Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/f4ed840c075b26d8e104936fc4f9b9d28478c61e.roa
File:                     f4ed840c075b26d8e104936fc4f9b9d28478c61e.roa (raw, json)
Hash identifier:          mGuHxjkqzfVYNDEQjgKMYSLYUezp0fRQZR2pI6m0zIU=
Subject key identifier:   D8:52:C0:30:97:81:3B:52:02:C0:1B:BD:BD:EB:F9:42:D8:D0:FC:C9
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       226E33
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/f4ed840c075b26d8e104936fc4f9b9d28478c61e.roa
Signing time:             Fri 11 Aug 2023 02:39:41 +0000
ROA not before:           Thu 10 Aug 2023 02:39:41 +0000
ROA not after:            Mon 11 Aug 2025 02:39:41 +0000
asID:                     64120
IP address blocks:        2803:f080:8000::/35 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2256435 (0x226e33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Aug 10 02:39:41 2023 GMT
            Not After : Aug 11 02:39:41 2025 GMT
        Subject: CN=f4ed840c075b26d8e104936fc4f9b9d28478c61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:20:fa:6b:c2:6b:c3:da:f0:7f:a8:a0:10:
                    6d:79:7a:69:c4:dd:9a:c8:71:83:cc:bd:5a:60:f8:
                    e2:4e:a5:8d:79:ce:18:d0:77:04:64:9f:bd:4e:10:
                    82:38:43:8b:95:78:02:59:92:72:e4:ab:6a:65:d2:
                    fe:73:77:96:f8:91:f6:03:07:b3:7a:af:73:0a:bb:
                    34:b8:bc:4e:1f:e1:9d:f6:22:30:de:41:c8:e4:f3:
                    9c:c3:56:97:c6:d3:48:e8:3e:57:38:a9:2c:4e:a8:
                    63:3b:f5:2a:c0:70:95:d7:46:57:24:2b:76:8f:ec:
                    1e:c3:07:4e:d4:97:50:52:25:f4:99:9f:b9:80:19:
                    76:31:a6:1c:65:7d:9a:e3:5c:c7:e2:08:36:9f:d7:
                    1c:3f:8c:ae:7e:4a:77:02:ca:9b:ea:a4:7d:2e:37:
                    36:dc:d7:68:2b:ae:3c:01:9c:87:13:aa:94:a2:10:
                    ee:c5:74:62:d3:54:ba:b9:81:ad:ae:5f:a7:90:7e:
                    72:c0:02:a8:56:8d:1c:30:f0:e3:0d:41:b2:f0:b3:
                    33:64:17:92:d3:6e:56:4b:f6:8f:8b:5f:03:8a:01:
                    ae:50:3e:d4:a3:54:fd:84:38:eb:ab:5a:20:f4:82:
                    88:cf:e1:e7:d9:f2:73:9f:2c:03:e8:9a:3b:e7:d0:
                    b1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:52:C0:30:97:81:3B:52:02:C0:1B:BD:BD:EB:F9:42:D8:D0:FC:C9
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/f4ed840c075b26d8e104936fc4f9b9d28478c61e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         25:83:27:ab:2c:f0:a2:dc:22:09:6c:5c:d7:bf:ad:b9:0a:09:
         90:0b:9f:e4:44:6d:d8:3d:f8:75:09:e6:f7:a9:c8:ee:2b:05:
         25:55:b7:1e:e1:b4:e7:8a:13:0e:ec:dc:8f:69:3f:92:a5:fa:
         70:5d:27:ea:0e:15:99:a2:57:f5:5e:08:de:3b:70:ea:73:71:
         2c:35:21:da:5b:78:57:c0:42:91:9c:dd:aa:05:24:bd:0e:7b:
         ca:0b:43:87:2d:0e:97:a8:82:66:fd:c0:8e:3d:89:3c:5f:41:
         3e:40:fe:2e:8f:25:90:f6:af:fd:f3:d4:62:64:37:13:a6:53:
         9c:2b:d4:1a:55:0e:77:d9:46:9e:f5:4f:03:77:75:aa:85:cb:
         81:bb:b8:21:b1:ea:2d:b9:f5:d1:2a:57:11:d6:43:ae:d7:79:
         ec:08:f7:18:3e:da:ac:87:68:a9:ac:a0:7f:55:d7:a3:a9:63:
         80:75:f4:f3:cf:f5:a1:4e:11:fd:40:40:d8:6a:3b:fa:04:2b:
         43:fa:c2:c3:ae:2a:dc:80:fc:10:4c:60:2a:d3:a9:0e:f9:90:
         b1:f6:95:46:2c:1a:8d:b5:f6:ea:d5:fc:f7:41:86:bb:37:03:
         c9:19:dc:4d:59:fd:75:97:9a:d3:23:52:f4:67:91:f3:71:81:
         52:1c:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org