Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031323a3a2f34382d3438203d3e203532343033.roa
File:                     323030313a313363373a363031323a3a2f34382d3438203d3e203532343033.roa (raw, json)
Hash identifier:          e7Xna26SWB4w+7QM5MpwMgfkuYs5LXZmmXACZ9kME8M=
Subject key identifier:   C0:6D:59:77:83:82:31:E5:5D:02:C8:65:6E:D8:55:B8:CD:BE:D2:D2
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       1887104E4056B63ADAC7CD5519F7D2D9BE3FC795
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031323a3a2f34382d3438203d3e203532343033.roa
Signing time:             Tue 04 Feb 2025 18:35:08 +0000
ROA not before:           Tue 04 Feb 2025 18:30:08 +0000
ROA not after:            Tue 03 Feb 2026 18:35:08 +0000
asID:                     52403
IP address blocks:        2001:13c7:6012::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:87:10:4e:40:56:b6:3a:da:c7:cd:55:19:f7:d2:d9:be:3f:c7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:08 2025 GMT
            Not After : Feb  3 18:35:08 2026 GMT
        Subject: CN=C06D5977838231E55D02C8656ED855B8CDBED2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:4e:f4:a6:f5:37:84:69:3f:a6:50:2d:4d:
                    38:3e:cb:91:cc:bb:8e:9b:89:e7:d5:91:b3:0e:47:
                    94:18:80:04:e6:27:10:88:b5:53:76:0d:1e:ab:fd:
                    8e:90:f6:8e:9b:21:ca:d7:d7:3a:a6:75:04:00:ca:
                    97:96:1b:ba:18:74:89:cb:ba:c6:6d:49:21:83:c9:
                    bf:5a:b5:13:c9:e4:68:14:39:af:f2:f9:1c:73:b2:
                    be:c1:b2:47:fa:ce:88:14:8a:8f:0a:b1:69:a9:de:
                    9e:ce:7b:71:d8:0a:bc:bb:e0:95:85:5a:6f:b4:ca:
                    5a:f2:b7:a3:b2:6a:f5:76:38:27:d7:dd:e2:38:87:
                    a8:43:36:1e:4e:d4:43:5e:87:5c:8a:ce:5e:5a:ae:
                    7f:f3:38:24:b2:28:49:eb:92:c1:8d:9f:7e:0a:73:
                    27:2a:a2:2b:fb:80:c2:12:94:84:f0:f5:eb:a2:42:
                    65:3e:34:c8:d3:61:a6:fb:ed:bb:34:4a:cd:89:a9:
                    5b:eb:5c:e8:26:df:51:96:9f:20:f7:e2:67:22:a5:
                    27:12:9d:4f:e8:7e:fb:73:84:32:db:1a:3c:56:94:
                    fe:38:3e:f1:8c:42:0e:47:b7:cd:cb:6b:17:38:bc:
                    0a:9d:8b:70:a9:d0:b6:26:be:73:08:c4:36:e5:e1:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6D:59:77:83:82:31:E5:5D:02:C8:65:6E:D8:55:B8:CD:BE:D2:D2
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031323a3a2f34382d3438203d3e203532343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6012::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:93:35:e7:8c:d4:b1:58:05:88:20:40:28:9b:f9:10:c6:e4:
         5f:81:e6:fc:bb:c9:f0:17:79:1b:30:9f:6c:e9:b6:e4:e2:fa:
         7e:40:54:8d:87:cc:c8:dc:d1:d4:4e:41:52:6f:46:66:62:15:
         c3:64:7e:9d:1a:8d:f2:cc:95:74:9d:01:e0:91:95:a8:29:d2:
         59:ba:49:da:5a:26:49:95:fd:7a:0d:7b:79:fe:30:cb:00:2c:
         73:b3:b1:4c:a6:43:cf:d3:8e:7e:be:2a:f8:f2:f6:4a:4e:c9:
         7a:99:74:0c:f7:d7:7a:0c:bd:bd:d9:db:a5:fb:3e:15:5a:c6:
         98:fc:1d:47:fe:99:1d:c2:3d:87:c0:ec:bd:01:da:ff:2a:43:
         69:f4:b7:24:a3:f5:df:0c:15:07:bb:ad:7b:f5:ee:5d:6d:c8:
         ad:94:d5:60:e2:7d:8a:a8:61:81:59:73:ff:4a:ac:3e:a0:f4:
         b4:e0:df:73:9f:ff:a0:e7:f4:da:2e:93:b3:60:71:64:cb:b3:
         07:fd:82:42:dd:2e:59:d9:ec:1c:16:4d:a6:fb:52:f1:b5:57:
         b3:63:eb:ce:0c:09:57:eb:b0:79:d5:21:58:e7:d4:3e:7c:0f:
         0d:8c:d5:81:3c:d2:ea:98:9b:fb:3e:1f:f5:11:cf:c2:4f:96:
         1c:69:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:47 2025 by rpki-client