Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/5fd6fdd0bf1386d66ac415c8faead40d9ed0e09b.roa
File:                     5fd6fdd0bf1386d66ac415c8faead40d9ed0e09b.roa (raw, json)
Hash identifier:          ND94y/zl23vm7o4YUw5XIribhagHq1YCb6ALVlWEJaQ=
Subject key identifier:   EF:94:D4:2D:15:BA:F5:61:F1:C0:E3:8C:83:5A:A1:41:57:63:35:D5
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       1A62
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/5fd6fdd0bf1386d66ac415c8faead40d9ed0e09b.roa
Signing time:             Fri 01 Dec 2023 12:17:31 +0000
ROA not before:           Fri 01 Dec 2023 12:17:30 +0000
ROA not after:            Mon 01 Dec 2025 12:17:30 +0000
asID:                     273138
IP address blocks:        2803:f450::/40 maxlen: 40
                          2803:f450:100::/40 maxlen: 40
                          2803:f450:200::/40 maxlen: 40
                          2803:f450:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6754 (0x1a62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec  1 12:17:30 2023 GMT
            Not After : Dec  1 12:17:30 2025 GMT
        Subject: CN=5fd6fdd0bf1386d66ac415c8faead40d9ed0e09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:55:62:e5:cc:04:cc:d7:13:66:75:c2:5d:
                    b9:68:f6:3b:5e:b7:b2:5f:26:15:38:7e:bc:03:08:
                    1a:79:f9:b5:c0:c6:5f:20:66:49:48:a3:ca:35:96:
                    fd:a6:9f:4a:4f:67:fd:24:3a:5e:d0:f0:64:fd:99:
                    0d:48:d5:e5:69:9a:18:18:d9:78:41:b1:8d:c3:c1:
                    e6:0c:4a:b3:1a:76:59:96:3f:93:04:7e:51:64:24:
                    1c:44:67:6f:da:a7:f7:63:ea:4f:c1:88:39:e7:5e:
                    57:1b:67:63:a1:69:b4:07:7c:ee:46:e9:b0:40:7c:
                    18:bc:b1:6b:25:36:da:78:7e:90:eb:6e:1c:57:ac:
                    4b:bc:d3:97:9c:63:41:23:64:54:41:2c:f4:9e:d1:
                    3d:71:f1:58:32:d8:70:cc:c5:b6:a9:32:7d:ab:16:
                    08:b2:b0:e1:01:37:d1:3a:16:76:52:65:e3:a7:90:
                    a8:9b:2b:25:e2:60:c7:80:e3:fb:f9:e7:df:be:78:
                    1c:51:0d:16:ca:51:53:19:c4:65:4d:75:eb:21:8c:
                    fb:66:a2:1c:d4:77:94:c9:51:d8:f4:6c:b9:01:24:
                    84:fc:01:ca:03:c5:d7:55:a1:66:e7:12:54:12:6c:
                    a7:66:7b:b9:50:7e:78:da:cf:2c:db:a7:60:76:c5:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:94:D4:2D:15:BA:F5:61:F1:C0:E3:8C:83:5A:A1:41:57:63:35:D5
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/5fd6fdd0bf1386d66ac415c8faead40d9ed0e09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/38

    Signature Algorithm: sha256WithRSAEncryption
         7b:34:8a:1a:53:81:2b:c3:1b:85:ca:5e:e1:1c:c0:cd:42:98:
         6a:2f:6d:6e:3d:19:dd:40:8c:e8:3a:d7:7b:4d:c0:b7:bf:f0:
         60:7c:94:3e:0e:4c:a1:c8:3f:cd:0d:0d:ce:a7:d4:52:ab:53:
         f9:0c:83:ad:c9:e5:c2:78:b7:70:63:0f:5d:fd:ed:13:7d:ad:
         2a:c5:dc:fd:47:ac:92:bf:cb:3d:d7:cf:67:cc:2f:03:e5:5c:
         23:0d:77:01:c5:7d:24:fd:e5:3e:d5:24:13:da:d7:7a:38:4d:
         e9:12:87:35:89:52:7d:69:e3:2a:25:7a:97:f6:df:84:69:e7:
         47:6c:bc:ce:f3:16:1b:cc:81:80:3a:c9:8f:71:21:84:d1:f3:
         75:57:05:d1:db:21:d1:11:6f:47:88:20:63:34:14:ea:91:58:
         f6:bd:13:64:32:a0:02:2a:bc:58:f0:45:71:36:fa:d4:24:93:
         06:99:d9:f3:c0:24:b5:76:49:27:0a:3e:70:fd:ae:44:10:b6:
         1e:93:e7:e3:2b:38:69:da:ef:1e:ac:f4:21:b9:ed:fb:c2:48:
         bb:e7:f0:49:5f:f1:02:7f:22:7f:e7:46:5d:b5:48:95:ff:4f:
         80:b8:02:ac:8a:3e:ad:0b:11:e9:1f:08:8b:5c:88:13:ac:c7:
         6a:66:12:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org