Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a3a2f33322d3438203d3e203131333430.roa
File:                     323030313a313331303a3a2f33322d3438203d3e203131333430.roa (raw, json)
Hash identifier:          J9ACT0TKVdlDoVYksipx1YW5rm+y1DfCEDpVDjLrA0Y=
Subject key identifier:   B9:C5:85:EA:A4:79:C6:0B:84:CF:3C:9C:BB:1C:BE:D3:02:59:88:F1
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       20EC0D9A5A8149DA8FBD1337D259B4EC8B33A457
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a3a2f33322d3438203d3e203131333430.roa
Signing time:             Tue 04 Feb 2025 18:09:50 +0000
ROA not before:           Tue 04 Feb 2025 18:04:50 +0000
ROA not after:            Tue 03 Feb 2026 18:09:50 +0000
asID:                     11340
IP address blocks:        2001:1310::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ec:0d:9a:5a:81:49:da:8f:bd:13:37:d2:59:b4:ec:8b:33:a4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Feb  4 18:04:50 2025 GMT
            Not After : Feb  3 18:09:50 2026 GMT
        Subject: CN=B9C585EAA479C60B84CF3C9CBB1CBED3025988F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:10:75:76:2e:f6:cb:e8:61:87:4d:cd:1b:
                    29:b2:2e:36:be:38:93:81:68:6d:9d:89:a3:06:05:
                    85:63:74:32:49:c7:a8:53:84:f4:9c:bd:0f:15:e5:
                    96:53:d4:44:5c:87:97:4c:4f:19:b3:6f:bb:aa:79:
                    b1:46:f2:e6:41:6e:62:52:57:34:86:da:08:03:94:
                    ab:e0:ef:68:f5:c9:d0:ac:3d:ee:3f:51:52:d5:8e:
                    89:fd:77:d6:68:8f:4a:19:bc:5b:3b:d2:fa:f3:a5:
                    c9:76:5e:b9:7e:6b:7d:4a:b3:38:1a:53:1c:28:fe:
                    25:91:da:fe:83:20:6a:de:cc:a8:49:9a:35:e6:cf:
                    a8:87:55:bf:60:6e:fe:aa:3e:b0:14:b1:37:68:94:
                    5a:69:2d:91:a2:cb:55:b3:a2:26:41:ac:54:ae:21:
                    44:7f:c9:20:1c:2c:c0:37:64:9f:31:af:bd:56:68:
                    a2:4d:c0:6d:69:a1:3a:c8:0b:f4:91:a7:9d:30:ad:
                    81:0b:c6:2d:89:ac:49:58:4b:d4:c1:07:7e:57:8f:
                    5a:3f:2f:5b:9a:c0:04:ef:dd:7d:4c:72:b8:1d:21:
                    c6:8d:a5:a0:c8:bf:0b:d0:61:2d:88:96:07:56:71:
                    d7:aa:2f:d2:42:56:49:47:a0:cc:d4:82:73:36:45:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C5:85:EA:A4:79:C6:0B:84:CF:3C:9C:BB:1C:BE:D3:02:59:88:F1
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/323030313a313331303a3a2f33322d3438203d3e203131333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1310::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:b5:4f:48:92:70:46:81:98:f3:d9:d1:e2:4e:0f:41:5b:
         2f:df:4b:7f:ed:3a:2e:7c:c6:bd:86:e7:40:4d:57:bd:19:c6:
         e8:7a:b4:52:66:f3:bb:ce:e3:50:be:b5:62:5b:b9:db:b5:f7:
         1a:13:aa:7f:68:4c:b6:03:df:81:de:ca:be:4f:8d:0f:d1:6a:
         1b:3c:bf:a4:2c:35:71:47:0f:38:2f:23:0e:35:78:ed:c9:eb:
         a0:03:ea:9a:34:b5:21:a3:45:96:30:ad:0a:a1:35:7d:df:62:
         75:65:b4:b4:b4:be:50:6e:ae:63:a6:7f:15:1e:0b:88:e8:ab:
         f7:71:fa:35:3b:e0:4d:33:76:09:bd:71:89:16:2d:0f:ae:3b:
         42:2e:db:70:f7:ff:de:6b:9f:fc:82:62:16:2b:a6:36:2e:98:
         89:83:fb:50:23:ed:09:fb:44:47:50:31:fe:96:8e:39:df:22:
         cd:07:5b:60:ab:2b:27:e2:c8:04:b6:37:e8:53:68:99:34:89:
         a0:c7:97:58:7e:aa:a1:0c:af:f6:62:d7:76:f1:b6:cb:8c:86:
         a8:4f:0a:a4:c5:60:48:43:1f:c7:80:ef:31:f6:94:d2:e2:65:
         72:46:07:8f:62:b4:6a:92:0a:78:21:4a:0e:fd:ae:3a:2e:81:
         44:a0:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:53 2025 by rpki-client