Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/4a61cd517ef680e99ef9c6409ef705cd28cca32d.roa
File:                     4a61cd517ef680e99ef9c6409ef705cd28cca32d.roa (raw, json)
Hash identifier:          +QqB4GW2vhpi6K9mkplfCIf0xv40x9DacHR/+/9hW9E=
Subject key identifier:   62:F3:EA:7C:33:66:A3:89:D0:00:86:2D:4E:01:97:83:A8:98:D8:40
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       12C48D
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/4a61cd517ef680e99ef9c6409ef705cd28cca32d.roa
Signing time:             Tue 19 Sep 2023 08:30:01 +0000
ROA not before:           Mon 18 Sep 2023 08:30:01 +0000
ROA not after:            Wed 17 Sep 2025 08:30:01 +0000
asID:                     271956
IP address blocks:        2803:7610:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229965 (0x12c48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Sep 18 08:30:01 2023 GMT
            Not After : Sep 17 08:30:01 2025 GMT
        Subject: CN=4a61cd517ef680e99ef9c6409ef705cd28cca32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:a8:2c:b5:a1:a2:db:fa:6a:f2:1e:01:3f:
                    77:4c:3a:af:1b:bc:b0:70:f2:52:cd:73:30:84:96:
                    da:59:37:37:50:3b:99:56:e9:c3:5e:bc:50:4e:55:
                    e6:55:23:db:0a:28:a7:25:5d:30:74:ba:22:f7:06:
                    81:c5:e2:48:04:20:f2:9b:03:3d:41:c1:68:99:57:
                    09:b3:d1:49:fe:5f:d8:3a:f8:b7:33:38:2e:00:4c:
                    5c:22:97:5b:ae:a2:35:aa:36:4f:0e:75:84:ab:4a:
                    53:ad:49:ce:5d:36:23:a2:bd:3c:60:5c:1d:09:bb:
                    73:70:c0:67:c6:89:31:b5:f2:97:13:bb:0a:e3:e7:
                    34:4a:df:0d:53:d3:0e:36:ee:9a:04:fe:f6:b7:6b:
                    7a:69:54:c9:a6:92:80:62:3a:d4:1a:a0:be:4f:44:
                    0e:34:21:bb:a0:05:49:2e:42:dd:80:11:6b:35:b3:
                    1e:79:1d:b6:0e:23:05:51:79:62:1b:a3:6d:d9:94:
                    07:41:44:9b:ea:e4:af:f4:df:16:8b:c5:2e:4d:a1:
                    4d:c8:51:17:05:17:ac:5a:f1:8e:b1:f2:cc:dd:35:
                    da:e4:6b:9d:a3:4f:f6:42:b9:b9:9b:c6:28:6e:60:
                    6c:7a:5d:c0:cc:fc:54:4d:46:a5:10:b1:11:5a:a9:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F3:EA:7C:33:66:A3:89:D0:00:86:2D:4E:01:97:83:A8:98:D8:40
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/4a61cd517ef680e99ef9c6409ef705cd28cca32d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:46:92:87:02:c6:fc:7f:0e:3b:e5:e9:ac:94:7b:d3:4f:
         dc:c5:f2:10:ec:51:9a:6f:c5:8d:8c:1c:e9:bb:f9:08:d0:72:
         54:05:ee:5c:d7:0a:24:9f:8f:c4:35:94:06:6c:66:38:06:84:
         3a:f8:fb:a4:3f:59:12:a3:45:e6:c6:40:71:a4:e1:21:65:bc:
         ed:87:a6:27:87:e1:07:41:6f:a4:05:01:43:ef:f2:90:6a:18:
         b2:2d:a6:cb:b7:76:d1:4f:b1:54:17:a0:63:48:47:c7:ec:2e:
         3a:a5:68:8f:bb:d2:52:50:8b:7c:29:31:99:c9:95:ac:35:f7:
         ea:c1:d9:99:54:dd:ad:fe:cc:7b:d5:11:05:c4:e0:5a:45:31:
         ff:20:ed:7c:34:23:0d:37:b6:c6:20:fe:f2:00:c3:4e:21:04:
         cd:83:ee:16:c0:4f:4b:17:40:6f:49:1b:4d:e9:ca:a0:5c:81:
         78:41:34:af:ef:93:e3:25:4a:9b:df:3d:d5:50:5a:89:6e:dd:
         56:8e:64:9b:43:0c:3c:fb:39:f2:53:f0:03:01:78:10:cf:13:
         9d:b2:ed:44:26:ea:09:7e:84:f3:5b:77:21:69:6d:82:0d:f9:
         7b:fb:9e:76:a3:fc:2d:1e:a6:64:c6:78:7a:5d:02:e6:c7:02:
         15:87:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-ams.rpki-client.org