Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/3ee5ca0cde2245bd7353387f6b0fa90a62c1a18a.roa
File:                     3ee5ca0cde2245bd7353387f6b0fa90a62c1a18a.roa (raw, json)
Hash identifier:          Un3o3/uhXLz4BxsRwu6qtkHlLRcpsKXMCn6HwVzbQgw=
Subject key identifier:   14:AF:0A:35:74:82:B8:E5:0B:4E:D0:E9:2D:D1:40:60:A1:BF:AC:CE
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       011502
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/3ee5ca0cde2245bd7353387f6b0fa90a62c1a18a.roa
Signing time:             Sun 31 Dec 2023 12:06:30 +0000
ROA not before:           Sun 31 Dec 2023 12:06:29 +0000
ROA not after:            Wed 31 Dec 2025 12:06:29 +0000
asID:                     273138
IP address blocks:        2803:f450::/42 maxlen: 42
                          2803:f450:40::/42 maxlen: 42
                          2803:f450:80::/42 maxlen: 42
                          2803:f450:c0::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70914 (0x11502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec 31 12:06:29 2023 GMT
            Not After : Dec 31 12:06:29 2025 GMT
        Subject: CN=3ee5ca0cde2245bd7353387f6b0fa90a62c1a18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9d:1a:ae:15:df:56:37:c6:be:75:40:24:64:
                    d0:ec:2b:67:c4:e6:68:df:26:03:93:44:46:72:b1:
                    30:fb:1f:ed:d1:e9:3d:a7:ac:14:27:76:dc:05:b8:
                    bc:59:a3:77:a1:dd:5b:5c:2b:c3:a4:ca:eb:d1:47:
                    f7:2b:dd:87:63:c4:18:88:86:32:b1:de:fd:92:16:
                    f6:33:c7:39:95:48:40:43:ca:23:0e:f6:2f:d3:01:
                    a4:e6:c4:e9:e5:3c:42:c1:65:17:1c:59:34:3a:27:
                    c9:cb:49:15:80:db:11:a0:45:25:79:8d:ba:63:cd:
                    65:3d:88:e4:7c:4d:d7:fc:69:5d:de:ff:c0:22:a9:
                    89:e1:00:12:7d:55:2c:c6:b2:f6:de:4f:c3:51:73:
                    8e:05:b5:19:8c:e7:81:01:6d:7d:16:4e:1d:c0:fa:
                    37:26:f7:ec:d4:1b:39:e9:23:9f:cc:59:d1:0b:f3:
                    1e:4d:e3:c1:e2:e8:70:a8:86:b2:6d:a6:ef:44:7d:
                    71:54:96:ba:1a:50:bb:82:53:2a:61:ac:6b:ef:b9:
                    84:c1:9b:76:57:cc:84:41:00:b4:46:f2:2d:eb:55:
                    17:04:cd:d2:ce:60:ac:49:6f:fb:f0:6f:ca:ef:77:
                    99:4e:56:c7:f1:f9:e5:83:b0:80:8a:21:6a:46:1c:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AF:0A:35:74:82:B8:E5:0B:4E:D0:E9:2D:D1:40:60:A1:BF:AC:CE
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/3ee5ca0cde2245bd7353387f6b0fa90a62c1a18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:02:48:c9:95:30:06:50:2e:98:1a:ce:95:26:c1:c9:e8:02:
         92:98:a5:8c:6d:42:bc:6e:f3:96:80:2f:74:9d:b6:72:9c:37:
         f7:d5:03:77:1d:3c:e0:ff:d6:81:70:d3:8e:09:65:2a:cd:bc:
         a7:75:a1:bd:92:7d:6f:5c:51:5c:db:a3:90:17:9b:c9:39:19:
         02:d4:fe:4f:89:91:67:91:84:75:28:a5:0a:4b:2e:83:41:ed:
         9a:d8:55:94:5e:05:67:0b:79:25:52:c1:32:58:9e:c5:d0:c6:
         a8:cc:de:55:53:02:f4:65:91:96:4e:54:40:22:ba:2c:87:48:
         b0:39:39:85:c2:d6:77:f4:f3:41:fa:0f:41:fa:c1:82:ee:43:
         8e:cc:eb:11:e6:56:d4:00:f4:35:c2:1f:2e:13:b6:86:99:fd:
         a9:f9:a6:7a:b9:11:00:30:88:90:66:8f:4c:74:e2:0b:21:fc:
         31:5b:82:bf:12:d7:87:78:69:6d:6d:d5:62:f2:89:4c:05:16:
         f4:42:01:eb:e4:1a:d7:71:1c:1d:e9:1d:54:74:60:0e:77:87:
         51:bc:4b:ff:2a:38:3c:47:4c:1a:29:bc:b8:41:a4:86:c9:98:
         0a:37:d0:63:4b:1e:98:05:e6:38:d5:13:08:76:31:a5:01:db:
         be:f5:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org