:57:dc:cb:67:84:b6:3e:b5:db:74:54:6d:25:df:
         eb:3a:24:6f:6e:ba:9a:d5:f4:4f:65:e5:9a:e7:b1:cf:b5:5a:
         52:23:6d:b7:46:96:e5:41:88:de:a8:44:10:fd:a2:6a:78:fc:
         6c:19:93:0e:9b:1d:d2:20:83:2c:1a:a3:92:35:bb:08:e2:86:
         9b:a7:c7:e6:7f:3f:2b:85:a0:ef:59:df:3e:32:c6:e1:16:73:
         0a:3b:2e:c4:ce:b2:f6:58:97:4b:c3:1b:38:44:f6:82:e1:a8:
         db:7f:9d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org