Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031633a3a2f34382d3438203d3e203631353231.roa
File:                     323030313a313363373a363031633a3a2f34382d3438203d3e203631353231.roa (raw, json)
Hash identifier:          wjstHIWxOzQZ+KhELN7avRYq+TNR4DbgIbkb/HATukw=
Subject key identifier:   7D:6C:3B:03:24:16:85:E2:3A:44:B4:A2:ED:22:88:05:A0:BE:A7:AA
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       1119BC6876AE8E053577FFFA590197DE48846CD8
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031633a3a2f34382d3438203d3e203631353231.roa
Signing time:             Tue 04 Feb 2025 18:35:13 +0000
ROA not before:           Tue 04 Feb 2025 18:30:13 +0000
ROA not after:            Tue 03 Feb 2026 18:35:13 +0000
asID:                     61521
IP address blocks:        2001:13c7:601c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:19:bc:68:76:ae:8e:05:35:77:ff:fa:59:01:97:de:48:84:6c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:13 2025 GMT
            Not After : Feb  3 18:35:13 2026 GMT
        Subject: CN=7D6C3B03241685E23A44B4A2ED228805A0BEA7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:86:8e:fe:f2:a3:d1:01:4d:87:05:11:65:
                    22:44:98:c9:58:2a:31:47:57:11:fe:1c:2f:74:3f:
                    65:98:45:0f:ee:66:a0:b4:9b:ee:c5:f0:62:47:c0:
                    eb:b9:e7:96:d6:a3:21:79:9d:17:6c:f0:56:58:f1:
                    21:66:eb:f1:15:6e:07:83:f4:e0:a8:b6:54:a0:94:
                    e5:0e:87:2f:15:62:e1:9a:50:46:e0:56:8b:b3:da:
                    59:b9:1f:ee:03:72:18:2b:8d:cd:95:04:85:12:c3:
                    1b:bc:bd:7b:31:c2:66:15:fe:c2:52:b5:90:c0:ea:
                    d2:83:89:6a:3f:9f:72:ff:9e:65:12:59:9c:70:8c:
                    af:38:6e:81:ee:e3:4d:fa:93:ed:60:75:4c:63:4e:
                    0c:72:11:4b:70:f7:fd:c1:5c:18:4f:df:92:a4:e3:
                    bb:ae:f8:c6:a7:6f:6a:2a:e4:3c:4f:25:2b:dd:01:
                    3f:3a:99:a0:b0:f0:a0:9d:77:71:f0:c0:a8:53:31:
                    37:0b:db:f4:52:58:83:4b:08:88:01:66:8c:b8:6a:
                    3c:34:9d:1c:15:11:20:d1:97:cd:20:30:79:7a:d4:
                    5d:90:8e:eb:ae:71:86:94:21:f9:73:51:2e:f6:aa:
                    78:af:88:2d:df:54:a8:2c:14:65:5d:33:f4:6f:91:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6C:3B:03:24:16:85:E2:3A:44:B4:A2:ED:22:88:05:A0:BE:A7:AA
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031633a3a2f34382d3438203d3e203631353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:601c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:cf:61:f6:25:a0:3d:0e:4c:24:cd:57:a9:09:3a:c1:fe:15:
         6f:9e:68:a1:c2:1c:59:b8:bb:62:c8:55:0c:56:3d:2f:fb:c9:
         7f:b9:16:63:a3:34:e0:55:29:63:94:ef:8e:62:fd:0e:14:05:
         46:79:6b:ca:fc:07:16:33:fa:3e:10:ab:72:a7:16:51:e1:cb:
         63:d4:4f:52:c4:62:41:57:a1:ab:e4:86:dc:0e:55:11:67:34:
         f4:27:69:88:f6:4e:d3:cb:1b:8a:ab:f8:5d:a0:84:16:28:7a:
         b6:e5:fa:73:3f:d0:f5:c6:4a:0a:e1:fd:13:02:e9:9c:7e:d0:
         c3:52:6a:31:89:9b:c9:3d:ba:51:22:9d:ef:a8:b8:24:ec:4f:
         1d:3d:d7:01:04:34:9d:f7:82:fe:30:05:a4:44:81:37:09:49:
         b0:46:27:7e:fe:26:14:9d:b7:42:95:80:73:7c:ca:61:86:ca:
         1f:f9:d2:55:3e:64:05:96:a5:53:d5:69:e5:0e:c5:28:34:84:
         a7:65:0e:f2:8b:b4:9d:01:e9:38:31:16:84:48:95:18:b1:00:
         8d:ac:cf:66:ed:d4:92:fe:8b:c1:9b:10:8e:84:c5:95:97:90:
         4f:c6:32:9d:2c:06:f1:50:f2:12:e2:87:6a:47:f0:cd:59:48:
         5a:84:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:33 2025 by rpki-client