Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030643a3a2f34382d3438203d3e203532333539.roa
File:                     323030313a313363373a363030643a3a2f34382d3438203d3e203532333539.roa (raw, json)
Hash identifier:          PJ26VU5piN5ekceIlyJeFiBpgQXu2LAeWRwl4cxLauk=
Subject key identifier:   01:DE:59:CB:88:73:79:C5:31:2D:F7:12:39:03:DD:02:C3:C9:EE:9C
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       55D10AA55F8670C1F1C5DD3313DFE17B09304D11
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030643a3a2f34382d3438203d3e203532333539.roa
Signing time:             Tue 04 Feb 2025 18:35:05 +0000
ROA not before:           Tue 04 Feb 2025 18:30:05 +0000
ROA not after:            Tue 03 Feb 2026 18:35:05 +0000
asID:                     52359
IP address blocks:        2001:13c7:600d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d1:0a:a5:5f:86:70:c1:f1:c5:dd:33:13:df:e1:7b:09:30:4d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:05 2025 GMT
            Not After : Feb  3 18:35:05 2026 GMT
        Subject: CN=01DE59CB887379C5312DF7123903DD02C3C9EE9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:54:26:f2:c6:70:94:c5:8d:41:6d:16:f4:f4:
                    57:bb:73:50:53:59:d2:b2:65:12:8b:6e:f9:4f:9f:
                    21:88:80:c7:93:09:33:8b:24:08:b8:e4:05:c6:22:
                    e2:07:71:e3:b8:c6:5d:16:ac:c5:e3:15:57:1e:20:
                    0d:0b:fa:c9:e3:1e:3e:91:88:2e:44:5b:88:9d:75:
                    21:78:61:97:9a:7d:a8:06:1e:e2:d9:4e:dc:07:4c:
                    4d:2d:46:dc:31:78:42:10:ba:ae:48:4f:37:cb:d8:
                    d3:c8:a4:e5:74:5c:6d:f5:41:4b:12:3b:b0:88:37:
                    9c:51:3d:f0:98:b1:5f:6f:42:1e:92:cb:d7:7b:9f:
                    50:30:c4:81:7c:85:81:40:d7:36:6a:a1:d4:37:e3:
                    23:72:2f:97:23:5e:e0:c7:75:ea:55:71:dd:9c:9c:
                    70:39:8a:71:62:31:4a:a9:eb:d8:1b:1e:f1:09:fd:
                    29:4c:07:d3:48:02:f4:14:c5:29:78:66:16:cf:48:
                    8b:a0:f6:8c:b1:83:27:36:3a:a8:bc:79:48:1d:e2:
                    2a:cf:08:b2:e1:72:52:32:53:dc:70:2c:68:7f:d9:
                    df:8f:b7:a1:5e:a2:04:93:42:52:74:29:35:53:40:
                    61:9a:42:25:50:e0:b9:b1:ea:3b:1d:3c:4f:32:28:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DE:59:CB:88:73:79:C5:31:2D:F7:12:39:03:DD:02:C3:C9:EE:9C
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030643a3a2f34382d3438203d3e203532333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:600d::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:ee:6b:4f:4e:ff:9c:6d:6b:c9:a2:df:01:e4:3a:f5:50:
         e2:4f:08:b8:3b:5f:d1:2b:93:92:aa:b3:c2:32:4a:e7:9b:54:
         ee:0e:5d:9f:3c:b9:e5:3e:84:63:32:99:a0:6b:9c:ac:ac:5a:
         5f:30:71:55:96:35:3a:37:45:6e:f3:8c:1d:44:b2:4c:c2:65:
         92:af:3d:c7:4a:f3:a6:f2:c7:5e:20:80:33:5f:d8:a4:a1:60:
         b0:45:42:af:63:c5:5b:fe:db:71:a4:ee:dc:41:cc:b5:8f:b1:
         db:4b:44:d4:aa:2c:4c:5b:76:72:8f:8b:d2:41:5e:54:28:ad:
         2f:0f:a3:0b:4f:2b:72:29:5a:57:5b:7c:b8:60:56:3a:7b:30:
         b5:b4:8d:17:f2:ba:af:af:03:85:e1:22:f7:37:86:fe:7f:21:
         c6:28:3c:7f:77:9b:26:04:2e:2d:0e:27:1a:f0:bb:a2:b6:bc:
         fa:f4:4b:3c:04:f4:ad:db:8a:bc:58:5e:ca:2a:2b:93:72:f7:
         a0:c4:b1:8e:c7:3a:12:26:a0:30:80:8f:50:91:2f:99:9d:a9:
         7f:f2:ec:fb:f2:ac:73:ee:97:ea:e8:af:f8:c1:a3:e2:78:52:
         6a:89:f2:87:bf:0e:9f:aa:4f:d7:3d:1b:6a:7f:52:be:85:9c:
         a9:c9:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:35 2025 by rpki-client