Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da7429a7-fdbf-48ce-b1f3-85af02ee7d4a/dd6d1b07cac29ab6bf0a47bd8fd4b1b70bfb3d13.roa
File:                     dd6d1b07cac29ab6bf0a47bd8fd4b1b70bfb3d13.roa (raw, json)
Hash identifier:          8c38sXFMPYp9Cu4woZ3GWp7LmdPeZ4n9OIYKJCadYvc=
Subject key identifier:   E7:5A:1A:6C:12:E3:05:20:DE:51:39:A3:BD:DE:2F:25:76:C9:CF:2D
Certificate issuer:       /CN=980b87bbedcd455a7b0c73bd40b747dc3f8ab00d
Certificate serial:       B2C0
Authority key identifier: A5:03:E5:1E:37:F5:55:AA:66:B9:AC:9C:8B:9A:83:2E:AD:4C:A6:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/980b87bbedcd455a7b0c73bd40b747dc3f8ab00d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da7429a7-fdbf-48ce-b1f3-85af02ee7d4a/dd6d1b07cac29ab6bf0a47bd8fd4b1b70bfb3d13.roa
Signing time:             Sun 14 May 2023 02:26:01 +0000
ROA not before:           Sat 13 May 2023 02:26:01 +0000
ROA not after:            Wed 14 May 2025 02:26:01 +0000
asID:                     271968
IP address blocks:        2803:2e10::/40 maxlen: 40
                          2803:2e10:8000::/40 maxlen: 40
                          2803:2e10:8f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45760 (0xb2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=980b87bbedcd455a7b0c73bd40b747dc3f8ab00d
        Validity
            Not Before: May 13 02:26:01 2023 GMT
            Not After : May 14 02:26:01 2025 GMT
        Subject: CN=dd6d1b07cac29ab6bf0a47bd8fd4b1b70bfb3d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:70:c1:bc:ee:17:87:03:e8:b2:33:74:50:
                    e9:8c:19:70:fd:b3:13:0b:2e:4b:91:0a:b0:c0:98:
                    05:d4:89:fa:bb:00:16:c9:79:d3:27:71:20:ab:0d:
                    c2:57:76:a3:e5:0d:73:1e:75:df:fe:fb:f8:8c:10:
                    57:bb:c5:f6:b7:10:b0:f7:70:e6:25:f7:2f:4d:73:
                    84:a2:57:23:04:68:f4:ff:ac:76:82:c6:1d:a8:a9:
                    41:2f:59:76:da:d6:c4:aa:7a:ce:7f:0b:1d:ef:7b:
                    68:e7:83:f2:d4:6a:1c:1d:8d:6e:c6:2f:16:3c:d5:
                    9f:da:42:63:97:47:6b:ba:de:60:72:77:71:2e:94:
                    b4:22:a4:f1:45:5e:5d:6c:07:97:3c:19:3d:8f:b6:
                    69:92:dc:17:11:10:c0:c7:e0:c2:28:c9:af:d3:f7:
                    ed:f2:29:a1:b8:93:a9:85:ac:cd:ec:51:70:f2:13:
                    73:a0:7c:45:90:8d:06:62:9e:9f:42:2a:1b:ba:b1:
                    dc:d6:d8:02:47:ba:ce:7d:5a:d6:17:1c:43:a0:88:
                    a7:b7:70:58:b4:7a:11:cf:93:48:5d:cb:f6:9a:cd:
                    ef:e3:9f:68:82:43:d2:be:03:a3:ee:04:83:35:15:
                    ec:61:17:fc:a3:2f:c8:0d:ad:b2:aa:05:8e:cd:cb:
                    ba:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5A:1A:6C:12:E3:05:20:DE:51:39:A3:BD:DE:2F:25:76:C9:CF:2D
            X509v3 Authority Key Identifier:
                keyid:A5:03:E5:1E:37:F5:55:AA:66:B9:AC:9C:8B:9A:83:2E:AD:4C:A6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/980b87bbedcd455a7b0c73bd40b747dc3f8ab00d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da7429a7-fdbf-48ce-b1f3-85af02ee7d4a/dd6d1b07cac29ab6bf0a47bd8fd4b1b70bfb3d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da7429a7-fdbf-48ce-b1f3-85af02ee7d4a/980b87bbedcd455a7b0c73bd40b747dc3f8ab00d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e10::/40
                  2803:2e10:8000::/40
                  2803:2e10:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:1b:3f:a6:6b:d8:43:32:45:23:14:5a:72:60:45:90:3b:d1:
         70:ee:17:b1:2e:ea:9a:31:58:3f:fd:f4:5e:fc:98:ce:c6:68:
         8c:62:99:b0:5c:8c:63:94:e7:ed:57:ac:b2:e1:33:29:b9:f6:
         53:cd:f0:8b:5a:b1:f8:1a:dc:ae:89:12:7a:8f:43:ee:b5:4b:
         e6:d6:8f:33:88:9e:86:67:9e:7c:50:de:2c:9f:2a:ab:34:68:
         33:b0:8b:fa:c9:08:a1:84:b3:fe:35:44:66:35:8f:9c:84:39:
         f6:ef:f1:87:cb:17:ec:dd:04:3f:7a:60:fc:b2:28:a3:c9:3f:
         07:e3:84:80:03:f6:89:04:f3:dd:a8:3d:99:7b:cc:b1:d9:a1:
         26:01:e2:af:1d:51:e7:a0:15:dd:10:db:b2:5a:19:ca:83:e7:
         a8:d3:ae:6d:8b:69:b1:13:f8:6b:bd:ef:75:a7:e2:00:64:46:
         67:f2:b0:37:60:c0:42:b0:47:3e:a4:bb:16:f6:74:5c:cb:76:
         7a:d6:74:9e:5b:0e:33:0a:10:77:86:09:a2:82:df:d3:22:16:
         29:e2:ef:0f:e4:8f:d3:23:f1:08:a4:89:3a:5f:09:3c:b7:94:
         0a:5d:14:58:a1:5f:89:f1:92:0c:28:5f:19:f0:02:6d:ee:ee:
         a4:8b:ea:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org