Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/0d4ff7437e218bf888f7435b1023824b16ae1217.roa
File:                     0d4ff7437e218bf888f7435b1023824b16ae1217.roa (raw, json)
Hash identifier:          uQQ6kJF7WtYMi79/UmxhPATPnaaQZHgA3hb/ELVgHps=
Subject key identifier:   1B:88:54:BF:7D:7B:3F:6F:BC:DF:E0:30:9D:DE:02:E5:C8:8D:CD:B6
Certificate issuer:       /CN=f3df8538662f3c792fbb0559315226c5b8695024
Certificate serial:       0F3F02
Authority key identifier: E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/0d4ff7437e218bf888f7435b1023824b16ae1217.roa
Signing time:             Sat 08 Jul 2023 03:24:54 +0000
ROA not before:           Fri 07 Jul 2023 03:24:54 +0000
ROA not after:            Tue 08 Jul 2025 03:24:54 +0000
asID:                     271935
IP address blocks:        2803:7a10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999170 (0xf3f02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3df8538662f3c792fbb0559315226c5b8695024
        Validity
            Not Before: Jul  7 03:24:54 2023 GMT
            Not After : Jul  8 03:24:54 2025 GMT
        Subject: CN=0d4ff7437e218bf888f7435b1023824b16ae1217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:c8:0f:8b:f5:e5:47:4b:6b:51:a4:67:50:
                    a8:3c:fb:b4:1c:f5:72:6f:15:30:87:af:4e:2c:34:
                    7f:48:1b:a0:de:5c:16:62:12:1d:5c:95:80:14:df:
                    70:5b:0b:fd:f9:11:48:0f:74:6f:19:9e:ea:b3:4a:
                    ab:18:09:85:30:9c:da:04:5e:3c:71:e1:fc:b5:60:
                    fd:29:df:5a:8c:2c:f2:76:02:18:c5:84:57:00:30:
                    35:6b:55:25:81:b5:83:b6:66:48:e3:e8:f6:d5:30:
                    fc:ef:01:68:cd:fc:c5:fd:8c:81:4d:1a:8c:91:fe:
                    d1:4c:fa:11:f0:d6:69:3b:64:9a:67:b3:a8:58:d0:
                    38:5a:cb:cd:a7:aa:4b:b6:fa:0d:2c:e6:42:69:dc:
                    66:7e:93:9f:5d:29:85:6d:23:55:b9:fe:2d:06:63:
                    b1:9c:59:e8:2a:e3:3d:4f:07:3f:7e:34:5e:e0:51:
                    c1:3c:12:f7:d9:80:f6:b9:f0:2c:0e:f5:d5:0b:5a:
                    22:0f:a4:c5:a7:79:92:62:d5:0c:3e:dc:99:e7:9c:
                    af:f3:ff:7f:3d:1a:9c:b1:c6:33:9b:80:5c:50:04:
                    87:0f:02:ab:cd:e3:da:b0:71:80:7d:cd:d0:7f:c7:
                    e1:6a:67:19:c2:62:07:da:5c:a0:63:e6:fb:8f:1f:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:54:BF:7D:7B:3F:6F:BC:DF:E0:30:9D:DE:02:E5:C8:8D:CD:B6
            X509v3 Authority Key Identifier:
                keyid:E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/0d4ff7437e218bf888f7435b1023824b16ae1217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/f3df8538662f3c792fbb0559315226c5b8695024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:f6:f1:f6:13:2a:dc:77:54:e3:4d:88:e1:62:1d:76:ba:
         9c:86:d2:ab:4a:a2:41:44:0f:28:1f:61:bf:1a:1e:da:a9:d6:
         b4:a7:43:53:6a:04:b1:8a:9f:df:f9:06:6c:10:bc:85:99:60:
         3e:c1:61:50:af:52:c1:6d:15:6c:a7:42:cb:a0:e2:83:5c:b8:
         e8:3f:25:f1:cf:79:82:71:aa:1d:57:11:29:76:3d:95:1b:d0:
         42:0c:9c:e0:b1:c7:a5:47:c2:46:51:e0:75:87:28:3b:8b:ed:
         c6:05:ae:95:82:12:7e:25:64:62:21:d5:7d:3c:98:04:e5:d6:
         ad:8a:f1:78:16:fd:79:2e:1b:aa:99:4e:8b:9e:4f:bf:fa:72:
         fc:01:cc:3f:54:76:de:71:a6:f3:92:9c:c0:93:ed:35:81:79:
         d4:da:c0:ae:e3:d8:51:eb:46:72:2c:9f:ff:4f:7d:4c:60:7d:
         a0:c5:2f:4f:f8:3a:9f:56:2f:95:7d:68:26:05:ad:ba:b8:99:
         2a:97:f1:77:20:ec:fe:46:2a:03:df:47:35:a4:90:30:d3:2c:
         46:45:ac:e1:01:d2:87:5f:b9:a1:5f:14:cf:18:09:e8:e3:9a:
         c9:76:ce:14:2f:f3:1d:b5:53:8a:10:eb:c5:ee:52:15:b9:ad:
         87:21:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org