Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/1ed32c08aaf2ee5464e8b929a6313737f36b2fe7.roa
File:                     1ed32c08aaf2ee5464e8b929a6313737f36b2fe7.roa (raw, json)
Hash identifier:          GMUyEh1Vfk2IaLRv/EIQONo+rHvaQjcIEWti4WvY0N4=
Subject key identifier:   9A:7D:C8:24:4B:9E:8A:C8:1D:C3:C1:CF:5D:8E:46:73:5B:47:F7:CE
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       1474
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/1ed32c08aaf2ee5464e8b929a6313737f36b2fe7.roa
Signing time:             Fri 01 Dec 2023 12:09:47 +0000
ROA not before:           Fri 01 Dec 2023 12:09:47 +0000
ROA not after:            Mon 01 Dec 2025 12:09:47 +0000
asID:                     273138
IP address blocks:        2803:f450::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5236 (0x1474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec  1 12:09:47 2023 GMT
            Not After : Dec  1 12:09:47 2025 GMT
        Subject: CN=1ed32c08aaf2ee5464e8b929a6313737f36b2fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:43:e9:7a:da:22:27:9d:4f:d5:dc:a6:c8:
                    ae:d6:6d:f6:49:0c:61:8f:44:77:e1:22:2e:3c:ac:
                    60:1c:11:57:ab:e5:87:9c:dc:fb:d9:60:e9:37:c5:
                    b2:58:7b:8d:4f:9e:a1:09:07:57:97:61:63:7c:6c:
                    67:ef:0e:81:3b:ad:23:1b:bf:c8:30:80:62:0c:c8:
                    4d:3d:dc:dd:2b:0b:9d:de:6e:1e:50:c3:9c:ee:80:
                    e5:57:31:41:ed:f2:26:b0:42:81:5a:54:82:ac:e3:
                    33:ab:c7:ec:2b:0e:a7:a0:17:f5:ab:7a:5c:aa:92:
                    d9:88:bd:3f:ad:b4:99:9a:b0:0d:87:60:e2:20:26:
                    21:33:99:22:32:8b:fa:09:32:77:21:bc:b9:5a:e8:
                    fb:f5:d9:d5:bb:32:fb:e6:5c:d0:96:a0:62:64:bc:
                    6e:03:a9:53:9e:10:60:33:2d:44:fd:03:b0:42:3f:
                    be:ba:92:45:35:cd:f9:f1:3e:c7:10:cc:38:d5:8c:
                    35:05:bb:e4:1a:ee:67:5b:4b:15:f6:24:a2:82:86:
                    1d:1d:5a:53:be:00:d2:4c:13:0c:39:82:b9:fc:ac:
                    0c:a3:47:41:79:4c:e1:9a:4f:2c:65:6a:f2:cf:46:
                    de:d0:69:e3:f0:ac:2e:6e:a7:89:68:29:73:8c:61:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7D:C8:24:4B:9E:8A:C8:1D:C3:C1:CF:5D:8E:46:73:5B:47:F7:CE
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/1ed32c08aaf2ee5464e8b929a6313737f36b2fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:34:44:d0:68:23:8c:dc:32:49:82:b9:b9:59:f9:63:8c:78:
         78:02:51:58:7c:ad:ac:5c:b4:5d:d0:b5:4a:92:a4:3a:bc:cc:
         aa:e3:db:c9:ac:14:e5:80:c9:4e:3a:a6:d0:58:7e:b5:75:fe:
         cc:7f:14:46:1a:1d:bb:a4:56:a5:e9:9d:ea:01:4b:b6:55:7a:
         aa:d0:e1:10:ed:b2:2b:68:52:eb:37:c0:58:6e:29:d5:40:bc:
         dd:f4:7c:71:25:a1:be:fa:d5:f7:0b:c0:36:b9:84:c9:c8:2f:
         4e:d8:4c:4e:d5:fe:6a:c8:0c:d8:85:10:cf:cf:a9:c2:e9:4f:
         30:13:1d:fa:e6:79:b1:87:a7:c7:c0:06:d1:a1:db:a1:77:81:
         c1:8e:cd:65:16:db:e0:bf:77:4c:1c:a4:ff:d1:11:86:8b:5b:
         c8:fc:8f:3f:04:ae:60:1a:de:af:8f:84:2f:00:52:d8:64:ee:
         f2:77:f5:e6:25:c5:b9:6a:84:0e:09:cc:bb:d0:ee:4d:c1:b2:
         fa:2b:0d:a5:0f:f2:02:a4:d0:ea:87:59:a9:39:90:27:d2:30:
         f8:24:cf:29:dd:0d:bd:21:27:af:e0:66:d8:1a:63:1f:a7:14:
         07:15:9e:16:e4:09:9d:d2:5b:7a:5a:c3:40:ce:00:77:82:7b:
         8c:cd:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:50:04 2025 by rpki-client