Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031373a3a2f34382d3438203d3e203631353034.roa
File:                     323030313a313363373a363031373a3a2f34382d3438203d3e203631353034.roa (raw, json)
Hash identifier:          luJSShAbBZKdIXIYK6HB/+Ogsi5bi83k3ZPklmAM/XM=
Subject key identifier:   1D:DC:75:3E:62:61:EE:E8:15:E9:D7:63:F1:96:0C:F7:33:81:5C:2E
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       3DDE4376FA21D78DF186C01D0F0CA9DC60986984
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031373a3a2f34382d3438203d3e203631353034.roa
Signing time:             Tue 04 Feb 2025 18:35:17 +0000
ROA not before:           Tue 04 Feb 2025 18:30:17 +0000
ROA not after:            Tue 03 Feb 2026 18:35:17 +0000
asID:                     61504
IP address blocks:        2001:13c7:6017::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:de:43:76:fa:21:d7:8d:f1:86:c0:1d:0f:0c:a9:dc:60:98:69:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:17 2025 GMT
            Not After : Feb  3 18:35:17 2026 GMT
        Subject: CN=1DDC753E6261EEE815E9D763F1960CF733815C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:b3:5f:5e:18:15:63:f4:d7:31:93:8e:d3:
                    39:f4:56:d1:b8:14:6d:25:da:b8:1f:ea:5b:e0:03:
                    47:11:d4:4e:35:a4:b4:a8:dd:e9:35:50:76:56:ac:
                    08:1a:99:7d:49:55:a8:6b:71:f4:c1:f8:3a:e1:d0:
                    15:5c:86:f8:f9:ad:61:5b:de:0e:a5:5b:8f:b7:eb:
                    f7:d4:51:9a:5d:2e:fa:ee:55:9e:d3:71:63:d0:da:
                    76:c4:0f:03:e6:e4:d3:46:cc:5f:f3:8a:48:15:3a:
                    87:60:a2:6b:f3:df:a1:93:a4:a4:59:8d:61:70:83:
                    6e:0f:2f:d3:5b:9f:5d:07:c6:e8:88:93:38:9e:fa:
                    52:80:39:9d:ba:16:42:85:54:f1:1f:52:fb:db:27:
                    f0:9c:8a:05:a2:bb:8e:f4:55:b5:e4:b9:e8:ae:dc:
                    dd:87:19:e6:56:47:89:35:e8:16:75:36:80:27:2b:
                    da:9c:14:e4:8b:36:03:d6:58:4c:15:1b:1c:a2:14:
                    60:9b:d1:d4:ff:eb:78:04:b5:fc:10:2f:1e:92:be:
                    53:97:1a:26:93:a2:c9:3c:5c:b5:4f:47:54:39:25:
                    e8:a4:df:b5:fd:75:33:c9:31:64:46:9d:86:8a:8b:
                    ed:c5:ba:73:9d:11:2a:97:2e:94:58:19:de:74:09:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DC:75:3E:62:61:EE:E8:15:E9:D7:63:F1:96:0C:F7:33:81:5C:2E
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031373a3a2f34382d3438203d3e203631353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6017::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:1a:19:41:a5:cf:3b:9c:d9:67:ce:e0:69:cc:ca:69:b5:72:
         ec:67:be:84:34:00:1a:1f:74:e9:de:ec:06:86:a0:1d:e7:2e:
         6c:65:d9:be:d8:93:17:42:f2:fd:70:7a:36:a8:b5:cf:d1:1f:
         eb:46:c3:1d:d1:67:48:d4:9e:dd:0b:8f:36:d3:1a:c8:26:ed:
         a5:5e:7a:9b:3b:40:75:fa:3d:53:fe:69:58:77:c6:e8:ed:0e:
         01:96:1f:7a:a8:bc:b9:87:88:96:f5:a8:0b:16:af:b6:08:53:
         d7:7e:81:90:e5:8b:fb:a2:5b:37:b2:5f:8f:cd:c3:24:5e:02:
         7a:94:54:4e:04:37:d4:06:6e:93:8c:4f:13:99:29:9e:6c:d7:
         d8:5b:36:66:95:9e:a9:60:1e:81:45:73:2c:0b:d3:69:0d:bd:
         72:f3:1f:e1:22:ad:d8:05:dd:45:ac:db:d3:14:a5:d2:65:45:
         b4:6c:82:f7:f6:8c:d7:17:34:24:3c:db:11:52:34:a8:ac:a8:
         2f:e6:3b:dc:8c:c0:50:95:bd:5d:b4:e7:b1:a1:74:31:90:37:
         68:62:b8:08:00:a0:ac:e8:7b:a6:a1:3e:09:4c:ed:46:79:85:
         90:64:1a:a7:c9:c2:48:60:7f:9c:6c:81:7d:1e:38:59:d3:d3:
         93:4b:92:d3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPd5Ddvoh143xhsAdDwyp3GCYaYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNTAyMDQxODMwMTdaFw0yNjAyMDMxODM1MTdaMDMxMTAvBgNV
BAMTKDFEREM3NTNFNjI2MUVFRTgxNUU5RDc2M0YxOTYwQ0Y3MzM4MTVDMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDD7NfXhgVY/TXMZOO0zn0VtG4
FG0l2rgf6lvgA0cR1E41pLSo3ek1UHZWrAgamX1JVahrcfTB+Drh0BVchvj5rWFb
3g6lW4+36/fUUZpdLvruVZ7TcWPQ2nbEDwPm5NNGzF/zikgVOodgomvz36GTpKRZ
jWFwg24PL9Nbn10HxuiIkzie+lKAOZ26FkKFVPEfUvvbJ/CcigWiu470VbXkueiu
3N2HGeZWR4k16BZ1NoAnK9qcFOSLNgPWWEwVGxyiFGCb0dT/63gEtfwQLx6SvlOX
GiaTosk8XLVPR1Q5Jeik37X9dTPJMWRGnYaKi+3FunOdESqXLpRYGd50CSLJAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUHdx1PmJh7ugV6ddj8ZYM9zOBXC4wHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzYz
MDMxMzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAIAETx2AXMA0GCSqGSIb3DQEBCwUAA4IBAQBuGhlBpc87nNlnzuBpzMpptXLs
Z76ENAAaH3Tp3uwGhqAd5y5sZdm+2JMXQvL9cHo2qLXP0R/rRsMd0WdI1J7dC482
0xrIJu2lXnqbO0B1+j1T/mlYd8bo7Q4Blh96qLy5h4iW9agLFq+2CFPXfoGQ5Yv7
ols3sl+PzcMkXgJ6lFROBDfUBm6TjE8TmSmebNfYWzZmlZ6pYB6BRXMsC9NpDb1y
8x/hIq3YBd1FrNvTFKXSZUW0bIL39ozXFzQkPNsRUjSorKgv5jvcjMBQlb1dtOex
oXQxkDdoYrgIAKCs6HumoT4JTO1GeYWQZBqnycJIYH+cbIF9HjhZ09OTS5LT
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:48 2025 by rpki-client