Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/323030313a313363373a373030363a3a2f34382d3438203d3e203330313333.roa
File:                     323030313a313363373a373030363a3a2f34382d3438203d3e203330313333.roa (raw, json)
Hash identifier:          nrCwWZUJaL3rxgwe84UpYUh6579s4awUdwdpnggeoTU=
Subject key identifier:   C0:88:0B:94:95:E5:D6:00:34:08:4D:C9:6F:8B:1B:89:5D:1D:3C:77
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       6ED1E633CD2816AE39026E883CDDEA4322CF3EE6
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/323030313a313363373a373030363a3a2f34382d3438203d3e203330313333.roa
Signing time:             Tue 04 Feb 2025 18:04:34 +0000
ROA not before:           Tue 04 Feb 2025 17:59:34 +0000
ROA not after:            Tue 03 Feb 2026 18:04:34 +0000
asID:                     30133
IP address blocks:        2001:13c7:7006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d1:e6:33:cd:28:16:ae:39:02:6e:88:3c:dd:ea:43:22:cf:3e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Feb  4 17:59:34 2025 GMT
            Not After : Feb  3 18:04:34 2026 GMT
        Subject: CN=C0880B9495E5D60034084DC96F8B1B895D1D3C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:3d:1a:f4:41:47:cc:7b:cf:c1:d3:44:2e:
                    97:68:fd:a3:97:a0:b5:e1:3b:4b:f1:bd:9e:9e:00:
                    6e:5c:0a:05:60:6c:75:fc:30:8a:b9:65:e4:a2:07:
                    12:5c:79:82:4c:37:3d:52:d9:3d:7c:62:5c:0a:f3:
                    35:9f:5a:13:ec:a8:3a:e3:fc:3a:5f:46:5e:5b:32:
                    a6:36:e4:61:51:1b:ab:ec:ba:cb:d2:85:e7:20:d3:
                    46:a2:77:e5:06:15:1c:c1:be:34:75:c1:c1:65:68:
                    5f:c0:90:da:43:be:f6:66:39:e7:cd:9f:34:02:88:
                    a2:a6:de:8b:87:74:5c:d5:64:22:ef:54:8d:66:74:
                    cd:70:d9:d7:88:b9:7e:10:c3:bf:93:10:c8:be:db:
                    6f:34:3a:a4:8c:f5:b5:e9:74:4f:c6:79:6d:9a:7d:
                    4f:eb:77:96:b0:8a:e6:ae:00:40:6c:62:80:57:c3:
                    8d:16:3d:bf:e6:9a:5b:08:bd:13:69:fb:6b:03:6a:
                    c3:c3:61:43:4a:60:15:f3:08:16:d0:52:c0:23:31:
                    bf:fa:32:2c:00:ce:5c:37:a2:9d:48:d2:07:27:2a:
                    ae:14:15:53:19:06:83:5f:a5:14:37:01:f3:ac:7a:
                    d6:68:52:07:de:39:4a:1c:91:e5:3b:00:dd:3f:a8:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:88:0B:94:95:E5:D6:00:34:08:4D:C9:6F:8B:1B:89:5D:1D:3C:77
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/323030313a313363373a373030363a3a2f34382d3438203d3e203330313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7006::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:f3:3b:cf:04:68:0f:9a:13:b9:02:8f:14:65:0a:ae:e2:ff:
         3e:4d:d7:7b:32:34:d1:3a:87:f6:de:06:3a:ec:be:f0:9d:77:
         f6:36:67:7a:cf:50:46:53:b5:59:12:a7:31:26:f0:18:95:48:
         ee:7c:72:37:2d:9f:a8:15:62:47:8b:98:ac:f2:08:5f:f1:2e:
         59:9e:63:a2:eb:3d:99:69:64:30:d8:6f:83:0f:32:53:dd:37:
         57:53:c2:f7:67:7e:fd:09:87:0d:72:5f:77:02:7b:d7:17:19:
         5e:62:45:4f:29:b3:39:53:1f:12:77:62:b1:ea:49:5f:2b:24:
         99:0b:8b:f0:7c:93:50:32:f6:92:9f:14:13:3a:da:49:51:e5:
         1c:c0:c7:b5:b2:56:18:28:e7:4b:da:da:22:67:69:fa:02:47:
         30:c6:7b:7e:2a:95:86:af:8c:85:e2:db:02:bd:ef:45:b5:6d:
         89:a9:de:60:29:0f:3f:a4:cf:f7:30:8d:08:db:e0:1e:7d:08:
         41:42:b0:58:e2:f0:f6:b6:c4:65:f8:a5:e8:03:02:d3:74:8e:
         72:27:69:90:06:b4:73:b5:c3:21:09:e5:ad:c3:ef:88:7a:61:
         3e:05:ab:20:73:7c:50:54:d6:1f:3f:eb:3c:2d:f7:38:36:22:
         2e:7b:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:06 2025 by rpki-client