Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a373137313a3a2f34382d3438203d3e203230313931.roa
File:                     323030313a313331303a373137313a3a2f34382d3438203d3e203230313931.roa (raw, json)
Hash identifier:          hafqLIhrjMyCo2u83oU7vfaO4QSx4QiwsewQkmBpq1s=
Subject key identifier:   D9:44:41:67:E1:22:50:F6:DC:DF:FC:A5:D0:98:C1:1A:3E:8F:F5:9C
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       5A59C562BA7280F69FFFB77A87B1CC95C4859816
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a373137313a3a2f34382d3438203d3e203230313931.roa
Signing time:             Tue 04 Feb 2025 18:09:50 +0000
ROA not before:           Tue 04 Feb 2025 18:04:50 +0000
ROA not after:            Tue 03 Feb 2026 18:09:50 +0000
asID:                     20191
IP address blocks:        2001:1310:7171::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:59:c5:62:ba:72:80:f6:9f:ff:b7:7a:87:b1:cc:95:c4:85:98:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Feb  4 18:04:50 2025 GMT
            Not After : Feb  3 18:09:50 2026 GMT
        Subject: CN=D9444167E12250F6DCDFFCA5D098C11A3E8FF59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:28:fb:19:00:81:ac:25:f0:72:1d:a2:1d:
                    f8:77:93:b8:1e:6c:80:7c:19:ee:49:2f:cb:11:79:
                    94:c7:43:57:a9:d0:0c:36:be:51:2d:63:2b:5f:9c:
                    1f:6d:1c:68:c1:a8:ae:26:e3:ec:00:7b:02:28:9b:
                    17:e5:0d:03:a4:1c:34:77:80:b9:db:6a:31:b2:8f:
                    42:fc:ff:da:8d:cf:36:40:8b:97:0d:c0:33:56:10:
                    46:b3:fd:4b:57:01:99:f8:3e:98:bb:7a:d5:84:59:
                    6a:ef:57:43:b7:1a:6a:da:76:e7:0f:1f:89:1f:fb:
                    bc:fd:52:94:13:71:2f:6f:aa:9a:9d:5e:8c:cf:e7:
                    f7:46:29:27:52:af:8d:53:b8:59:a6:63:75:04:0e:
                    8b:f6:bf:b8:68:6b:c5:8c:86:2a:b8:53:74:55:d0:
                    86:ef:a1:f7:fe:7e:28:b6:bb:e7:f9:24:f8:c6:e6:
                    42:8e:90:18:2d:44:d2:65:e3:82:2b:74:0e:a9:5c:
                    05:22:5a:cf:eb:35:0d:48:eb:c6:23:e1:af:35:4a:
                    dc:3a:bf:7c:70:88:01:30:bb:d0:a1:6b:de:d0:97:
                    c1:73:44:00:2a:df:a1:2b:57:0b:4e:24:4b:1f:8f:
                    5c:ca:d3:0d:05:d7:fb:c1:40:ba:05:85:c4:00:eb:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:44:41:67:E1:22:50:F6:DC:DF:FC:A5:D0:98:C1:1A:3E:8F:F5:9C
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a373137313a3a2f34382d3438203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1310:7171::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:45:90:47:7c:1f:1e:d7:21:32:cc:67:e3:07:98:62:a1:8e:
         8e:30:e5:7f:9b:e7:fd:79:88:87:68:7f:3f:b9:3b:18:5c:38:
         b9:ab:e3:6b:c9:71:17:b4:9f:c6:9d:70:d8:de:40:38:fb:5e:
         db:97:14:ec:e3:ef:d4:39:1c:e8:2f:7c:b8:47:a6:8c:1e:28:
         97:ab:3c:8e:9e:04:8f:1b:4a:e7:fe:3f:2a:3d:77:d7:ab:aa:
         31:3f:43:c2:ea:fe:f7:5e:21:cc:82:51:16:75:31:d9:5b:a3:
         59:df:84:0c:f4:5f:19:91:ee:d9:26:fa:2e:22:8f:6a:e2:97:
         74:e8:de:a6:de:44:d9:b4:8b:97:d0:cd:e5:bc:e3:15:43:fc:
         25:22:94:f8:97:bd:4b:13:d8:0f:6d:c9:c5:1a:61:a5:38:d9:
         35:14:b4:d3:5e:e1:b7:45:22:9d:4e:00:1f:cd:48:11:c5:15:
         f1:99:7e:8b:a0:5b:48:01:ff:8d:b7:b9:ae:b5:19:71:a8:5b:
         38:1b:c2:7b:64:04:6c:ed:0a:1d:fd:d0:c1:e0:72:4d:c0:e6:
         72:92:04:5b:9a:99:04:b6:e8:79:8a:43:16:4a:b3:46:91:c0:
         15:ff:e9:0a:fc:8b:b2:83:8e:3c:3b:24:cb:4d:55:28:b1:99:
         9d:1b:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:41:33 2025 by rpki-client