Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dc25b7c192c16192881eb770258c7bb582b40d0f.roa
File:                     dc25b7c192c16192881eb770258c7bb582b40d0f.roa (raw, json)
Hash identifier:          X+g48psZ+QKV7dbIi4xMKDaOiD/gLdumbuYoZFVnS2A=
Subject key identifier:   56:F6:F5:8A:0D:04:BC:FD:0C:C4:2C:BF:33:5A:96:D8:B3:A4:98:8F
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       DC42
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dc25b7c192c16192881eb770258c7bb582b40d0f.roa
Signing time:             Tue 26 Dec 2023 13:07:22 +0000
ROA not before:           Tue 26 Dec 2023 13:07:22 +0000
ROA not after:            Fri 26 Dec 2025 13:07:22 +0000
asID:                     273138
IP address blocks:        2803:f450::/32 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56386 (0xdc42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec 26 13:07:22 2023 GMT
            Not After : Dec 26 13:07:22 2025 GMT
        Subject: CN=dc25b7c192c16192881eb770258c7bb582b40d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:fa:18:38:c9:93:cc:ad:e0:24:ca:f6:d1:
                    dc:ae:b8:32:50:1c:de:f0:18:6b:1c:1f:49:89:2e:
                    03:72:d9:20:dc:a1:3a:5e:6a:50:7d:29:69:26:d0:
                    58:b3:45:d4:8f:20:4c:26:6d:44:83:2c:63:1a:98:
                    c4:3b:a5:de:77:e4:85:b7:96:e7:93:58:37:3d:c9:
                    9c:3b:77:d3:10:84:8e:ae:0b:d1:81:85:c3:09:71:
                    7b:fa:1f:95:be:7d:73:7a:c6:13:4f:c4:da:85:b3:
                    da:5c:8f:e5:18:aa:0e:74:ae:d8:5d:d9:24:9f:f9:
                    1a:d1:7d:07:88:a9:e8:aa:dd:28:4a:15:0e:7c:18:
                    91:a0:36:3d:9b:52:8b:55:5a:8d:c9:4f:5b:be:1d:
                    10:de:84:5d:52:b0:6b:8e:cf:da:4b:6f:a0:92:87:
                    f1:a1:e7:33:a5:35:00:f5:62:2d:20:05:15:ef:83:
                    a0:45:4f:7a:8b:49:74:b6:d1:c7:f4:5b:39:4c:ca:
                    46:fa:ef:cb:54:66:00:5a:1b:ff:27:e1:6e:28:a0:
                    8c:76:83:22:6b:94:30:48:a3:e1:70:c2:81:37:da:
                    15:bb:d7:4f:26:59:d1:23:e6:4a:02:22:a8:ed:9d:
                    d8:57:8d:b2:e8:f3:62:a3:81:cb:37:13:4d:25:b1:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F6:F5:8A:0D:04:BC:FD:0C:C4:2C:BF:33:5A:96:D8:B3:A4:98:8F
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dc25b7c192c16192881eb770258c7bb582b40d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:f3:2e:af:ea:f7:b6:d5:9b:76:04:23:8a:f0:0a:f2:ce:dc:
         af:93:47:e2:fc:7c:f5:6c:20:ea:fc:3d:3d:93:a4:d6:f9:ca:
         67:70:83:95:55:7e:73:4a:07:3b:b4:6e:dd:b3:84:a2:9a:84:
         08:b8:0a:e7:db:31:17:93:e9:02:fd:e9:1e:f0:66:41:f7:e7:
         c1:a4:1a:ac:87:ec:32:a7:68:dd:4b:a8:69:f5:c6:a9:95:5f:
         08:23:a5:7c:c5:24:89:13:d2:86:e7:30:99:28:48:74:35:62:
         b5:ed:f0:64:ea:5f:87:1f:a8:ec:db:8e:ce:37:94:15:1b:c3:
         0d:a4:55:26:4c:89:da:92:74:bb:eb:c1:7b:80:c0:77:9b:37:
         20:1d:22:27:a7:a5:1c:46:7d:00:2f:55:21:6c:52:82:64:df:
         5a:6f:8a:75:83:55:6d:17:90:5f:b9:51:46:1f:64:5b:4f:ac:
         5f:0c:23:c6:86:83:ec:96:9c:50:26:03:b0:ef:2a:3e:67:6e:
         c5:cb:12:76:13:20:2b:a0:fb:e6:3c:b6:38:a4:c1:b3:36:9c:
         6f:89:d2:78:a5:29:d2:9a:06:e3:c2:a5:22:30:34:4a:25:18:
         1e:5b:50:00:c9:37:25:dc:a1:a8:c1:de:b0:99:b4:b4:82:45:
         bb:82:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:52:45 2025 by rpki-client