Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/8cc1f18481b74461339fe9bf4ebcf096e6f99640.roa
File:                     8cc1f18481b74461339fe9bf4ebcf096e6f99640.roa (raw, json)
Hash identifier:          uHoHvC/TBh/uCJLRAMuzRslLqGz+D+iYKijh2dFrLI4=
Subject key identifier:   02:A1:FD:B3:77:3D:41:48:EA:93:48:55:5A:14:9C:2B:D9:E1:2E:00
Certificate issuer:       /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial:       0E7E47
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/8cc1f18481b74461339fe9bf4ebcf096e6f99640.roa
Signing time:             Sun 25 Feb 2024 20:19:35 +0000
ROA not before:           Sun 25 Feb 2024 20:19:35 +0000
ROA not after:            Wed 25 Feb 2026 20:19:35 +0000
asID:                     272812
IP address blocks:        2803:f890:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949831 (0xe7e47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
        Validity
            Not Before: Feb 25 20:19:35 2024 GMT
            Not After : Feb 25 20:19:35 2026 GMT
        Subject: CN=8cc1f18481b74461339fe9bf4ebcf096e6f99640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ec:3a:33:d2:55:11:39:3b:e9:ea:17:8a:dd:
                    f0:fc:6a:0d:b4:cf:2c:0c:29:a6:48:b3:0e:72:5c:
                    fa:cc:47:85:6e:10:57:1f:1c:3d:4b:f0:9c:87:81:
                    c0:3b:d9:b4:c6:59:bb:e1:10:12:69:88:9c:0a:d9:
                    00:f0:cc:10:55:31:11:ac:d0:fc:37:27:d0:ec:30:
                    59:1d:56:4d:9f:2a:88:ff:6f:82:3e:f9:86:ee:75:
                    ef:89:10:48:d5:58:00:0e:96:e5:55:53:89:10:ed:
                    d8:c5:47:f1:05:da:eb:db:75:a3:58:ec:3f:54:1c:
                    07:73:c0:a5:a3:db:c0:6b:83:23:1b:6f:f2:f5:0e:
                    4f:05:9a:af:f6:87:3a:3c:79:1f:78:35:92:82:82:
                    36:80:c1:5b:65:d4:28:8c:4a:7c:d1:a6:e3:40:8b:
                    19:8c:01:ac:7d:a9:ce:9d:26:83:f8:68:37:eb:bd:
                    3e:63:22:71:2c:b2:b2:9d:f4:9f:a2:69:52:b4:6a:
                    9a:b1:0a:80:3a:34:af:38:c3:da:e2:06:f8:88:a6:
                    a7:90:0e:5f:97:b0:11:8e:44:02:24:da:07:85:3a:
                    ed:1f:27:40:24:df:85:9b:d9:0a:28:7c:57:4a:19:
                    ef:7a:fe:6b:42:9f:35:72:2a:c4:a6:36:2d:c6:e8:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A1:FD:B3:77:3D:41:48:EA:93:48:55:5A:14:9C:2B:D9:E1:2E:00
            X509v3 Authority Key Identifier:
                keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/8cc1f18481b74461339fe9bf4ebcf096e6f99640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:f4:d3:e8:31:e2:df:0c:16:7d:ae:ef:f9:22:ab:f0:ec:f8:
         54:1f:a6:a0:bf:39:49:85:3c:bd:47:28:37:1a:2c:4a:36:3c:
         0b:a2:91:51:8e:8e:e6:f7:7d:70:ba:3f:66:b8:0c:a8:7e:43:
         62:eb:1b:38:d8:d1:28:fb:56:ce:fc:cc:50:9a:23:03:4e:86:
         93:e5:37:b8:f4:19:8c:b9:f3:c7:1b:71:e9:3e:61:64:0c:1b:
         17:d0:72:fb:bd:1e:50:69:16:d8:1d:6b:4e:13:eb:52:aa:a8:
         c3:23:17:6a:36:b0:64:3c:7a:4b:55:19:f0:1d:4a:10:9d:8e:
         d7:db:2c:47:3f:42:0c:21:83:64:8b:5b:2b:39:35:3d:01:3f:
         0b:6f:8a:54:87:16:c7:dd:70:a9:55:25:d9:03:6c:c7:16:cc:
         84:9f:79:c6:d0:e4:54:2b:be:2a:26:f9:d7:35:99:86:7c:81:
         0c:93:01:f7:7e:41:2a:07:f6:b6:47:ac:0c:96:83:0f:b2:7e:
         cd:b1:c7:ec:cf:e4:b4:7a:d7:f1:8f:67:f1:74:52:c8:71:01:
         39:e1:2b:98:c3:9c:0f:3e:b1:91:24:ef:6e:55:a9:86:5f:7c:
         ba:8b:6f:4a:e9:40:34:7d:d0:97:12:29:c8:ce:ef:1c:e7:a7:
         de:09:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org