Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa
File:                     323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa (raw, json)
Hash identifier:          0IzNEldcoPgSHtaHfcxay0JfkXL3rSvXMcs6PdH0eVU=
Subject key identifier:   D7:E6:92:5C:FD:88:FB:D0:28:E0:88:BE:31:9C:03:CB:09:36:DD:DE
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       642F5744F80D6EB54FBA07EAC50682A424460630
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa
Signing time:             Tue 04 Feb 2025 18:19:40 +0000
ROA not before:           Tue 04 Feb 2025 18:14:40 +0000
ROA not after:            Tue 03 Feb 2026 18:19:40 +0000
asID:                     28001
IP address blocks:        2001:13c7:7010::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2f:57:44:f8:0d:6e:b5:4f:ba:07:ea:c5:06:82:a4:24:46:06:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:40 2025 GMT
            Not After : Feb  3 18:19:40 2026 GMT
        Subject: CN=D7E6925CFD88FBD028E088BE319C03CB0936DDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:be:3d:86:e2:00:2e:9c:3d:ee:af:fe:7f:
                    80:db:cb:de:14:95:e8:59:6f:8c:cf:1e:23:ff:bf:
                    cc:cc:d8:26:90:7c:70:81:19:15:9e:35:e1:e3:ba:
                    27:2f:75:fe:57:44:90:8f:db:e7:3d:7e:bb:d8:76:
                    27:29:a9:4e:cc:ba:dc:1c:55:9c:d6:9d:2e:30:77:
                    e3:02:3b:0d:86:ad:44:ca:a9:b7:b4:6d:b7:4c:35:
                    48:fa:b5:8d:94:a5:5f:b2:0b:f0:60:a7:b5:38:ae:
                    bf:37:fe:1e:82:ac:4d:4a:18:b7:35:de:25:f1:c3:
                    d6:02:8e:12:fe:bb:7c:34:44:d2:51:a3:74:4b:64:
                    21:3d:9f:c0:e2:43:a9:b0:4b:1d:2c:aa:c9:86:11:
                    01:7f:e4:ec:da:5d:38:51:38:c0:5f:67:62:95:e7:
                    6f:7b:d5:1b:6c:ba:bd:5c:9f:47:4a:ee:ad:8e:a7:
                    e3:f0:41:6f:0c:d6:04:85:3a:ca:ab:a5:4b:65:35:
                    87:78:57:01:90:74:3d:c4:7e:9a:54:8d:9e:76:6c:
                    14:b7:1c:74:76:24:71:fc:83:73:80:ed:23:ba:3e:
                    4e:51:c8:b0:d0:7d:05:3b:01:39:fe:cb:e3:16:dd:
                    16:a4:89:44:2c:11:d4:05:f2:7f:b3:a8:86:c4:0d:
                    57:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E6:92:5C:FD:88:FB:D0:28:E0:88:BE:31:9C:03:CB:09:36:DD:DE
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031303a3a2f34362d3438203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7010::/46

    Signature Algorithm: sha256WithRSAEncryption
         c8:e9:3a:35:b6:37:31:53:fc:50:aa:e0:ef:c1:97:42:bd:f1:
         e6:2e:59:c7:af:04:e8:6c:29:da:96:99:00:4f:e7:3d:16:4d:
         13:99:55:f8:9f:81:a5:0f:6e:de:0a:7d:b4:5e:b7:99:19:bf:
         47:48:7c:6f:c3:1a:79:8b:42:bd:b1:96:b3:a6:ca:6d:55:94:
         cf:22:94:2d:2e:6a:45:09:cc:4d:6a:35:f1:58:b5:06:ac:a6:
         4e:f1:c7:6b:1c:8c:d6:5c:b7:68:20:eb:51:0e:1d:35:b7:7a:
         23:2a:df:e5:20:40:d9:a2:79:7f:a4:3b:2b:b9:8f:70:eb:42:
         ee:7a:95:27:da:10:2e:9f:66:2e:82:ed:09:8c:5a:c7:3a:e2:
         00:09:b3:73:61:7c:18:ff:cd:66:59:56:8f:50:d6:db:29:e7:
         a5:92:86:dc:ce:85:d6:ff:22:9e:ac:19:40:ac:75:e5:20:51:
         15:4b:f8:9c:8d:59:ff:62:4f:f0:6c:32:c8:f8:fb:d7:22:d0:
         ae:86:4c:22:29:a8:53:38:ad:a4:68:ba:00:b1:9b:fa:e8:42:
         d6:52:c6:d5:2c:50:18:19:c8:1b:54:25:e4:02:bc:90:ce:1b:
         66:7c:54:8a:d9:7c:aa:94:b5:c1:e6:35:9b:91:63:90:39:c7:
         46:97:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----