Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/321070a81ac1197c3ed7815fa99d094d2d69704f.roa
File:                     321070a81ac1197c3ed7815fa99d094d2d69704f.roa (raw, json)
Hash identifier:          yKob/5MuexwAaUQ51kmBknOVuAXtyTTmbkb/03HGT7A=
Subject key identifier:   66:9D:2A:9C:22:E0:F7:6D:BE:0C:17:61:37:A4:68:AC:0D:73:3D:EF
Certificate issuer:       /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial:       0BF46F
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/321070a81ac1197c3ed7815fa99d094d2d69704f.roa
Signing time:             Wed 24 Mar 2021 14:44:34 +0000
ROA not before:           Wed 24 Mar 2021 14:44:33 +0000
ROA not after:            Tue 24 Mar 2026 14:44:33 +0000
asID:                     8151
IP address blocks:        2806:1009::/32 maxlen: 48
                          2806:100a::/32 maxlen: 48
                          2806:100b::/32 maxlen: 48
                          2806:100c::/32 maxlen: 48
                          2806:100d::/32 maxlen: 48
                          2806:100e::/32 maxlen: 48
                          2806:100f::/32 maxlen: 48
                          2806:1071::/32 maxlen: 48
                          2806:1072::/32 maxlen: 48
                          2806:1073::/32 maxlen: 48
                          2806:1074::/32 maxlen: 48
                          2806:1075::/32 maxlen: 48
                          2806:1076::/32 maxlen: 48
                          2806:1077::/32 maxlen: 48
                          2806:1078::/32 maxlen: 48
                          2806:1079::/32 maxlen: 48
                          2806:107a::/32 maxlen: 48
                          2806:107b::/32 maxlen: 48
                          2806:107c::/32 maxlen: 48
                          2806:107d::/32 maxlen: 48
                          2806:107e::/32 maxlen: 48
                          2806:107f::/32 maxlen: 48
                          2806:10a1::/32 maxlen: 48
                          2806:10a2::/32 maxlen: 48
                          2806:10a3::/32 maxlen: 48
                          2806:10a4::/32 maxlen: 48
                          2806:10a5::/32 maxlen: 48
                          2806:10a6::/32 maxlen: 48
                          2806:10a7::/32 maxlen: 48
                          2806:1061::/32 maxlen: 48
                          2806:1062::/32 maxlen: 48
                          2806:1063::/32 maxlen: 48
                          2806:1064::/32 maxlen: 48
                          2806:1065::/32 maxlen: 48
                          2806:1066::/32 maxlen: 48
                          2806:1067::/32 maxlen: 48
                          2806:1068::/32 maxlen: 48
                          2806:1069::/32 maxlen: 48
                          2806:106a::/32 maxlen: 48
                          2806:106b::/32 maxlen: 48
                          2806:106c::/32 maxlen: 48
