Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031323a3a2f34382d3438203d3e203532323234.roa
File:                     323030313a313363373a373031323a3a2f34382d3438203d3e203532323234.roa (raw, json)
Hash identifier:          yNMW5q+Gf8bPl7kdruhd3wxAW8wpbYg3qSM6y7Ohhy8=
Subject key identifier:   BC:50:46:33:5E:5C:11:2B:B0:A5:22:F7:8E:5E:8E:FA:C7:C4:4A:4E
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       75E00F12819FF052C2ABC5BED296E351732D8702
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031323a3a2f34382d3438203d3e203532323234.roa
Signing time:             Tue 04 Feb 2025 18:19:35 +0000
ROA not before:           Tue 04 Feb 2025 18:14:35 +0000
ROA not after:            Tue 03 Feb 2026 18:19:35 +0000
asID:                     52224
IP address blocks:        2001:13c7:7012::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e0:0f:12:81:9f:f0:52:c2:ab:c5:be:d2:96:e3:51:73:2d:87:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:35 2025 GMT
            Not After : Feb  3 18:19:35 2026 GMT
        Subject: CN=BC5046335E5C112BB0A522F78E5E8EFAC7C44A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:29:71:78:63:18:ad:f6:48:b8:b4:90:e8:
                    fd:2e:e0:7d:4a:59:0c:d4:88:64:d0:ea:8e:55:52:
                    0f:19:53:17:9a:c8:52:3c:e8:00:77:16:31:85:a8:
                    82:c7:f1:71:e3:da:af:40:6a:1f:fb:f9:bd:24:80:
                    23:55:8a:be:fb:b5:a0:8e:b5:b2:6e:dd:6f:d6:12:
                    09:eb:ca:8b:8f:d5:f2:f3:7c:6e:b1:01:0c:d9:60:
                    a9:77:9f:34:12:6f:e2:e7:d0:95:0e:8b:c6:fe:c5:
                    3a:09:57:bf:9d:b4:e3:ba:c2:47:dc:8c:a4:de:7f:
                    16:7f:77:b7:14:e8:bb:f7:b5:49:20:c8:d5:3e:29:
                    fb:d3:ac:da:5f:0c:27:62:d1:cb:49:5d:1d:4c:5f:
                    d2:f5:1a:2a:32:04:da:0b:0d:41:49:d9:35:66:7f:
                    57:c6:b4:d3:ba:8a:be:49:9e:11:8f:53:bb:2c:51:
                    0e:01:dd:4b:08:35:21:30:d7:d4:a1:ae:9e:9b:d5:
                    6b:14:e9:b6:dd:0e:f1:fb:96:78:c9:bb:be:81:bc:
                    00:9f:b2:b8:23:95:35:98:f7:30:0d:10:92:4d:8b:
                    c2:f9:ea:9c:cb:bc:16:af:af:70:2d:43:19:d6:b0:
                    17:86:14:09:e6:06:9a:04:5c:d4:96:e2:85:ff:53:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:50:46:33:5E:5C:11:2B:B0:A5:22:F7:8E:5E:8E:FA:C7:C4:4A:4E
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373031323a3a2f34382d3438203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7012::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:89:26:f5:39:50:d1:91:4f:62:f2:ff:7a:d0:04:4f:cf:21:
         f7:ff:b3:f2:8d:c7:d4:84:69:50:5a:a5:18:b0:c1:c7:81:aa:
         a9:9f:24:84:16:2b:5b:54:61:92:41:b4:36:c1:c5:33:27:2a:
         54:af:99:e5:2d:42:b6:3b:fb:e8:16:78:1e:69:84:d0:c7:b4:
         00:1b:63:35:ba:20:85:c8:84:fe:76:d6:00:66:b9:bc:6b:1c:
         ce:e6:ba:6e:a7:d7:88:43:f3:a2:69:7c:2b:c8:81:bc:f8:75:
         00:13:73:ce:50:88:06:84:55:09:b5:19:1f:de:08:8c:61:9e:
         ad:aa:3a:e0:3d:ca:20:11:e8:02:65:5a:df:b7:58:9e:24:2e:
         73:42:4e:c1:78:a4:2b:e7:9c:b5:94:82:ed:02:be:b8:a6:40:
         30:4e:a4:26:e9:ea:0d:61:91:dd:fd:22:ea:e8:34:ff:5e:f9:
         cd:6e:be:ef:94:a7:84:b2:d3:d2:69:e3:b5:04:34:d7:3e:2c:
         d9:07:84:8a:7e:44:d0:f8:be:4b:b9:df:b9:cf:5f:68:b0:58:
         7b:8d:33:d0:ca:00:3c:84:08:c4:9a:9c:6d:85:df:ab:07:ed:
         c7:fc:86:86:25:6e:fa:6b:bf:46:75:80:03:15:e1:1e:39:3d:
         60:cc:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:44 2025 by rpki-client