Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10.roa
File:                     aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10.roa (raw, json)
Hash identifier:          psFrYj2M+cygZ2Kl5svkxRQ2kNSdtq3Yth+FOKKoVRI=
Subject key identifier:   90:62:99:62:D4:47:D9:1B:41:81:10:CB:A2:A5:4E:82:3F:A7:4F:F2
Certificate issuer:       /CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
Certificate serial:       259C22
Authority key identifier: DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10.roa
Signing time:             Mon 06 Nov 2023 20:02:48 +0000
ROA not before:           Mon 06 Nov 2023 20:02:48 +0000
ROA not after:            Thu 06 Nov 2025 20:02:48 +0000
asID:                     269918
IP address blocks:        2803:dd80::/36 maxlen: 36
                          2803:dd80:1000::/36 maxlen: 36
                          2803:dd80:2000::/36 maxlen: 36
                          2803:dd80:3000::/36 maxlen: 36
                          2803:dd80:4000::/36 maxlen: 36
                          2803:dd80:5000::/36 maxlen: 36
                          2803:dd80:6000::/36 maxlen: 36
                          2803:dd80:7000::/36 maxlen: 36
                          2803:dd80:8000::/36 maxlen: 36
                          2803:dd80:9000::/36 maxlen: 36
                          2803:dd80:a000::/36 maxlen: 36
                          2803:dd80:b000::/36 maxlen: 36
                          2803:dd80:c000::/36 maxlen: 36
                          2803:dd80:d000::/36 maxlen: 36
                          2803:dd80:e000::/36 maxlen: 36
                          2803:dd80:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464802 (0x259c22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
        Validity
            Not Before: Nov  6 20:02:48 2023 GMT
            Not After : Nov  6 20:02:48 2025 GMT
        Subject: CN=aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:46:e7:28:26:a4:60:d0:a8:c1:bc:da:03:
                    3e:7d:c4:8e:db:ce:7a:6e:d0:0d:7e:29:7d:08:79:
                    5f:b7:02:15:aa:6c:90:4d:f2:5e:cf:91:33:c7:0e:
                    fe:98:a2:c5:f9:d4:51:1d:6b:a1:08:e5:f3:16:46:
                    07:6d:0f:fc:71:88:10:bc:8d:45:cc:7c:ab:57:e5:
                    b4:11:b0:81:28:d7:a0:ac:1d:02:1a:a8:2d:e6:51:
                    a0:7d:ca:a1:8c:20:36:34:e9:6d:10:33:4a:09:9e:
                    e5:65:52:e8:24:f9:8d:8c:cf:c2:41:b3:ec:85:31:
                    91:99:5d:e8:f9:65:81:3c:c6:ca:7f:5b:b0:ad:2c:
                    e9:75:5c:a5:5a:93:41:aa:7f:22:90:db:59:05:c1:
                    1b:8c:61:0c:ba:b4:d3:c2:7c:f9:8c:45:e4:3b:6e:
                    f1:b6:a1:69:48:b0:3d:85:c7:76:a5:ce:db:10:19:
                    bf:0a:9e:ee:b1:0e:79:f5:71:41:3e:0a:c7:5b:cd:
                    e1:ed:d8:f8:4f:40:2e:5f:52:09:23:b6:22:ed:12:
                    24:16:d8:2a:a8:b4:3f:80:f6:61:70:be:25:76:82:
                    4f:c2:cf:54:8d:b6:fd:0d:22:99:d7:52:42:de:0e:
                    0c:ef:ff:f6:df:d2:b6:a9:d3:0e:77:f0:d8:a1:5c:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:62:99:62:D4:47:D9:1B:41:81:10:CB:A2:A5:4E:82:3F:A7:4F:F2
            X509v3 Authority Key Identifier:
                keyid:DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:08:7f:3e:72:13:4d:bf:12:be:1e:15:d2:b4:55:ad:67:7d:
         aa:80:04:0d:66:2a:f8:1d:80:13:3a:29:5d:b4:15:c0:21:97:
         2c:d0:40:cf:45:5d:4e:76:23:ea:ae:fb:3f:92:48:f0:8b:13:
         bd:10:ac:e8:8b:2c:db:1e:39:2f:92:ca:31:19:55:f6:c7:c9:
         97:6e:37:e3:89:6f:05:38:cb:62:98:7a:f0:f9:89:8e:ed:48:
         9d:28:f9:c3:15:af:32:a4:b6:f5:04:0e:7a:af:49:88:6a:45:
         89:1c:69:83:c6:0a:a5:0a:ce:97:aa:a3:2b:73:e1:8b:7e:bb:
         89:82:89:93:50:05:04:55:03:c5:3f:94:14:ed:44:62:d0:86:
         87:b0:2f:b4:96:0f:21:c0:5c:30:c5:00:9c:4e:6b:ba:c7:63:
         09:be:55:a9:bd:18:2a:da:e1:84:f7:ea:ee:0c:76:b8:0b:74:
         f3:1d:49:d4:ee:09:c0:6b:99:9d:85:79:5b:45:ed:bf:6c:c1:
         0d:b8:99:d4:6e:00:ef:3e:7f:97:ec:ec:6b:fd:ab:c8:0a:02:
         12:dc:92:a3:39:7c:8e:20:f0:7a:29:09:b1:1e:59:d6:be:94:
         9e:56:93:8c:3f:f8:8b:c3:ee:8c:7f:d4:62:93:d9:a9:64:69:
         31:a8:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org