                          2806:106d::/32 maxlen: 48
                          2806:106e::/32 maxlen: 48
                          2806:106f::/32 maxlen: 48
                          2806:10a9::/32 maxlen: 48
                          2806:10aa::/32 maxlen: 48
                          2806:10ab::/32 maxlen: 48
                          2806:10ac::/32 maxlen: 48
                          2806:10ad::/32 maxlen: 48
                          2806:10ae::/32 maxlen: 48
                          2806:10af::/32 maxlen: 48
                          2806:1001::/32 maxlen: 48
                          2806:1002::/32 maxlen: 48
                          2806:1003::/32 maxlen: 48
                          2806:1004::/32 maxlen: 48
                          2806:1005::/32 maxlen: 48
                          2806:1006::/32 maxlen: 48
                          2806:1007::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783471 (0xbf46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
        Validity
            Not Before: Mar 24 14:44:33 2021 GMT
            Not After : Mar 24 14:44:33 2026 GMT
        Subject: CN=321070a81ac1197c3ed7815fa99d094d2d69704f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:3f:d3:0e:cf:ca:e0:f4:ca:72:8a:1c:41:
                    77:ab:a7:73:1f:9a:18:de:1c:f0:14:38:08:25:ab:
                    94:3b:b6:13:92:03:ca:69:7e:6e:98:2d:1b:2c:fa:
                    65:c1:37:9a:9b:35:bf:69:12:1d:c1:c7:46:95:a6:
                    f4:4a:05:5c:10:aa:69:eb:db:6d:48:a9:f8:28:db:
                    72:23:f3:86:53:64:29:bf:08:da:39:f5:0d:b9:77:
                    ce:8b:89:6b:49:05:2c:83:51:2f:21:8e:3b:ee:e1:
                    7f:e1:18:3b:e9:08:3a:a1:ae:61:4e:89:37:ce:25:
                    14:e2:af:5c:bb:2e:cf:e5:e5:ff:62:c6:fa:f7:37:
                    d1:3a:5b:5f:30:78:cf:4a:72:28:5c:da:68:05:75:
                    48:d4:e6:4a:c5:47:f0:0d:72:c0:09:f1:5b:54:92:
                    73:c7:8b:51:44:65:72:b8:bc:6b:91:7d:23:0c:f9:
                    4b:a5:33:c4:00:47:b8:9e:a6:dd:b5:18:99:6e:cb:
                    75:1b:18:f5:8d:f5:4c:65:5e:e0:53:30:4e:34:30:
                    12:09:4a:84:6f:3d:40:d4:07:03:2b:af:32:0c:f6:
                    3b:75:af:f2:e1:ae:12:27:e8:2b:c6:f6:ba:5a:4d:
                    38:02:a1:35:03:2b:f3:29:31:bf:b0:65:7f:6b:4b:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9D:2A:9C:22:E0:F7:6D:BE:0C:17:61:37:A4:68:AC:0D:73:3D:EF
            X509v3 Authority Key Identifier:
                keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/321070a81ac1197c3ed7815fa99d094d2d69704f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:1001::-2806:1007:ffff:ffff:ffff:ffff:ffff:ffff
                  2806:1009::-2806:100f:ffff:ffff:ffff:ffff:ffff:ffff
                  2806:1061::-2806:106f:ffff:ffff:ffff:ffff:ffff:ffff
                  2806:1071::-2806:107f:ffff:ffff:ffff:ffff:ffff:ffff
