Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5e374d0e3e3a424f0d882d7476dae6fb5066e8c5.roa
File:                     5e374d0e3e3a424f0d882d7476dae6fb5066e8c5.roa (raw, json)
Hash identifier:          2TrdSTb/zT4bNGHSJmBe8VXDRdwn6U+nf8Rtlc+y9W8=
Subject key identifier:   74:4B:2D:59:F4:7D:6C:5C:27:78:C4:CD:A4:C5:BC:0D:79:5E:BA:76
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       2672C2
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5e374d0e3e3a424f0d882d7476dae6fb5066e8c5.roa
Signing time:             Fri 27 Oct 2023 16:37:49 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        2800:830::/36 maxlen: 36
                          2800:830:1000::/36 maxlen: 36
                          2800:830:2000::/36 maxlen: 36
                          2800:830:3000::/36 maxlen: 36
                          2800:830:4000::/36 maxlen: 36
                          2800:830:5000::/36 maxlen: 36
                          2800:830:6000::/36 maxlen: 36
                          2800:830:7000::/36 maxlen: 36
                          2800:830:8000::/36 maxlen: 36
                          2800:830:9000::/36 maxlen: 36
                          2800:830:a000::/36 maxlen: 36
                          2800:830:b000::/36 maxlen: 36
                          2800:830:c000::/36 maxlen: 36
                          2800:830:d000::/36 maxlen: 36
                          2800:830:e000::/36 maxlen: 36
                          2800:830:f000::/36 maxlen: 36
                          2800:831::/36 maxlen: 36
                          2800:831:1000::/36 maxlen: 36
                          2800:831:2000::/36 maxlen: 36
                          2800:831:3000::/36 maxlen: 36
                          2800:831:4000::/36 maxlen: 36
                          2800:831:5000::/36 maxlen: 36
                          2800:831:6000::/36 maxlen: 36
                          2800:831:7000::/36 maxlen: 36
                          2800:831:8000::/36 maxlen: 36
                          2800:831:9000::/36 maxlen: 36
                          2800:831:a000::/36 maxlen: 36
                          2800:831:b000::/36 maxlen: 36
                          2800:831:c000::/36 maxlen: 36
                          2800:831:d000::/36 maxlen: 36
                          2800:831:e000::/36 maxlen: 36
                          2800:831:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2519746 (0x2672c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=5e374d0e3e3a424f0d882d7476dae6fb5066e8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:89:e8:61:b2:9b:98:e5:b5:45:ca:58:74:
                    7d:57:33:34:30:c8:2b:a7:eb:47:57:0f:96:d8:33:
                    e6:60:2f:81:46:f2:b5:b5:ba:51:64:35:8e:07:c4:
                    f1:f5:41:2f:74:f4:8b:af:0c:4b:61:4e:7a:bc:a7:
                    16:c1:39:87:94:32:3d:15:b8:03:b9:2c:ee:14:9c:
                    dc:e7:c0:6e:da:53:20:cc:d9:ec:c8:e4:61:2a:a4:
                    7c:67:db:15:df:67:a6:3e:72:53:d1:19:02:9e:80:
                    46:64:73:4b:fc:ce:de:39:ce:c9:74:5e:51:99:9a:
                    03:19:02:62:20:e8:27:57:e5:6d:b1:3c:68:d1:e7:
                    d7:82:71:39:6d:ef:49:d7:ad:2b:bd:0f:ed:69:f2:
                    d2:69:a8:7f:bf:a7:1d:35:2d:a6:c0:cb:c6:e9:9b:
                    39:fb:bf:a0:64:2f:23:13:dd:4a:27:0d:19:fb:64:
                    36:5c:c3:5c:55:ba:2f:f5:fc:84:e1:5f:d1:85:d9:
                    e4:84:8f:b9:52:7d:54:b2:a1:6d:82:ab:81:b5:3f:
                    62:e1:78:ac:cb:9d:ad:94:3a:5e:5a:5b:5a:e8:f4:
                    84:a9:54:a0:04:06:44:58:75:e9:1b:e3:aa:18:1c:
                    bb:43:61:60:cc:b3:11:11:59:e5:ed:39:b2:22:4c:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4B:2D:59:F4:7D:6C:5C:27:78:C4:CD:A4:C5:BC:0D:79:5E:BA:76
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5e374d0e3e3a424f0d882d7476dae6fb5066e8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:830::/31

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:67:03:4b:5b:6a:80:77:a6:83:01:fe:d5:07:6b:ae:a2:
         44:b5:1c:97:27:57:bf:c6:f6:d2:a3:72:a0:e4:3f:89:38:74:
         3e:10:1a:d5:09:dd:40:3a:ca:5a:05:15:67:90:be:c5:54:92:
         eb:a3:cb:e0:86:c1:9e:b3:05:78:b1:9f:3a:09:e6:69:75:db:
         d5:77:ef:73:f6:4c:85:15:1e:53:f5:74:38:f7:69:66:2e:04:
         17:de:7d:13:bd:29:e2:2a:9c:68:cb:56:39:8e:d4:8c:de:0b:
         cb:48:5f:c6:98:60:0d:6a:71:01:0e:61:ec:0e:5b:62:04:43:
         95:2e:9f:d9:2b:3b:26:ac:e5:9d:cb:fc:dd:56:48:88:0e:c1:
         9d:70:0a:6d:4b:8f:e1:7e:82:62:f8:2f:9b:32:02:59:26:50:
         24:6c:10:50:5a:7b:ec:d1:1e:62:24:90:b9:0a:8b:cc:f6:75:
         9f:fd:4b:ea:6d:3a:77:b1:21:25:3d:1f:0d:aa:bc:48:98:c0:
         af:12:06:ec:af:24:ee:a2:6e:d4:a4:46:54:00:81:88:18:1f:
         62:1c:3b:30:e3:9e:c2:ee:ed:41:b6:d1:72:07:6e:46:57:28:
         73:45:dc:72:5b:23:72:5f:37:2d:42:05:45:db:62:51:3a:b3:
         cc:08:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org