Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/ce93d8302428344e34a7fba41a5d2821d2da5051.roa
File:                     ce93d8302428344e34a7fba41a5d2821d2da5051.roa (raw, json)
Hash identifier:          EJSiqnNHz9kwO6fXzxMQ6GiQNPIWfVVxYCJDrJI0RIU=
Subject key identifier:   CC:77:D9:BB:95:BD:A1:B1:35:32:B7:B6:6D:AE:9C:64:FC:EC:F2:12
Certificate issuer:       /CN=cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b
Certificate serial:       0CE844
Authority key identifier: B0:DC:AD:E6:7B:75:6C:49:04:1C:82:B6:0D:1A:4B:17:2C:69:7C:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/ce93d8302428344e34a7fba41a5d2821d2da5051.roa
Signing time:             Wed 24 Mar 2021 14:34:10 +0000
ROA not before:           Wed 24 Mar 2021 14:34:10 +0000
ROA not after:            Tue 24 Mar 2026 14:34:10 +0000
asID:                     263237
IP address blocks:        2803:8180::/45 maxlen: 48
                          2803:8180:8::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845892 (0xce844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b
        Validity
            Not Before: Mar 24 14:34:10 2021 GMT
            Not After : Mar 24 14:34:10 2026 GMT
        Subject: CN=ce93d8302428344e34a7fba41a5d2821d2da5051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:cd:12:56:89:11:21:fa:1c:8d:11:9c:7f:
                    b5:29:6c:a5:23:18:b6:c8:9a:82:0b:82:5c:06:9b:
                    3d:8a:9b:85:b5:3f:93:97:04:e7:63:00:98:9b:40:
                    50:b3:98:c1:a6:1c:75:5f:36:1c:c5:3e:ac:fb:50:
                    4b:57:8e:86:4c:08:3e:3f:98:ec:8e:c3:20:1e:39:
                    33:dd:67:8d:ee:ca:0c:fa:3d:33:d3:68:e8:78:f8:
                    07:ed:0f:4a:0e:88:3d:80:f0:22:8a:24:b1:59:ee:
                    7a:a4:2b:82:e8:f7:46:47:77:f7:0b:72:38:7b:7b:
                    3f:3f:3e:70:89:48:c2:65:50:6e:11:f1:f0:44:67:
                    b8:07:0e:f9:49:72:96:4a:0b:cc:44:d5:56:6a:37:
                    3f:16:48:d1:03:56:21:ed:3f:6c:c1:c9:60:41:6d:
                    bb:af:17:d3:e6:9e:9c:42:d4:56:97:62:7e:8d:b5:
                    72:05:36:6c:89:b1:72:70:63:6f:eb:70:5b:87:ec:
                    11:50:0c:32:b6:f7:c6:32:ad:d1:05:ad:81:fd:5d:
                    12:2a:ef:dd:3b:a5:5c:a7:fd:64:73:3c:3b:a2:0d:
                    6d:24:5f:8c:64:d8:ea:30:56:27:d7:7a:59:6a:72:
                    32:c9:d0:8c:1e:2e:68:88:fb:20:3e:a6:fa:c5:ad:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:77:D9:BB:95:BD:A1:B1:35:32:B7:B6:6D:AE:9C:64:FC:EC:F2:12
            X509v3 Authority Key Identifier:
                keyid:B0:DC:AD:E6:7B:75:6C:49:04:1C:82:B6:0D:1A:4B:17:2C:69:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/ce93d8302428344e34a7fba41a5d2821d2da5051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79ca696a-a520-4632-9856-c8c301ee19bf/cc8da9cbf7f9e8b8a84570a7a82f2d68027cb60b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8180::-2803:8180:9:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         99:91:ce:11:b6:e4:f9:fa:ae:78:a5:3f:33:5f:c9:d8:f1:2a:
         0c:c7:d2:0e:86:d2:21:cf:d7:dd:f6:56:e0:94:22:ab:d7:63:
         03:a1:8d:80:6d:a5:9b:44:10:30:b7:60:d8:fa:af:4f:22:aa:
         ad:e3:b3:c6:d1:45:96:0e:e3:3a:83:d3:a7:c1:ef:64:6a:a9:
         88:60:91:ce:65:d5:f6:f5:bc:86:bd:47:c6:7a:bd:4c:ad:5f:
         8f:89:e8:1e:af:9a:35:7a:5a:0a:a3:7c:5d:c6:f8:16:37:4f:
         f7:db:17:a1:29:d4:89:37:b6:99:48:8b:e3:b6:c2:de:ff:73:
         86:66:ad:9e:38:86:1d:d9:bf:19:c4:83:01:37:d4:05:c5:fd:
         be:54:99:d4:77:53:6c:76:4f:a4:8e:4a:52:fe:c1:c3:58:e9:
         7b:ee:f1:23:be:a7:48:38:30:30:d7:77:4a:c2:67:a5:ac:8e:
         77:2f:e3:9e:7b:21:0e:2b:f1:e2:35:fb:48:30:20:a9:0a:45:
         96:da:08:4d:c2:bd:d4:f8:8a:34:22:36:5a:8d:7b:cf:60:19:
         08:88:1a:f7:0f:ec:d2:78:25:84:ae:9a:d6:69:41:58:64:d2:
         0a:f9:01:2b:49:45:88:3a:5f:d9:91:93:f5:56:22:c4:b4:d7:
         1e:3d:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org