Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/ecb4c4ea1119efad96b2ae58177998c3fecd82a0.roa
File:                     ecb4c4ea1119efad96b2ae58177998c3fecd82a0.roa (raw, json)
Hash identifier:          vZXZ481JARF0mD1pDptaEfvmw5YX6uHfsRjMCISfhls=
Subject key identifier:   35:91:4C:AF:03:2B:72:17:98:07:15:17:F8:75:50:79:91:2A:ED:19
Certificate issuer:       /CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Certificate serial:       253845
Authority key identifier: 84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/ecb4c4ea1119efad96b2ae58177998c3fecd82a0.roa
Signing time:             Wed 15 Nov 2023 01:05:01 +0000
ROA not before:           Wed 15 Nov 2023 01:05:01 +0000
ROA not after:            Sat 15 Nov 2025 01:05:01 +0000
asID:                     27818
IP address blocks:        2803:3380:2000::/36 maxlen: 36
                          2803:3380:3000::/36 maxlen: 36
                          2803:3380:4000::/36 maxlen: 36
                          2803:3380:5000::/36 maxlen: 36
                          2803:3380:6000::/36 maxlen: 36
                          2803:3380:7000::/36 maxlen: 36
                          2803:3380:8000::/36 maxlen: 36
                          2803:3380:9000::/36 maxlen: 36
                          2803:3380:a000::/36 maxlen: 36
                          2803:3380:b000::/36 maxlen: 36
                          2803:3380:c000::/36 maxlen: 36
                          2803:3380:d000::/36 maxlen: 36
                          2803:3380:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2439237 (0x253845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
        Validity
            Not Before: Nov 15 01:05:01 2023 GMT
            Not After : Nov 15 01:05:01 2025 GMT
        Subject: CN=ecb4c4ea1119efad96b2ae58177998c3fecd82a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:0f:75:0e:d4:44:85:98:c5:52:85:66:6e:
                    20:90:ce:a5:34:91:5e:8e:ce:fe:62:08:16:b2:0e:
                    07:45:c4:f1:7d:d5:74:8d:57:23:24:78:c7:26:65:
                    e6:c5:85:a2:c9:b2:d8:24:df:ab:e9:9f:44:48:d3:
                    64:cd:57:bc:e5:d8:f5:67:30:51:87:2b:f9:62:47:
                    b8:d4:bc:8e:ef:b9:a7:f9:2e:87:1f:d1:0c:a3:67:
                    71:7a:2a:d0:b1:6f:a8:85:4f:b7:b7:f4:17:fc:4f:
                    5d:e3:99:4f:d0:33:51:74:b4:2d:c8:95:b6:22:cc:
                    18:23:e5:1d:a6:cc:41:f0:96:63:99:c6:39:cd:ae:
                    fe:08:1a:31:24:b3:fd:ab:4e:3f:67:20:50:77:5d:
                    4a:79:cf:71:6a:7a:27:1a:db:98:1c:e8:80:b5:e0:
                    65:08:35:b3:1b:84:ae:ec:34:af:a0:5a:23:33:b2:
                    65:c9:1e:31:4b:ab:81:1b:31:05:a9:89:9f:26:8d:
                    3d:08:9c:df:85:e8:02:c0:49:08:25:40:8b:30:25:
                    87:56:d2:c9:07:02:5a:4f:56:cb:3c:a7:d4:87:2a:
                    41:4b:4b:b8:37:37:f2:f0:03:36:00:eb:8e:d5:84:
                    fc:74:41:3d:9b:78:e0:41:11:e2:89:5c:b6:2d:03:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:91:4C:AF:03:2B:72:17:98:07:15:17:F8:75:50:79:91:2A:ED:19
            X509v3 Authority Key Identifier:
                keyid:84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/ecb4c4ea1119efad96b2ae58177998c3fecd82a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/961b6618bb492a79bacf586c02bc72ae5ebcd74f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:2000::-2803:3380:efff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9b:3e:87:1a:a6:e9:a4:87:eb:bf:b8:55:00:3d:69:80:4b:e7:
         aa:87:ac:4e:e8:5a:b6:ad:2d:a1:7a:8a:c6:92:2f:1e:c5:8d:
         2e:4d:d2:2b:11:bb:ec:9a:0f:fb:0e:b2:20:a9:70:93:5b:6b:
         73:f5:a1:92:10:e4:b8:36:a0:ab:99:de:be:99:45:73:d8:cb:
         c5:af:1c:a7:88:0e:0e:2d:54:84:53:ea:36:be:46:5a:ba:0a:
         3c:90:9d:85:47:ab:1e:47:6f:b1:2b:94:16:5c:9e:03:94:e2:
         9a:39:b9:1e:d2:03:cc:cf:79:b4:dd:27:f1:48:00:8e:ab:f7:
         00:72:f4:a3:d0:48:de:9f:b1:ed:2e:ec:8a:b9:a2:9c:95:3f:
         6d:6c:a3:72:5c:e1:be:09:93:93:a5:96:d0:b1:82:f5:89:d1:
         05:7f:99:4c:d8:af:ec:61:a8:a5:90:d9:46:40:23:e7:89:ac:
         e8:05:61:68:cc:c3:aa:fb:c1:33:0e:e4:49:5d:82:05:17:a6:
         a1:ca:65:b4:e4:f8:b0:dd:b1:4d:3d:32:35:3f:27:cc:18:84:
         a2:a9:c2:48:1e:57:f4:23:ef:4c:cb:a9:3b:95:f7:a0:e8:99:
         90:39:ac:cf:e9:1d:8e:e0:f9:5d:fd:0f:87:1d:2d:8d:cb:c9:
         19:f9:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----