Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a363030363a3a2f34382d3438203d3e203532343832.roa
File:                     323030313a313363373a363030363a3a2f34382d3438203d3e203532343832.roa (raw, json)
Hash identifier:          maziZTgGL7xa+tTF728xmL+5VOkDdkWBDe0Lze2rtzs=
Subject key identifier:   1E:F0:FE:6C:92:4D:71:C8:7C:D8:62:FC:82:07:81:8A:B4:9F:98:40
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       026206623D809E70EA83D959D24F060E0F8000E6
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a363030363a3a2f34382d3438203d3e203532343832.roa
Signing time:             Tue 04 Feb 2025 20:08:52 +0000
ROA not before:           Tue 04 Feb 2025 20:03:52 +0000
ROA not after:            Tue 03 Feb 2026 20:08:52 +0000
asID:                     52482
IP address blocks:        2001:13c7:6006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:62:06:62:3d:80:9e:70:ea:83:d9:59:d2:4f:06:0e:0f:80:00:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Feb  4 20:03:52 2025 GMT
            Not After : Feb  3 20:08:52 2026 GMT
        Subject: CN=1EF0FE6C924D71C87CD862FC8207818AB49F9840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:95:9c:ed:e3:27:00:2a:b5:46:43:65:d8:
                    b1:79:f9:bf:b5:5f:73:51:3e:6b:d8:f4:59:e3:f5:
                    b1:01:bd:6b:32:50:f6:f8:44:82:bf:51:9a:e3:f6:
                    c4:b2:dc:f3:d8:f2:83:b2:b9:c4:2a:df:3a:cf:c8:
                    39:a3:7b:c0:84:fb:3b:ec:13:b8:c3:a0:85:0c:64:
                    cb:28:b3:06:dd:e5:2d:31:7f:68:16:7d:bf:2e:6d:
                    23:37:36:36:93:5e:24:d5:ba:ea:94:6a:61:31:65:
                    f7:07:c0:7b:4a:e1:9f:7f:f8:40:a8:62:6f:af:54:
                    08:34:49:92:00:6f:de:b7:fc:cb:bd:02:44:de:63:
                    b0:bd:a3:26:b6:93:7b:34:08:21:15:89:0d:4f:21:
                    f2:35:5a:8b:bb:81:5d:1d:14:e4:d1:9d:f0:bd:5e:
                    dd:83:0b:27:6a:d9:33:35:3f:80:30:a2:65:49:86:
                    07:ff:f3:1d:2c:be:51:8a:d8:56:5b:3c:9d:db:5b:
                    5a:80:99:be:0a:9a:8c:db:d2:54:02:ca:2e:cd:a0:
                    9c:6d:b5:50:04:db:69:78:62:dd:e4:11:bd:c5:a3:
                    f1:9c:4d:16:db:c5:f2:bb:b2:db:40:10:7c:dd:79:
                    99:ed:c7:08:f9:e9:9c:7b:da:6f:79:51:4c:90:53:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F0:FE:6C:92:4D:71:C8:7C:D8:62:FC:82:07:81:8A:B4:9F:98:40
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a363030363a3a2f34382d3438203d3e203532343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:6b:b7:ea:ac:06:50:b9:d3:f4:41:53:49:35:01:c0:3b:
         5e:61:ba:ff:5a:9c:3c:e8:d6:d2:71:48:f7:a6:2c:e3:2b:b3:
         40:a9:ef:25:4e:7e:bf:78:aa:f7:0f:65:79:d0:99:76:6d:e7:
         00:2d:d5:90:26:35:cc:8c:e9:02:5c:e0:fd:56:fc:ed:52:d4:
         13:45:90:6f:27:17:50:62:a9:04:57:4c:1c:1e:26:64:18:0c:
         71:d7:5d:8f:c5:c3:be:ec:dc:d7:ca:ae:8c:38:f4:00:99:48:
         f6:ac:24:f6:76:77:70:cf:f5:eb:c7:12:a7:bc:de:a0:cb:16:
         75:ab:84:f3:17:10:61:ce:97:7b:7a:e4:05:60:92:01:94:76:
         1c:99:3f:87:ab:c8:c8:af:74:28:e8:a3:ff:e2:b1:1a:95:6c:
         33:6d:f9:7f:a3:e8:54:45:7b:07:91:c0:6d:1a:b2:8e:60:a3:
         7c:97:96:e7:8c:7f:44:90:7c:c9:b9:96:03:2a:3e:dc:9f:6a:
         cb:3c:51:1b:f1:aa:6f:51:c1:ca:77:4e:62:3e:5b:f5:a6:52:
         0b:4e:bd:0b:dd:d0:00:ae:64:4f:48:31:ad:ad:58:b8:d2:0c:
         2a:4c:53:f8:dd:71:14:e6:57:13:38:0b:59:2b:f7:2d:73:f4:
         18:cd:96:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:57:59 2025 by rpki-client