Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/11a931ff02c9a7a41403df793725b15268362f91.roa
File:                     11a931ff02c9a7a41403df793725b15268362f91.roa (raw, json)
Hash identifier:          UuvZEafN8HhSNj4Yknmp2zRxbvq4TlvZjJRgmsPHrFU=
Subject key identifier:   5D:48:70:80:B0:83:E7:58:E7:D0:4F:C0:8C:ED:29:61:A4:20:55:8F
Certificate issuer:       /CN=2d287d9bace0aaa89c8a18b31d258122387e847f
Certificate serial:       050AF0
Authority key identifier: 80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/11a931ff02c9a7a41403df793725b15268362f91.roa
Signing time:             Fri 02 Dec 2022 18:29:13 +0000
ROA not before:           Fri 12 Aug 2022 04:38:18 +0000
ROA not after:            Thu 15 Aug 2024 04:38:18 +0000
asID:                     262589
IP address blocks:        2803:6090::/32 maxlen: 48
                          2803:6090:1::/48 maxlen: 48
                          2803:6090:2::/48 maxlen: 48
                          2803:6090:3::/48 maxlen: 48
                          2803:6090:a::/48 maxlen: 48
                          2803:6090:b::/48 maxlen: 48
                          2803:6090:c::/48 maxlen: 48
                          2803:6090:d::/48 maxlen: 48
                          2803:6090:e::/48 maxlen: 48
                          2803:6090:f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330480 (0x50af0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d287d9bace0aaa89c8a18b31d258122387e847f
        Validity
            Not Before: Aug 12 04:38:18 2022 GMT
            Not After : Aug 15 04:38:18 2024 GMT
        Subject: CN=11a931ff02c9a7a41403df793725b15268362f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:39:b6:61:ed:25:86:7d:fb:13:5e:79:e7:4a:
                    90:8b:b0:44:b4:5a:dc:86:02:31:fa:ac:26:21:8c:
                    ea:07:69:9b:1a:e0:2d:fd:56:a4:af:9a:bc:49:a7:
                    4b:db:7c:ca:e2:bb:e0:7d:44:c5:0c:55:cc:61:ea:
                    77:a6:6c:5e:5d:24:6d:6d:1f:35:af:60:dd:44:83:
                    27:b5:c1:0c:49:8a:63:82:d5:7b:4d:07:dc:6e:52:
                    da:70:27:05:5c:3f:80:04:0d:3c:43:23:cc:0d:95:
                    80:a4:20:bc:21:87:e0:5e:57:2f:02:34:f7:5b:fd:
                    6e:67:43:d0:50:56:3c:c0:86:dc:45:34:01:62:73:
                    58:eb:53:97:d9:d5:ea:cd:c9:1c:eb:b9:6c:15:b0:
                    8d:2b:5a:d3:2c:85:9c:2f:cd:9b:79:f4:0d:34:b8:
                    65:ad:bf:20:da:d1:85:01:d4:05:6b:63:4e:88:8d:
                    4b:f4:2c:93:aa:ee:2b:f2:bd:b2:b3:ca:13:ce:08:
                    5c:30:ae:13:05:0f:4e:39:12:88:13:b4:13:aa:c6:
                    b4:50:c6:6a:f3:9c:80:79:62:41:fb:b9:d4:49:36:
                    7c:dd:3e:0a:29:27:93:52:18:8e:85:56:f3:b9:a5:
                    9c:56:af:c6:11:59:15:80:4a:fe:11:df:c9:8a:73:
                    20:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:48:70:80:B0:83:E7:58:E7:D0:4F:C0:8C:ED:29:61:A4:20:55:8F
            X509v3 Authority Key Identifier:
                keyid:80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/11a931ff02c9a7a41403df793725b15268362f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6090::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:80:5e:b4:ba:ab:01:a5:ae:64:bf:cf:3f:ce:5d:51:27:56:
         59:d3:4b:59:84:fe:80:6b:80:90:57:81:d2:f0:4f:38:cc:06:
         bf:b2:ac:6c:ad:7e:ac:ed:20:3e:89:2f:58:fe:10:d4:1b:39:
         84:01:f0:4f:65:fd:87:5a:b4:1e:89:c0:bf:30:20:73:b6:94:
         27:f2:ff:59:f6:f0:76:3f:8c:c1:d8:5b:dc:9c:49:f7:61:65:
         bf:f2:11:bb:ff:5b:20:e6:a6:f3:a3:17:0a:89:9c:88:6f:23:
         a8:7d:14:98:4a:06:2c:22:b2:b6:9d:71:21:de:2e:ed:25:97:
         fc:d9:b5:5e:d1:1c:d7:d1:94:cb:08:5d:04:c0:cf:d8:41:0d:
         85:be:4c:1a:22:f1:0e:5c:63:ec:f9:ac:76:13:3d:36:e9:1d:
         bf:aa:e7:ad:e4:2c:6d:83:6d:c2:84:b1:84:b9:f3:6f:f6:0e:
         03:7e:31:05:d2:9a:ba:14:27:09:5d:41:58:cb:9a:ab:22:94:
         9f:60:7d:aa:cc:3d:a6:6d:3b:4a:93:c6:fa:fc:f7:5e:5d:e2:
         26:3b:e9:b8:50:7c:95:74:ac:a4:71:73:74:e8:20:bd:c1:df:
         fd:98:d2:7c:b1:14:97:c8:2a:70:bf:31:a3:88:94:e8:56:84:
         56:69:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org