Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa
File:                     323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa (raw, json)
Hash identifier:          KLC5fBy1HGpYqdbcKBcYvO5wNybYBy+4p/kze6rOysY=
Subject key identifier:   C8:B5:4D:4D:E9:5F:C1:A9:4F:70:E1:79:51:8A:ED:43:64:61:D5:CF
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       2A9A85782FEE1C2F8CBFEC8439FC34E7640273AF
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa
Signing time:             Tue 04 Feb 2025 18:35:15 +0000
ROA not before:           Tue 04 Feb 2025 18:30:15 +0000
ROA not after:            Tue 03 Feb 2026 18:35:15 +0000
asID:                     52509
IP address blocks:        2001:13c7:601a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9a:85:78:2f:ee:1c:2f:8c:bf:ec:84:39:fc:34:e7:64:02:73:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:15 2025 GMT
            Not After : Feb  3 18:35:15 2026 GMT
        Subject: CN=C8B54D4DE95FC1A94F70E179518AED436461D5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:cf:eb:85:75:f7:3c:a1:61:89:6c:ee:fe:
                    b0:36:06:9b:3f:65:60:9b:b0:2c:68:43:dd:c1:0c:
                    14:b1:91:c3:31:64:d2:5b:67:32:3b:a5:ac:4d:df:
                    07:3e:6c:03:6a:f3:b4:c3:4c:99:0d:ab:04:d4:be:
                    67:02:80:16:64:2c:c7:3b:b5:11:bf:1c:5b:e2:56:
                    d4:df:09:ed:bb:dc:39:7f:bf:eb:a2:4f:c2:6b:5e:
                    f8:3f:dc:6f:40:c2:ba:96:78:f1:82:eb:05:91:31:
                    23:10:7f:35:e5:ed:9f:3e:fa:74:39:1f:a0:55:d1:
                    8b:1f:58:a2:12:86:0a:6a:e2:de:71:d7:6b:52:8b:
                    1f:79:c9:eb:65:13:5f:d1:52:ef:11:81:82:fe:b6:
                    3a:ad:99:f4:35:24:a9:03:2a:ac:5d:6d:48:6f:e2:
                    dd:72:cc:17:5d:38:3a:92:70:19:08:12:96:87:7d:
                    70:84:38:1c:e3:cc:57:24:09:70:af:f4:48:0a:f0:
                    d9:a7:de:21:2b:0d:ed:c5:29:0d:f4:8e:84:71:c0:
                    99:ea:37:ca:2d:f3:f4:b3:3c:71:8c:7c:b1:9a:02:
                    55:f2:30:37:41:3e:8f:38:84:e0:c2:ee:bf:63:61:
                    1f:7b:f0:c7:23:63:6c:01:98:cf:cd:a5:f4:60:f2:
                    db:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B5:4D:4D:E9:5F:C1:A9:4F:70:E1:79:51:8A:ED:43:64:61:D5:CF
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031613a3a2f34382d3438203d3e203532353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:601a::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:27:29:a3:0d:b1:8d:0b:44:0b:a9:1b:85:9e:9b:9e:36:c6:
         82:82:6b:d6:56:b3:18:fe:8a:b5:d7:3f:d2:bf:3e:4e:b8:e8:
         11:f5:54:31:c2:94:42:86:f2:57:8f:19:67:c1:a8:25:a6:42:
         e7:61:5f:26:13:1c:cc:d7:90:ae:fe:7e:3e:25:c4:d8:b2:d7:
         9a:7d:3c:a9:94:c3:e6:53:de:fb:a9:bc:8e:db:78:8e:c9:00:
         8b:d1:32:9c:6c:11:d7:c5:bc:aa:86:a0:e7:81:56:03:c2:c8:
         5d:a5:a8:78:eb:cb:be:13:8a:ca:f2:9a:8e:37:46:f0:d3:4c:
         43:29:0c:35:46:1d:0d:f5:0a:f6:f0:7d:eb:45:74:94:b0:b0:
         e5:b9:70:38:84:0a:f3:86:23:5f:c6:5d:bc:70:04:d3:84:ff:
         23:e4:bc:2d:f4:77:53:06:fa:a8:99:f8:93:65:03:69:98:e7:
         4e:f4:c5:2a:36:bd:c4:0e:0b:02:32:f7:73:7e:ad:75:77:89:
         70:25:d3:2d:f3:4e:97:de:e6:32:c6:ce:26:c9:d8:fe:63:09:
         2d:e0:39:d7:48:bf:f0:b7:1a:82:b9:99:c6:1c:59:4c:98:00:
         f1:a6:cf:7c:9a:70:75:b7:b8:a8:7d:5f:79:84:3f:d4:32:73:
         d9:89:2e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:48 2025 by rpki-client