Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e203238303030.roa
File:                     323030313a313363373a373030313a3a2f34382d3438203d3e203238303030.roa (raw, json)
Hash identifier:          /y3ijgST5Wl9ijMdfXrO4uJ35VoPWvb7G7VC6bsA2m4=
Subject key identifier:   85:77:DE:EE:EA:94:A6:17:D1:A1:D8:05:BD:CB:C1:B6:02:E9:A6:B8
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       1CE097A85EFCD01DF52B9FD16893E52962E5F9A6
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e203238303030.roa
Signing time:             Tue 04 Feb 2025 18:19:38 +0000
ROA not before:           Tue 04 Feb 2025 18:14:38 +0000
ROA not after:            Tue 03 Feb 2026 18:19:38 +0000
asID:                     28000
IP address blocks:        2001:13c7:7001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e0:97:a8:5e:fc:d0:1d:f5:2b:9f:d1:68:93:e5:29:62:e5:f9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:38 2025 GMT
            Not After : Feb  3 18:19:38 2026 GMT
        Subject: CN=8577DEEEEA94A617D1A1D805BDCBC1B602E9A6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:0b:d6:eb:d6:0d:fa:e1:d0:2c:58:0f:71:
                    4d:fd:e5:7e:45:3a:a5:55:b2:90:36:52:fe:5a:d3:
                    76:f8:55:40:f8:a8:8e:b0:ec:86:1b:0b:7a:9a:c7:
                    b5:ee:44:03:29:33:2a:fb:91:33:85:5a:6f:6b:6f:
                    53:9d:2a:32:aa:a2:29:14:64:f5:63:52:d0:fe:e4:
                    f8:c3:b9:b4:62:ec:09:5b:44:c2:50:41:0c:da:4c:
                    d8:f9:17:63:ee:da:21:13:59:5d:e4:a4:13:99:c4:
                    8d:01:bf:b5:7e:a7:a3:84:01:d4:b8:13:4a:20:c1:
                    0e:4d:65:3d:12:95:0e:7e:c0:82:d6:83:63:34:8c:
                    97:68:c5:72:91:e8:04:58:f4:50:5e:5e:3b:3b:5b:
                    d0:f6:6d:a6:42:0e:47:91:d2:51:87:1e:4b:84:a9:
                    15:42:cc:88:18:80:81:81:d1:ad:95:42:4f:61:4e:
                    ae:68:41:87:ce:92:e3:81:02:b2:ad:87:8d:3f:90:
                    82:52:1a:f9:21:f0:b3:dc:5e:06:50:b2:02:52:1d:
                    84:b1:6f:dc:64:92:db:94:1d:66:62:9e:48:da:89:
                    51:77:4b:cb:3d:ef:0c:d8:03:26:f7:a0:ff:f0:52:
                    6d:11:df:5c:88:76:cb:d2:f2:8d:c3:02:d4:a2:48:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:77:DE:EE:EA:94:A6:17:D1:A1:D8:05:BD:CB:C1:B6:02:E9:A6:B8
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030313a3a2f34382d3438203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:5b:43:7d:41:44:33:1f:9c:bd:08:01:9f:73:87:a2:79:
         57:c0:52:04:ed:37:f2:99:74:37:04:17:85:06:50:4c:b5:92:
         22:bb:77:9d:20:c3:e6:f4:8e:4f:14:da:40:fe:83:bf:2d:65:
         d4:00:49:de:c2:b9:1c:d4:45:32:27:c5:9c:85:a9:f5:58:b3:
         81:93:a2:cd:53:3f:3c:25:22:cf:a5:33:57:d5:c3:b3:13:db:
         e2:57:0e:46:5e:c5:8c:73:33:50:cd:6f:62:82:dd:13:6d:37:
         51:1c:61:3f:66:9e:c4:58:3b:d8:06:f0:2e:83:f7:49:b6:b7:
         52:8c:62:5f:89:d8:4e:1b:29:c2:2a:cb:24:69:1c:d6:a8:cb:
         71:80:6d:37:44:7d:eb:b4:37:5e:7b:71:c2:73:f6:c0:ad:08:
         8b:d0:a4:15:ef:f9:f8:b2:3f:46:1e:ac:2f:a5:94:d7:dd:79:
         ba:ae:20:7f:17:40:ca:65:76:23:0e:6a:d9:39:1b:be:67:19:
         54:aa:87:ef:5a:75:0f:65:5e:f8:ea:c5:90:a0:24:93:b1:83:
         7b:ad:bd:68:b9:c3:eb:1d:5f:dc:59:81:0e:00:b6:bd:8f:80:
         56:4c:ff:8d:54:fb:b8:5d:fe:e0:f1:6d:46:05:63:b8:c0:21:
         f5:f9:95:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:36 2025 by rpki-client