                  2806:10a1::-2806:10a7:ffff:ffff:ffff:ffff:ffff:ffff
                  2806:10a9::-2806:10af:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         20:0b:76:8f:ae:63:b5:92:75:67:1c:e4:c2:2a:0b:6b:3a:3e:
         63:42:8c:f3:55:91:1e:48:c6:ad:ac:23:d7:d3:3c:72:0f:30:
         9f:e0:8f:4f:11:64:23:93:85:cb:14:dc:75:64:8f:31:61:56:
         a4:3d:8f:90:35:3d:47:68:5d:61:ad:cb:4b:a1:d5:9f:b9:f4:
         d8:92:88:e2:0e:fd:44:18:6e:bf:ab:d7:dd:37:30:27:e9:11:
         c3:55:21:ee:18:63:1d:0d:69:d4:7b:da:66:7f:f4:1c:ef:06:
         ef:02:dc:05:b9:27:c8:fa:0a:7a:a3:c1:6c:9f:9d:47:80:2a:
         7d:e8:a2:d7:26:86:d3:b6:1f:1e:e4:2c:f9:f8:17:78:5a:bb:
         93:f0:24:04:28:cb:7c:8f:2c:4d:f4:c6:4f:d0:b5:3b:7b:6d:
         bf:e4:59:e0:ed:36:3b:cc:ef:96:9b:e8:58:5b:33:14:88:8f:
         6e:e3:0d:b6:7b:1b:10:75:a0:6f:65:a5:7d:6c:1c:5b:d4:a4:
         70:f2:bc:74:be:db:35:a4:c7:70:67:13:41:a1:07:19:bc:c2:
         88:80:75:44:a9:92:9e:d2:ff:c9:5b:37:88:81:f4:36:bd:bb:
         e7:77:0c:55:ab:fb:d9:b3:70:6d:f3:39:83:f4:7b:b3:bb:e9:
         57:dc:f2:cc
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDC/RvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
NDY0NDBiMjQxZDQwYmQ5NzA2OTllMWMwNTY3Y2Y5YTFmOGI5MjIwHhcNMjEwMzI0
MTQ0NDMzWhcNMjYwMzI0MTQ0NDMzWjAzMTEwLwYDVQQDEygzMjEwNzBhODFhYzEx
OTdjM2VkNzgxNWZhOTlkMDk0ZDJkNjk3MDRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyZU/0w7PyuD0ynKKHEF3q6dzH5oY3hzwFDgIJauUO7YTkgPK
aX5umC0bLPplwTeamzW/aRIdwcdGlab0SgVcEKpp69ttSKn4KNtyI/OGU2Qpvwja
OfUNuXfOi4lrSQUsg1EvIY477uF/4Rg76Qg6oa5hTok3ziUU4q9cuy7P5eX/Ysb6
9zfROltfMHjPSnIoXNpoBXVI1OZKxUfwDXLACfFbVJJzx4tRRGVyuLxrkX0jDPlL
pTPEAEe4nqbdtRiZbst1Gxj1jfVMZV7gUzBONDASCUqEbz1A1AcDK68yDPY7da/y
4a4SJ+grxva6Wk04AqE1AyvzKTG/sGV/a0s6BwIDAQABo4ICtTCCArEwHQYDVR0O
BBYEFGadKpwi4PdtvgwXYTekaKwNcz3vMB8GA1UdIwQYMBaAFDBKlObd/bEFp5Qr
ntbrAIJlYl+RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDM0NjQ0
MGIyNDFkNDBiZDk3MDY5OWUxYzA1NjdjZjlhMWY4YjkyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU0OTBlYzMtMzZhZi00ZDYzLTliMzgtYzRkODNk
OGZkODUzLzMyMTA3MGE4MWFjMTE5N2MzZWQ3ODE1ZmE5OWQwOTRkMmQ2OTcwNGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTQ5MGVjMy0zNmFmLTRkNjMtOWIzOC1jNGQ4
M2Q4ZmQ4NTMvMDM0NjQ0MGIyNDFkNDBiZDk3MDY5OWUxYzA1NjdjZjlhMWY4Yjky
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB5BggrBgEFBQcBBwEB/wRq
MGgwZgQCAAIwYDAOAwUAKAYQAQMFAygGEAAwDgMFACgGEAkDBQQoBhAAMA4DBQAo
BhBhAwUEKAYQYDAOAwUAKAYQcQMFBygGEAAwDgMFACgGEKEDBQMoBhCgMA4DBQAo
BhCpAwUEKAYQoDANBgkqhkiG9w0BAQsFAAOCAQEAIAt2j65jtZJ1ZxzkwioLazo+
Y0KM81WRHkjGrawj19M8cg8wn+CPTxFkI5OFyxTcdWSPMWFWpD2PkDU9R2hdYa3L
S6HVn7n02JKI4g79RBhuv6vX3TcwJ+kRw1Uh7hhjHQ1p1HvaZn/0HO8G7wLcBbkn
yPoKeqPBbJ+dR4Aqfeii1yaG07YfHuQs+fgXeFq7k/AkBCjLfI8sTfTGT9C1O3tt
v+RZ4O02O8zvlpvoWFszFIiPbuMNtnsbEHWgb2WlfWwcW9SkcPK8dL7bNaTHcGcT
QaEHGbzCiIB1RKmSntL/yVs3iIH0Nr2753cMVav72bNwbfM5g/R7s7vpV9zyzA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org