Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/44cf2d394abaa5479f26a5b1fdd61b9145ab7bb6.roa
File:                     44cf2d394abaa5479f26a5b1fdd61b9145ab7bb6.roa (raw, json)
Hash identifier:          InZpwocJE5zB+8idRx+7hjxPpz5TDGu0+GPYl1rJkqw=
Subject key identifier:   1C:C9:70:07:50:48:56:ED:36:E6:4A:54:B8:EA:9C:CB:19:E4:24:90
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       299F45
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/44cf2d394abaa5479f26a5b1fdd61b9145ab7bb6.roa
Signing time:             Tue 06 Feb 2024 15:37:02 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        2800:830::/36 maxlen: 36
                          2800:830:1000::/36 maxlen: 36
                          2800:830:2000::/36 maxlen: 36
                          2800:830:3000::/36 maxlen: 36
                          2800:830:4000::/36 maxlen: 36
                          2800:830:5000::/36 maxlen: 36
                          2800:830:6000::/36 maxlen: 36
                          2800:830:7000::/36 maxlen: 36
                          2800:830:8000::/36 maxlen: 36
                          2800:830:9000::/36 maxlen: 36
                          2800:830:a000::/36 maxlen: 36
                          2800:830:b000::/36 maxlen: 36
                          2800:830:c000::/36 maxlen: 36
                          2800:830:d000::/36 maxlen: 36
                          2800:830:e000::/36 maxlen: 36
                          2800:830:f000::/36 maxlen: 36
                          2800:831::/36 maxlen: 36
                          2800:831:1000::/36 maxlen: 36
                          2800:831:2000::/36 maxlen: 36
                          2800:831:3000::/36 maxlen: 36
                          2800:831:4000::/36 maxlen: 36
                          2800:831:5000::/36 maxlen: 36
                          2800:831:6000::/36 maxlen: 36
                          2800:831:7000::/36 maxlen: 36
                          2800:831:8000::/36 maxlen: 36
                          2800:831:9000::/36 maxlen: 36
                          2800:831:a000::/36 maxlen: 36
                          2800:831:b000::/36 maxlen: 36
                          2800:831:c000::/36 maxlen: 36
                          2800:831:d000::/36 maxlen: 36
                          2800:831:e000::/36 maxlen: 36
                          2800:831:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2727749 (0x299f45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=44cf2d394abaa5479f26a5b1fdd61b9145ab7bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:d8:e9:da:af:f0:65:ca:44:76:1a:8b:f4:
                    80:89:42:ae:0b:50:b8:2d:41:53:69:4c:3b:cd:5e:
                    8c:d8:d7:83:8b:ea:7a:7a:07:32:43:9d:40:2e:05:
                    ab:19:57:1f:54:ea:5b:be:03:70:41:42:d5:40:7a:
                    49:e8:d6:23:91:f3:92:83:70:e2:f6:cd:6c:49:9b:
                    9f:cc:c2:d0:c3:41:db:4a:02:ba:15:06:78:99:48:
                    5a:43:c2:af:e0:79:f4:dd:05:95:fd:34:ca:c1:d7:
                    7a:23:0c:f0:b2:d6:98:1f:f4:a5:5b:6a:ec:2c:91:
                    b4:e9:be:98:2c:aa:11:eb:4f:29:7a:6b:30:60:8a:
                    a2:ce:40:2b:18:c4:b7:74:cf:d3:e5:69:f8:07:2d:
                    8e:45:ea:e4:15:c5:1b:72:aa:10:59:1b:c7:2c:d7:
                    55:5c:c2:6f:2b:88:43:77:94:2f:30:5a:d4:e8:35:
                    8f:53:bb:0f:74:55:d2:36:59:a4:5d:c1:16:46:6c:
                    36:15:8b:03:d0:dc:c0:0c:12:6b:33:92:df:68:bd:
                    a9:3b:a1:ab:a8:b1:42:84:45:8c:8b:c6:7c:2b:cf:
                    f3:2c:74:f0:e6:e4:09:96:6d:34:ee:90:41:c6:da:
                    50:b3:5a:a2:4c:ab:fd:1f:57:aa:3d:6b:3f:3a:2f:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C9:70:07:50:48:56:ED:36:E6:4A:54:B8:EA:9C:CB:19:E4:24:90
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/44cf2d394abaa5479f26a5b1fdd61b9145ab7bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:830::/31

    Signature Algorithm: sha256WithRSAEncryption
         3b:f3:85:d9:8a:e7:db:53:b2:a0:62:b3:b8:22:cd:7b:a5:dc:
         cd:84:89:35:04:6c:65:66:5b:23:da:67:cd:79:2a:f2:5a:87:
         d4:a0:7e:ab:0b:5d:c1:c4:dd:90:68:a2:32:82:1f:1f:ca:75:
         49:bb:93:1f:3a:d2:09:c3:58:3e:7d:22:f5:38:9b:da:c8:e9:
         4c:a4:07:4d:07:ed:99:f5:d0:4a:c2:ab:02:98:c8:7e:28:a9:
         fb:99:17:11:61:7e:88:1b:08:d0:97:48:1e:04:29:4c:e1:ee:
         3b:75:de:c2:fd:51:5d:7f:50:cc:bd:c7:b5:ec:8e:d9:ea:16:
         0f:3f:10:0c:3c:ba:ea:9f:29:f7:7b:c8:f2:1b:c4:cb:33:76:
         a1:cb:31:74:6e:77:68:c9:24:71:ca:88:8c:c9:f5:40:ca:10:
         b7:d2:bf:e6:cf:af:bb:2a:98:96:65:f7:5d:1e:40:ab:be:4e:
         e3:df:c3:4f:f0:b0:83:b3:b8:46:69:24:77:47:36:a2:34:90:
         2e:2a:a5:36:25:8c:37:24:9d:4e:16:2e:60:a1:80:76:c9:05:
         3c:3e:ec:c8:a1:30:4a:fd:71:3f:cb:ab:1d:5b:ac:7a:fe:0a:
         a3:b7:9f:10:63:a1:ba:49:e5:91:22:b8:99:39:e1:bd:49:99:
         fc:65:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org