Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/da3a548557be069db0e92643218a6bb3074ed591.roa
File:                     da3a548557be069db0e92643218a6bb3074ed591.roa (raw, json)
Hash identifier:          iMcRAHf7ZsEGhFHZZ54BQzmNJTiV9DWmy/F7y3qCTEE=
Subject key identifier:   B1:2D:DE:5D:9A:FA:AF:3B:05:44:2C:B1:B6:17:0A:EE:AB:8F:FB:7E
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       236FD1
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/da3a548557be069db0e92643218a6bb3074ed591.roa
Signing time:             Sat 08 Jul 2023 05:26:20 +0000
ROA not before:           Fri 07 Jul 2023 05:26:20 +0000
ROA not after:            Tue 08 Jul 2025 05:26:20 +0000
asID:                     61461
IP address blocks:        2803:d700:7000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322385 (0x236fd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:26:20 2023 GMT
            Not After : Jul  8 05:26:20 2025 GMT
        Subject: CN=da3a548557be069db0e92643218a6bb3074ed591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:4f:74:a5:d4:c3:61:f4:f4:c9:42:c6:91:
                    62:ec:b2:56:0b:b9:06:e3:55:86:30:c0:39:c5:19:
                    1e:a9:e3:56:ec:72:f0:bc:4a:3e:a4:97:e8:a2:f7:
                    84:e2:d6:7f:df:f9:27:d4:b4:a3:e0:20:ed:05:18:
                    86:86:99:b5:f9:0c:7a:23:f2:fb:10:e5:bb:c1:69:
                    8f:d2:3d:65:79:04:93:1d:5e:1d:de:84:ab:d9:22:
                    6e:80:7f:aa:99:7a:28:8a:33:51:3c:da:19:73:a9:
                    4c:f4:50:7f:96:58:a5:01:93:2d:cf:6a:d3:7b:fd:
                    0b:7c:ed:58:1c:56:f2:65:26:ab:49:2c:a6:ee:74:
                    73:71:06:0c:20:21:3f:07:cb:2c:96:e8:ce:63:c0:
                    4e:c8:3c:20:c5:11:86:21:93:b1:56:31:82:8b:b4:
                    6a:45:06:f2:10:b0:64:06:d8:3a:0f:32:38:95:67:
                    97:14:d4:7d:1d:51:b1:89:33:f3:f5:e3:49:7e:f3:
                    eb:ea:6b:d0:46:e7:43:77:6d:75:9e:83:22:bf:0f:
                    d4:c2:c3:6b:2c:ef:fb:73:e9:10:ec:97:0c:ad:24:
                    c1:89:79:39:6b:ec:ef:3c:d0:07:a7:b5:05:c3:cf:
                    13:a5:81:72:4f:12:08:79:01:52:e6:b5:ac:a4:cf:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2D:DE:5D:9A:FA:AF:3B:05:44:2C:B1:B6:17:0A:EE:AB:8F:FB:7E
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/da3a548557be069db0e92643218a6bb3074ed591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:f2:cc:a9:d4:0f:0b:5b:f1:a0:22:d7:27:52:ff:bd:db:80:
         95:0d:0a:54:4e:be:30:53:6e:de:8a:52:b0:72:e3:0e:86:29:
         33:ed:ff:89:0a:ab:82:5f:64:14:d5:a6:9e:3d:cc:9b:e1:88:
         bc:68:f6:59:2b:0b:9c:96:ff:03:3b:0b:39:93:df:16:33:e4:
         db:8e:75:b1:86:e6:e8:57:ce:e0:eb:91:94:93:db:55:f3:c7:
         87:1e:eb:71:41:4c:52:d5:3d:69:8b:f8:c7:27:94:fe:48:e9:
         ff:ae:46:96:97:7b:e4:0b:50:e0:19:b7:f8:8c:f0:ee:cd:84:
         97:19:9c:9a:b6:d7:6f:54:61:1c:1b:1c:17:4e:3c:02:b7:ee:
         b6:67:c7:5b:90:c2:2d:0f:b0:8b:4c:bd:cc:d4:66:9c:23:04:
         a4:05:73:36:17:c6:4f:90:25:b2:a6:55:91:be:66:ba:ab:7f:
         f1:72:e4:8e:bb:b7:ee:fd:ab:11:7f:83:31:94:30:cd:2f:6b:
         f3:59:45:90:bf:c6:73:18:2c:c5:3e:13:80:e2:ea:23:48:9d:
         09:b9:0f:79:e1:ed:f0:4a:20:a7:ce:e8:a3:c3:00:27:6b:6d:
         7e:6a:94:ff:d6:e2:a8:3e:6e:f3:4c:df:98:2b:6f:34:c4:42:
         ae:88:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org