Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/31eaa53f3e0c703431bac39bb251920d4a0410b1.roa
File:                     31eaa53f3e0c703431bac39bb251920d4a0410b1.roa (raw, json)
Hash identifier:          ljVDrRVfG9t8KZAvJzQ9USTf6ljE9vrROzDYgTmozpk=
Subject key identifier:   CF:DC:FF:65:57:23:C6:10:9F:59:45:D7:AC:52:40:F9:B6:38:48:68
Certificate issuer:       /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial:       0A3559
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/31eaa53f3e0c703431bac39bb251920d4a0410b1.roa
Signing time:             Mon 04 Sep 2023 11:46:01 +0000
ROA not before:           Sun 03 Sep 2023 11:46:01 +0000
ROA not after:            Thu 04 Sep 2025 11:46:01 +0000
asID:                     272812
IP address blocks:        2803:f890:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669017 (0xa3559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
        Validity
            Not Before: Sep  3 11:46:01 2023 GMT
            Not After : Sep  4 11:46:01 2025 GMT
        Subject: CN=31eaa53f3e0c703431bac39bb251920d4a0410b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:b8:96:ca:65:c1:c6:43:f1:64:96:42:2c:
                    dc:73:96:c8:f0:fc:60:24:1e:b4:c4:52:d2:b3:9a:
                    f2:61:13:f9:ae:15:68:1c:ef:df:5f:b6:9b:9e:06:
                    94:31:bf:6e:87:12:44:ae:d6:7f:8e:89:1c:28:6a:
                    15:e1:a9:d0:7b:89:83:15:6b:62:fd:db:2c:a3:0c:
                    48:54:d0:be:cf:b2:de:69:d1:3d:8d:80:e0:e4:2b:
                    9e:22:db:d3:f8:87:a3:87:b1:3f:ce:97:83:38:bb:
                    bf:f4:d7:d5:dd:54:8c:94:8c:0a:f7:7c:77:5c:0b:
                    03:54:cf:f8:1b:84:db:3f:32:ee:20:c3:aa:66:f1:
                    a7:c7:69:77:e8:db:f1:00:a5:65:75:0e:43:96:ea:
                    ac:a4:4e:de:81:78:81:d9:b5:80:60:75:d6:ff:2b:
                    a7:10:e8:4f:86:d5:a0:c7:ac:59:65:1d:60:ce:98:
                    fb:19:99:93:45:8f:f6:1d:24:c4:c4:7f:24:2c:d7:
                    10:29:16:1e:e6:c0:1f:96:47:e3:4e:58:57:e8:74:
                    50:46:4c:7b:83:c9:6b:58:1b:f6:ea:cc:43:7f:fd:
                    87:74:c1:e5:8a:0b:25:b3:e4:f1:56:33:47:ad:d6:
                    39:be:3e:f9:4b:c8:7a:ec:27:ae:91:92:24:45:4b:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DC:FF:65:57:23:C6:10:9F:59:45:D7:AC:52:40:F9:B6:38:48:68
            X509v3 Authority Key Identifier:
                keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/31eaa53f3e0c703431bac39bb251920d4a0410b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:3b:05:b0:dd:6e:d5:62:8a:1e:60:63:08:c7:af:cd:a1:b0:
         0f:45:3e:33:48:80:3d:ce:fd:9c:75:ff:e6:2c:70:6e:cf:88:
         2b:bb:0f:30:9d:95:28:66:ad:57:ca:58:f8:50:c0:49:6b:63:
         9b:36:72:21:f1:c8:cf:24:69:1f:b7:1c:08:84:c9:e1:21:90:
         e8:90:bf:26:8c:dd:e9:ef:01:ce:d6:79:f7:f1:df:58:fd:cc:
         e8:89:93:bf:1f:54:4a:c0:42:77:8f:07:71:c7:10:fc:0c:35:
         91:eb:4e:d2:15:6e:5c:1a:0a:50:7c:f1:c0:51:af:5a:6d:b6:
         fb:e6:c7:66:fe:e2:7f:dc:9c:30:31:fc:e2:22:cc:48:38:c6:
         03:cd:b3:29:e9:25:25:e9:bb:e1:73:14:15:14:52:f4:2e:99:
         10:5a:45:0d:86:51:9a:d7:4c:d7:34:c3:1b:7f:f4:c7:0e:80:
         96:9e:45:f4:af:66:c9:79:be:78:0b:79:1e:e2:2a:84:9a:ce:
         ca:f8:f9:b6:d2:2e:1d:24:b7:7d:51:81:c3:c9:53:12:f9:5d:
         92:f7:e1:47:62:69:bb:3f:54:2e:ef:aa:03:08:ec:86:e9:ab:
         73:51:80:f8:bd:60:27:c8:90:cd:c4:f7:b9:0d:cf:a0:d2:4e:
         34:b0:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org