Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/55480a11865126291f39de92fe5486bbaf655706.roa
File:                     55480a11865126291f39de92fe5486bbaf655706.roa (raw, json)
Hash identifier:          AOzLGCl/Gf9gk8gg48EmrhiKDcFrGK+aHaT4VC/8roo=
Subject key identifier:   7D:60:D2:7D:76:AF:F1:38:CD:D9:95:83:60:CF:75:69:B4:2D:F8:B2
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       34C7
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/55480a11865126291f39de92fe5486bbaf655706.roa
Signing time:             Mon 04 Dec 2023 02:12:30 +0000
ROA not before:           Mon 04 Dec 2023 02:12:30 +0000
ROA not after:            Thu 04 Dec 2025 02:12:30 +0000
asID:                     273138
IP address blocks:        2803:f450::/40 maxlen: 48
                          2803:f450:100::/40 maxlen: 48
                          2803:f450:200::/40 maxlen: 48
                          2803:f450:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13511 (0x34c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec  4 02:12:30 2023 GMT
            Not After : Dec  4 02:12:30 2025 GMT
        Subject: CN=55480a11865126291f39de92fe5486bbaf655706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:1f:34:4e:99:d7:48:24:10:f7:c4:54:55:
                    30:7a:91:f3:4f:a4:28:a7:a9:cd:24:8e:f7:74:6b:
                    f3:3c:eb:5c:15:5f:be:a9:66:d8:70:f9:30:2b:83:
                    b9:ef:ee:4b:07:23:32:8f:96:89:ed:5a:36:c8:8b:
                    c3:34:a6:48:fd:86:40:8e:31:77:89:ef:4a:8f:31:
                    58:e6:f0:a7:8c:bd:3a:cc:fa:97:12:26:aa:61:da:
                    86:cc:5b:92:49:e8:53:f8:0a:13:52:3e:9a:e4:d0:
                    49:51:06:c7:ec:60:8c:0d:2e:52:f9:63:92:58:cb:
                    6a:b4:f3:4e:0e:73:bc:4d:90:23:dc:2b:d6:af:2d:
                    03:a8:3b:87:d2:e8:84:da:ff:59:8b:df:61:c4:7a:
                    ab:e8:fe:83:fa:e9:a4:18:b6:dd:5b:8b:38:ca:08:
                    e6:70:6f:c6:f5:06:5a:df:cd:fe:37:b8:bf:9d:61:
                    8d:df:7e:93:a8:78:2d:05:10:1d:35:04:2b:5b:b8:
                    83:3f:b6:66:6a:2b:1b:f4:2d:d6:02:91:cd:dd:18:
                    16:e3:e7:97:a7:af:01:de:55:0b:cb:3f:88:20:5f:
                    25:ce:01:b5:e3:2c:c3:18:e3:2a:72:31:aa:ed:08:
                    a8:7b:fa:9a:8f:93:df:d0:a8:33:8a:72:b3:a3:0b:
                    0a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:D2:7D:76:AF:F1:38:CD:D9:95:83:60:CF:75:69:B4:2D:F8:B2
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/55480a11865126291f39de92fe5486bbaf655706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/38

    Signature Algorithm: sha256WithRSAEncryption
         2b:a8:5c:b9:ce:86:a0:54:c6:a3:cc:fa:b9:e6:b7:91:91:c2:
         e2:b2:98:5d:96:c6:c9:87:de:25:05:95:40:ff:1c:54:82:0d:
         b5:fc:85:a3:94:0c:d0:5f:2b:c2:ff:f1:de:23:db:2b:47:d1:
         22:cc:f1:99:28:da:06:f7:d4:85:59:1a:c8:c5:ea:ac:cd:cb:
         2b:5f:c5:fa:59:5c:c7:bf:f6:64:76:49:f3:3a:e7:02:1e:28:
         0c:1e:50:1f:f1:8e:d1:f6:c8:d2:e0:d4:5c:22:53:a3:f2:d9:
         86:cb:2b:5d:ce:c9:1b:35:88:33:26:d4:d5:6d:13:b7:03:57:
         14:da:df:0c:a1:58:63:35:1f:0c:1b:d3:a9:c2:de:3e:a8:ab:
         62:cf:7b:0a:62:ed:1f:52:d3:9d:79:93:80:53:c9:d0:a2:12:
         c1:88:1f:09:12:ef:7a:b9:a4:5a:13:5c:52:62:1b:d0:be:8f:
         7c:91:32:a7:11:25:91:e2:a0:87:7e:47:ff:0a:ce:d7:cb:7e:
         fa:cf:08:82:c7:b4:ef:8d:16:76:48:c9:da:64:02:60:b4:84:
         88:cb:dc:68:db:c1:f1:67:0d:69:43:ab:3c:96:bc:d5:68:37:
         9f:f1:b9:32:e1:47:ba:fc:cf:55:9a:f9:29:90:f2:36:54:dc:
         24:77:ce:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----