Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb8e3d28-36d2-44f9-8a48-e52853afad09/ebd1f8304962c16ba95abdf73156b5a02fe334e6.roa
File:                     ebd1f8304962c16ba95abdf73156b5a02fe334e6.roa (raw, json)
Hash identifier:          9aMXPQa51ie8BqxYSrsajNBrt1BiG2ESad1cCciGD1s=
Subject key identifier:   D1:F2:18:7E:3D:07:BE:68:7C:6A:13:74:B0:9E:DB:4F:B6:30:80:33
Certificate issuer:       /CN=54c2643f01e37b05fd820385769b2fd395204f25
Certificate serial:       0114E5
Authority key identifier: A4:70:80:26:BE:A9:C9:9E:27:37:8C:81:F0:D0:25:3A:3E:50:4A:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54c2643f01e37b05fd820385769b2fd395204f25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eb8e3d28-36d2-44f9-8a48-e52853afad09/ebd1f8304962c16ba95abdf73156b5a02fe334e6.roa
Signing time:             Mon 04 Dec 2023 19:29:56 +0000
ROA not before:           Mon 04 Dec 2023 19:29:56 +0000
ROA not after:            Thu 04 Dec 2025 19:29:56 +0000
asID:                     18747
IP address blocks:        2801:115:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70885 (0x114e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54c2643f01e37b05fd820385769b2fd395204f25
        Validity
            Not Before: Dec  4 19:29:56 2023 GMT
            Not After : Dec  4 19:29:56 2025 GMT
        Subject: CN=ebd1f8304962c16ba95abdf73156b5a02fe334e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:1a:1f:38:27:51:6b:77:ec:9b:c1:24:e9:
                    1f:d0:58:a7:74:ed:22:75:13:35:a3:63:1c:48:23:
                    2d:d6:9e:5f:14:7d:29:63:12:8d:14:3b:f3:f8:93:
                    27:6c:07:c9:84:48:4b:71:a4:bb:f5:f2:b5:e7:66:
                    b8:fb:ea:db:1b:96:0b:f6:71:0b:a0:ea:62:35:5f:
                    4d:e8:f7:0e:da:5f:00:dd:65:04:a4:74:57:44:71:
                    90:98:7f:cc:a3:d7:96:0f:60:01:c6:00:0d:e7:45:
                    33:fe:72:f2:2d:1c:77:86:3d:95:1e:d6:8e:1a:c2:
                    54:61:ca:09:c9:48:0c:8b:b6:83:d4:71:a9:09:d2:
                    27:bc:03:ec:91:01:0f:88:c1:f1:46:f2:a1:ba:92:
                    91:bd:7e:7d:14:60:d5:db:4e:17:81:ff:ea:61:9e:
                    74:8e:9d:c1:f9:75:fc:fa:ab:ad:3d:ca:60:b2:69:
                    be:61:12:c4:fe:cf:b0:cc:6a:6e:a7:01:1b:7a:f9:
                    c7:9a:6c:c3:0b:f5:7d:26:56:ed:ad:26:48:1c:d1:
                    cd:c9:93:87:9b:7e:ef:58:14:f4:f6:7e:35:a4:fa:
                    bf:d6:73:f0:2d:fd:c8:99:84:55:29:3b:d2:18:25:
                    8c:7a:b1:c9:66:bf:d2:1d:ee:d3:77:99:52:23:99:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F2:18:7E:3D:07:BE:68:7C:6A:13:74:B0:9E:DB:4F:B6:30:80:33
            X509v3 Authority Key Identifier:
                keyid:A4:70:80:26:BE:A9:C9:9E:27:37:8C:81:F0:D0:25:3A:3E:50:4A:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54c2643f01e37b05fd820385769b2fd395204f25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb8e3d28-36d2-44f9-8a48-e52853afad09/ebd1f8304962c16ba95abdf73156b5a02fe334e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eb8e3d28-36d2-44f9-8a48-e52853afad09/54c2643f01e37b05fd820385769b2fd395204f25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:115:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:86:f2:83:66:3b:30:17:78:76:cb:ee:7d:f2:4b:83:9d:7d:
         bd:98:51:fd:9d:69:7c:43:a5:65:39:0b:a4:69:06:35:18:36:
         93:d6:28:85:62:bd:70:f7:be:e4:67:2c:b9:1e:27:8f:ba:97:
         e7:70:d2:16:18:cf:32:c3:42:95:0d:80:f1:2d:76:03:a1:48:
         3d:92:d4:c0:49:f0:d0:39:4a:fd:6a:03:4b:12:75:fb:b2:20:
         9a:ba:a6:0f:ed:8f:24:d7:d5:5d:20:db:be:07:d5:d4:58:77:
         fe:0b:38:7e:bb:3b:dc:4e:8f:b3:25:4d:4b:c9:8a:d7:16:59:
         7c:57:7e:3e:b6:5c:ed:7a:eb:b9:ec:92:a1:a3:10:b6:b3:77:
         ca:93:72:0f:10:46:ca:21:8b:94:bd:a3:33:4e:2f:64:34:b9:
         92:bd:2d:71:31:25:10:99:7c:0e:1b:91:84:4e:ea:55:b7:41:
         bd:f1:57:f8:60:07:39:1d:01:9b:18:1b:c9:b5:c3:d3:70:77:
         0f:b3:a7:cb:ff:4d:90:bc:c1:de:e7:7a:c7:f9:8d:af:45:0a:
         5d:52:85:b4:da:63:f2:8d:55:d8:42:b2:dd:8d:17:d5:d0:49:
         bb:67:22:8c:5a:63:c0:7a:2c:ee:30:80:b4:1b:c0:5a:0c:26:
         ca:c1:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org