Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/c2220ed08f95a251af0a2351059b7af5a4ecd1f3.roa
File:                     c2220ed08f95a251af0a2351059b7af5a4ecd1f3.roa (raw, json)
Hash identifier:          yEogKhzNbtCmP3ZFG0VTKRR4b1o27nAXMHY3LHC5vc4=
Subject key identifier:   04:9D:60:89:58:76:D5:11:EA:46:2A:DC:35:C3:DA:C5:A7:75:29:72
Certificate issuer:       /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Certificate serial:       14FC88
Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/c2220ed08f95a251af0a2351059b7af5a4ecd1f3.roa
Signing time:             Mon 28 Mar 2022 13:34:26 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Thu 28 Mar 2024 03:00:00 +0000
asID:                     265554
IP address blocks:        2803:aba0:2300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375368 (0x14fc88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2024 GMT
        Subject: CN=c2220ed08f95a251af0a2351059b7af5a4ecd1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:c9:cc:51:a5:7f:c7:ed:70:58:ec:2c:2f:
                    3d:33:9d:8b:ac:31:0d:7f:41:9a:d3:2f:05:18:10:
                    78:96:71:83:ab:fe:31:cc:69:43:7a:f9:60:dc:ac:
                    3d:4b:37:6d:ec:1a:d8:2b:b2:6e:dd:96:67:e6:67:
                    29:77:d5:fd:95:99:18:70:21:73:37:bf:77:32:c3:
                    cf:af:c2:da:12:cf:ab:77:09:68:c9:a4:94:9a:3c:
                    fe:62:b0:21:cd:d9:78:c3:5e:04:63:6c:f0:41:93:
                    47:9e:02:13:96:d8:21:b2:72:30:bb:d9:d2:c3:99:
                    14:8a:d4:1d:46:e0:7f:c0:1f:73:95:ff:b2:53:9a:
                    3f:f4:1a:04:4d:8f:ff:cd:49:66:49:dd:00:ea:88:
                    82:b9:99:d4:ba:62:40:70:dd:01:3a:9f:70:3b:ae:
                    30:0e:e1:28:4a:17:a7:13:fe:4d:46:71:2e:c0:7c:
                    0a:a6:e9:62:e5:2a:23:c7:5d:c9:e8:ed:93:fc:58:
                    e9:e4:86:f0:c9:bb:d6:f7:6e:80:0c:49:cd:38:a9:
                    a9:af:88:9a:0b:fb:c5:4d:fc:3e:7c:95:7b:46:2d:
                    0a:fc:e8:12:a3:3f:c3:ab:07:8f:8d:7f:77:76:38:
                    cf:0d:f4:71:b9:9f:68:1b:34:1a:a0:4d:e4:56:79:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9D:60:89:58:76:D5:11:EA:46:2A:DC:35:C3:DA:C5:A7:75:29:72
            X509v3 Authority Key Identifier:
                keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/c2220ed08f95a251af0a2351059b7af5a4ecd1f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aba0:2300::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:f0:90:06:98:f8:f3:ba:62:f2:4a:95:02:ac:c0:a3:c4:
         de:ce:a3:ed:5c:22:68:7a:13:e6:10:20:96:de:28:a9:17:3d:
         2a:20:bf:ca:8e:a5:15:05:e0:da:a3:f4:d5:50:9d:e8:a6:5d:
         1d:3f:bc:9d:16:eb:b2:b0:69:5e:db:56:c2:cd:70:40:2e:14:
         e8:1a:88:d8:97:ca:f9:7b:64:2e:c6:99:7e:9a:63:b6:ea:5e:
         38:65:c0:fd:a8:66:db:9d:ef:00:57:29:91:5c:1f:0e:b0:8b:
         d3:51:bf:9f:44:33:96:a2:62:44:79:db:1f:a4:fc:a7:f4:35:
         34:a2:00:91:bb:ed:e3:3f:80:fd:f8:57:72:c5:a6:25:af:8d:
         48:c7:4b:ab:35:e4:58:b0:5c:54:38:fa:b4:be:58:9c:f9:24:
         ad:f1:67:5a:24:66:22:58:34:37:d0:41:d9:ac:7c:90:1b:83:
         de:12:40:a9:e6:cc:69:f0:b9:be:28:42:6c:17:74:98:ca:c2:
         2c:8c:c3:11:e7:ce:5c:54:e6:52:81:c2:a7:3f:69:73:04:cb:
         18:97:23:f8:e7:f9:57:3e:29:d5:17:a0:4e:a1:a8:2c:d3:f5:
         02:7b:4e:a0:7c:21:fe:a5:82:b6:cc:a5:29:2b:74:d3:f6:3a:
         d7:53:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org