Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a333132313a3a2f34382d3438203d3e203236363130.roa
File:                     323030313a313331303a333132313a3a2f34382d3438203d3e203236363130.roa (raw, json)
Hash identifier:          J9FhB2vn/2O4sU5rtBSV3Xh6+ea+nl0a+kRNrllmtYU=
Subject key identifier:   79:AA:4C:C8:C4:E7:08:18:32:E7:4B:B3:91:7A:D7:98:DD:49:9D:85
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       43F88DAE9B3D7183C2CE0EE0CB216D9B27C2DBF7
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a333132313a3a2f34382d3438203d3e203236363130.roa
Signing time:             Tue 04 Feb 2025 18:09:48 +0000
ROA not before:           Tue 04 Feb 2025 18:04:48 +0000
ROA not after:            Tue 03 Feb 2026 18:09:48 +0000
asID:                     26610
IP address blocks:        2001:1310:3121::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:8d:ae:9b:3d:71:83:c2:ce:0e:e0:cb:21:6d:9b:27:c2:db:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Feb  4 18:04:48 2025 GMT
            Not After : Feb  3 18:09:48 2026 GMT
        Subject: CN=79AA4CC8C4E7081832E74BB3917AD798DD499D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:61:a7:05:7e:7e:3c:49:73:28:cb:d6:fa:
                    07:c1:1c:ed:43:d2:3f:fc:d5:e2:23:97:55:72:6c:
                    19:af:45:40:52:85:80:24:dd:c0:e5:c9:ea:e7:6a:
                    1b:c2:4a:e9:08:09:9b:c5:03:28:eb:78:f3:7d:8f:
                    17:4b:9d:85:5c:35:8d:17:c9:e5:af:a3:56:44:d4:
                    1b:af:92:70:e8:3d:68:65:2f:f8:87:cd:10:7a:d1:
                    d7:73:c9:62:e7:d8:60:b9:98:62:38:3c:31:32:6e:
                    42:bd:8d:e7:7a:0e:82:34:51:70:93:d5:a0:c6:47:
                    39:8f:0b:7a:cf:d9:b7:e1:f2:4c:36:1e:79:c2:91:
                    85:d1:c9:81:ac:ba:15:3d:21:b1:b1:0c:22:0c:16:
                    f3:0f:02:1e:7c:98:f2:d1:62:20:43:1c:5e:22:5e:
                    62:6a:f0:27:50:03:f9:d2:8e:fb:c9:d1:30:2f:6f:
                    2c:64:fc:1d:31:78:bf:58:8f:e1:97:7f:0c:f9:cf:
                    b3:bb:02:3b:b4:bf:79:60:9d:a1:89:2a:ba:a6:f7:
                    d5:d7:6e:8d:25:e5:9d:22:7b:d1:88:32:d5:a8:ec:
                    59:15:bc:2b:36:ea:1a:88:9c:b0:23:10:36:bd:2e:
                    32:79:e8:eb:19:1d:2e:ff:2b:39:6f:2d:6c:53:af:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AA:4C:C8:C4:E7:08:18:32:E7:4B:B3:91:7A:D7:98:DD:49:9D:85
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a333132313a3a2f34382d3438203d3e203236363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1310:3121::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:58:e7:79:96:a8:71:3e:b0:e7:56:3f:c8:0a:28:7b:3b:2a:
         86:18:30:fc:27:58:22:33:1a:9a:7b:24:13:96:e4:4c:e6:56:
         ab:ef:38:9c:ff:18:c8:ce:2e:c0:eb:5f:06:98:10:5f:7f:ca:
         b9:fa:de:da:c3:5a:73:e6:67:8b:62:5d:35:7e:54:b9:98:9c:
         d4:14:07:70:67:b1:61:4d:1f:75:ab:df:59:56:95:60:9b:b1:
         3f:c0:4f:34:eb:13:20:d4:37:3d:52:bc:7f:bf:13:d3:7c:f8:
         9b:fd:de:71:67:91:22:f1:a5:5d:1b:2b:2a:e8:94:7e:4c:94:
         0d:29:63:da:ab:4c:5d:40:74:48:ec:57:39:8e:07:35:af:c8:
         4f:c6:50:a7:a3:da:f9:49:db:d1:e9:32:dd:4a:15:f9:15:b6:
         12:0f:fc:e1:f2:c8:47:55:2b:89:0c:ed:d3:5d:c7:f7:1b:4e:
         39:4a:11:41:9c:2a:d4:df:99:b3:34:45:9a:72:9b:7e:57:6e:
         c3:f9:aa:96:1a:36:5d:7f:fd:3b:3f:7d:43:c8:31:28:30:80:
         61:c0:a7:24:59:e0:79:a5:a3:6b:c9:a5:b1:1f:fd:64:78:89:
         a7:c5:52:eb:93:d7:35:f6:b0:ff:4a:04:01:f3:b0:cd:9f:9f:
         51:8e:02:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:37:14 2025 by rpki-client