Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/ec1a8b7b7e33c38cdaed4940645828479927fcaf.roa
File:                     ec1a8b7b7e33c38cdaed4940645828479927fcaf.roa (raw, json)
Hash identifier:          q74NiLFkI8jBiVw3kVnrGG601THTCStjN301Lfh2NYg=
Subject key identifier:   A4:06:6E:FF:EA:02:0D:4C:EE:DC:B6:3D:8A:9D:A9:5B:D9:68:DB:F0
Certificate issuer:       /CN=65de11d1592f5fc8dd997228321049e1fb3afa86
Certificate serial:       0DC500
Authority key identifier: 7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/ec1a8b7b7e33c38cdaed4940645828479927fcaf.roa
Signing time:             Sun 13 Jun 2021 19:55:18 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269782
IP address blocks:        2803:2360::/33 maxlen: 33
                          2803:2360:8000::/33 maxlen: 33
                          2803:2360::/34 maxlen: 34
                          2803:2360:4000::/34 maxlen: 34
                          2803:2360:8000::/34 maxlen: 34
                          2803:2360:c000::/34 maxlen: 34
                          2803:2360::/35 maxlen: 35
                          2803:2360:2000::/35 maxlen: 35
                          2803:2360:4000::/35 maxlen: 35
                          2803:2360:6000::/35 maxlen: 35
                          2803:2360:8000::/35 maxlen: 35
                          2803:2360:a000::/35 maxlen: 35
                          2803:2360:c000::/35 maxlen: 35
                          2803:2360:e000::/35 maxlen: 35
                          2803:2360::/36 maxlen: 36
                          2803:2360:1000::/36 maxlen: 36
                          2803:2360:2000::/36 maxlen: 36
                          2803:2360:3000::/36 maxlen: 36
                          2803:2360:4000::/36 maxlen: 36
                          2803:2360:5000::/36 maxlen: 36
                          2803:2360:6000::/36 maxlen: 36
                          2803:2360:7000::/36 maxlen: 36
                          2803:2360:8000::/36 maxlen: 36
                          2803:2360:9000::/36 maxlen: 36
                          2803:2360:a000::/36 maxlen: 36
                          2803:2360:b000::/36 maxlen: 36
                          2803:2360:c000::/36 maxlen: 36
                          2803:2360:d000::/36 maxlen: 36
                          2803:2360:e000::/36 maxlen: 36
                          2803:2360:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902400 (0xdc500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65de11d1592f5fc8dd997228321049e1fb3afa86
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ec1a8b7b7e33c38cdaed4940645828479927fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d4:f3:eb:1a:e9:29:ec:c4:4f:93:a6:b4:82:
                    9d:ff:28:b4:2c:f6:25:d7:c8:11:27:84:29:72:40:
                    84:5a:f4:bb:15:7a:f1:b3:c9:cb:58:a8:8e:32:ec:
                    9d:d7:c6:d2:11:d5:72:ce:ad:30:50:27:3c:00:ed:
                    23:0a:2f:cc:98:28:2b:e3:4b:06:1a:e1:db:f7:3d:
                    2d:5d:56:ff:6c:b6:b7:87:81:bd:35:d4:11:3d:4d:
                    55:0c:f9:65:a7:9e:ff:40:db:b4:34:b3:95:a8:72:
                    07:4e:c6:4d:21:f6:1c:2a:cd:e4:81:6a:f1:7d:d6:
                    76:82:9b:32:e6:5e:a0:3d:b3:29:a5:cd:83:7c:94:
                    f7:48:d1:82:5d:cb:4f:56:78:e1:72:fd:98:80:ee:
                    93:8c:1b:5f:13:67:6a:af:91:a5:a4:02:fc:d3:47:
                    41:0c:ac:2d:ed:36:ef:b8:61:ef:47:4a:ae:5b:b0:
                    5d:61:8b:cf:eb:36:f8:d6:59:62:e9:73:61:f5:58:
                    fb:52:d3:db:44:d8:65:f5:12:76:2b:04:16:b4:85:
                    4f:46:b4:b8:03:ef:80:84:5c:9d:62:30:09:24:27:
                    c0:64:41:80:bd:a2:4c:fb:5e:10:24:46:85:69:e6:
                    10:d2:ba:3f:2a:ef:7e:a4:4e:ef:a7:eb:03:36:d8:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:06:6E:FF:EA:02:0D:4C:EE:DC:B6:3D:8A:9D:A9:5B:D9:68:DB:F0
            X509v3 Authority Key Identifier:
                keyid:7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/ec1a8b7b7e33c38cdaed4940645828479927fcaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/65de11d1592f5fc8dd997228321049e1fb3afa86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:c9:b6:f4:23:37:0d:f3:2b:3a:64:9e:f8:d3:d0:13:91:59:
         a1:64:fd:21:56:ff:48:f8:63:98:05:1b:e0:76:72:c3:d8:ca:
         55:be:b7:5a:98:77:63:5f:0e:89:b6:ac:59:e4:5f:06:6f:4d:
         3e:76:ac:de:5d:00:b4:ac:ab:32:2c:01:68:05:c2:17:3f:2b:
         9b:6e:cf:c3:72:37:ee:b8:eb:cb:a6:ae:1d:c6:f6:58:d9:f1:
         cf:c9:9e:1c:a9:19:44:e6:0b:44:d8:c0:a1:32:f9:15:5c:8d:
         89:c8:03:ef:26:17:fa:9c:95:02:c4:e6:d4:6e:72:e9:c4:5a:
         f5:7a:0e:09:11:a6:25:fd:09:84:76:28:df:e1:d0:bd:3e:7c:
         38:c3:86:78:54:1d:b2:29:17:96:5b:cd:f6:ba:d2:a7:1d:c8:
         09:c2:94:f0:a5:cd:c1:6d:eb:a6:22:50:fa:e2:22:64:e6:ed:
         0a:03:d2:d2:ed:05:9b:39:0d:47:77:48:e5:e8:3b:57:b8:15:
         ad:47:d9:ae:e9:e1:e5:6f:05:30:e1:ff:da:05:d5:cd:78:b9:
         c9:7f:c3:4d:8e:f9:15:0a:4e:1e:30:8c:da:f3:df:a3:86:c0:
         71:dc:be:f0:38:f1:15:10:5e:e8:0b:b3:a2:8e:c8:a4:84:63:
         44:67:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org