Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/d53a51402722bfa64cdaad4b438b87438f705dd4.roa
File:                     d53a51402722bfa64cdaad4b438b87438f705dd4.roa (raw, json)
Hash identifier:          O9Q6LAMkW+pLmB/S6JBkTlo0yfvNFrZOCw3yFXcE0ug=
Subject key identifier:   11:F4:CC:11:FB:6D:5D:BB:56:4B:7F:34:E4:5C:3A:B9:30:C2:E3:C7
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1D6A3D
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/d53a51402722bfa64cdaad4b438b87438f705dd4.roa
Signing time:             Thu 08 Dec 2022 20:30:48 +0000
ROA not before:           Tue 29 Nov 2022 22:11:53 +0000
ROA not after:            Wed 04 Dec 2024 22:11:53 +0000
asID:                     272121
IP address blocks:        2803:2220:800::/37 maxlen: 37
                          2803:2220:1000::/37 maxlen: 37
                          2803:2220:1800::/37 maxlen: 37
                          2803:2220:2000::/37 maxlen: 37
                          2803:2220:2800::/37 maxlen: 37
                          2803:2220:3000::/37 maxlen: 37
                          2803:2220:3800::/37 maxlen: 37
                          2803:2220:4000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927741 (0x1d6a3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Nov 29 22:11:53 2022 GMT
            Not After : Dec  4 22:11:53 2024 GMT
        Subject: CN=d53a51402722bfa64cdaad4b438b87438f705dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:84:38:a0:79:af:65:5a:c5:35:62:27:2c:
                    7d:1e:53:8b:b5:08:82:e2:7d:91:f8:d7:8e:c9:fa:
                    13:f2:f6:54:1d:0a:4a:ff:34:a8:d0:eb:02:95:8f:
                    fd:72:c3:52:13:94:97:dc:46:77:33:d5:e0:6a:55:
                    6d:cd:c4:17:42:7c:39:8c:20:1d:2d:a3:bb:9c:79:
                    45:f4:94:27:3a:9c:e5:b3:48:0b:71:af:c9:db:95:
                    ee:4d:10:9b:4f:c9:d5:a0:87:66:32:29:16:51:d7:
                    57:42:fc:a3:73:5c:6f:bc:ab:29:59:ef:2f:a7:0a:
                    63:24:3e:2d:69:07:c7:97:5b:9b:b0:8b:7b:78:7f:
                    82:21:81:35:ad:69:a5:8d:48:7d:ee:0e:c8:72:4c:
                    cc:66:6f:6f:70:d3:77:3f:a5:c3:6c:30:c0:a4:25:
                    bf:01:d7:36:30:ed:cd:19:ca:1a:d3:70:a6:c1:18:
                    d6:07:a2:cf:21:55:56:05:37:97:e1:68:93:d5:80:
                    f9:2a:0b:2a:50:16:16:87:c7:61:d4:d9:11:42:d2:
                    74:1a:e1:b0:be:39:fe:92:7b:28:c7:3a:dc:ef:21:
                    ce:91:b7:04:9e:6f:63:54:a1:27:6f:21:83:65:a8:
                    d9:fc:60:ec:d0:b6:0b:20:53:35:02:68:9b:06:94:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F4:CC:11:FB:6D:5D:BB:56:4B:7F:34:E4:5C:3A:B9:30:C2:E3:C7
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/d53a51402722bfa64cdaad4b438b87438f705dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220:800::-2803:2220:47ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         70:c3:6b:44:ea:c7:24:e6:16:40:32:59:c2:69:47:ec:1c:54:
         be:79:fc:70:a1:ae:a0:3d:22:4e:90:7c:e0:5a:99:84:87:23:
         37:9d:6e:f9:1e:c3:0e:63:f7:e6:51:9b:61:00:ab:aa:f7:61:
         97:48:2b:5d:4e:5b:1a:c8:7a:81:a9:62:31:2d:98:ff:54:85:
         95:fb:8b:53:13:88:9c:ee:6c:f6:1a:8c:8f:e6:d3:7b:a2:3b:
         2d:42:5f:fd:6a:40:4b:d8:a2:64:d6:fa:d9:1f:bb:13:c1:26:
         19:7b:cd:8d:da:dd:e2:00:f6:db:b8:e0:9f:2a:09:61:65:3f:
         14:73:fb:a5:41:96:9f:12:71:ed:a2:f2:e6:27:1f:b1:6f:a2:
         40:5a:19:e3:18:76:fa:80:cc:f1:6b:34:06:e1:59:6e:1a:5f:
         83:8e:7d:21:54:69:76:54:77:7b:b7:7f:af:95:c7:5c:0e:33:
         61:58:57:49:e9:cc:5c:4a:d5:17:39:2a:12:82:cf:11:95:03:
         c6:9b:71:f5:c4:06:f0:52:89:88:53:c5:6f:79:f7:5e:47:70:
         b0:51:10:e8:12:ed:d3:56:1b:9a:bb:d5:b6:35:3c:29:b1:23:
         c6:cf:f7:e7:90:d9:24:f8:c9:ee:d4:a5:13:82:b0:7d:c9:8c:
         76:31:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org