Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/323830313a3133653a3a2f34302d3438203d3e203139343239.roa
File:                     323830313a3133653a3a2f34302d3438203d3e203139343239.roa (raw, json)
Hash identifier:          mOcgVzk1lRXFF4ohPAMoZiKtWJqqHUeu76FCgGbGD28=
Subject key identifier:   0C:7D:96:2A:CD:86:1F:BF:4B:9E:CB:A0:E5:C8:34:CC:9D:44:08:23
Certificate issuer:       /CN=A681D3B317407E5E02EB58D80486F39054119D60
Certificate serial:       588A71D1CC27C67360B0D486AFD350AD9B4F602C
Authority key identifier: A6:81:D3:B3:17:40:7E:5E:02:EB:58:D8:04:86:F3:90:54:11:9D:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A681D3B317407E5E02EB58D80486F39054119D60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/323830313a3133653a3a2f34302d3438203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:05:43 +0000
ROA not before:           Tue 04 Feb 2025 18:00:43 +0000
ROA not after:            Tue 03 Feb 2026 18:05:43 +0000
asID:                     19429
IP address blocks:        2801:13e::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8a:71:d1:cc:27:c6:73:60:b0:d4:86:af:d3:50:ad:9b:4f:60:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A681D3B317407E5E02EB58D80486F39054119D60
        Validity
            Not Before: Feb  4 18:00:43 2025 GMT
            Not After : Feb  3 18:05:43 2026 GMT
        Subject: CN=0C7D962ACD861FBF4B9ECBA0E5C834CC9D440823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:c3:9b:a0:5e:98:57:0b:2f:66:97:03:12:
                    5e:7e:dc:9d:f5:f7:96:95:89:0f:62:45:88:3a:88:
                    ce:44:93:60:d9:b6:83:2f:a4:f7:0f:b9:f2:e1:5c:
                    c9:51:46:e7:d1:17:d1:5e:08:e2:f6:7a:4a:a3:fa:
                    66:6f:9d:d2:e5:7d:cd:d2:08:09:8f:0e:db:84:1d:
                    9a:93:2f:95:e3:81:a6:2c:43:fc:df:2b:2f:91:65:
                    bd:a9:36:eb:88:b4:34:e0:97:4a:6d:49:dd:fd:10:
                    6d:fd:b1:fd:6d:fb:4a:05:00:cf:5c:5f:9a:0d:31:
                    de:f2:82:8c:2a:47:5e:08:09:f4:93:ba:fe:11:90:
                    2f:1d:e7:38:1b:52:79:9a:ad:7e:ca:0e:54:ac:e5:
                    0e:34:d2:16:6f:7f:5c:8d:4e:b7:3f:be:22:33:e1:
                    c8:b7:42:e5:93:c3:dc:f1:7b:25:db:b5:d8:54:1c:
                    c0:35:d4:eb:f9:1c:49:00:30:f3:1c:f5:b4:c3:4f:
                    c4:48:c5:ab:6e:ab:10:ff:c7:da:9c:39:4f:77:e8:
                    34:89:08:50:f7:21:4d:88:cb:95:72:38:57:18:5b:
                    b2:a7:ec:07:b4:86:e6:b5:0f:f8:ba:08:4e:8e:0d:
                    5f:59:94:fd:ec:fc:3c:2a:1c:aa:bc:14:33:90:db:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7D:96:2A:CD:86:1F:BF:4B:9E:CB:A0:E5:C8:34:CC:9D:44:08:23
            X509v3 Authority Key Identifier:
                keyid:A6:81:D3:B3:17:40:7E:5E:02:EB:58:D8:04:86:F3:90:54:11:9D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/A681D3B317407E5E02EB58D80486F39054119D60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A681D3B317407E5E02EB58D80486F39054119D60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71C94BE1E95DF92BBABE65A716DCFF3BF1D7344AA92901A6C70042ABDE0AFA47/0/323830313a3133653a3a2f34302d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13e::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:1c:b9:80:47:b6:3f:0b:dd:fc:f5:7e:df:d5:f1:db:a7:15:
         2e:0e:01:91:d5:f8:05:f1:51:62:c0:9f:11:fd:4f:ba:47:0c:
         f8:cb:58:69:67:42:d1:63:ee:fe:f6:43:c8:ce:ae:c6:89:97:
         9f:0c:c2:27:22:41:05:53:a8:b5:c8:44:c0:66:4a:94:01:d5:
         ac:ed:bc:98:ba:02:04:24:6e:8a:a0:39:d7:3e:1e:95:0f:9c:
         87:7b:57:47:30:5b:90:47:fe:b0:bf:62:21:f6:74:fd:21:e6:
         1a:92:9d:75:ac:30:4d:3b:bb:2c:ce:92:f4:18:7e:f3:2b:42:
         ca:91:d5:56:f8:62:e3:65:a8:64:4e:d8:75:cb:e9:f6:9b:84:
         10:f8:ee:bc:eb:8b:18:de:36:c1:83:5e:df:ef:ff:fe:c3:2a:
         d3:28:5e:a2:44:17:3f:ef:cb:b5:87:2e:dc:8d:1a:5c:d3:a7:
         b1:70:96:1a:b8:2e:10:fb:61:a3:2c:2c:31:bd:c9:48:14:33:
         3b:05:75:09:9f:43:62:c9:a6:a1:d8:e1:d4:22:64:77:21:67:
         6c:ab:b8:a7:b3:3d:e4:a9:b6:54:10:55:be:5f:b8:6b:2b:0b:
         bc:f9:68:34:c6:21:df:4a:66:1b:bd:d6:2d:f4:dd:92:b1:7b:
         2e:ea:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:26 2025 by rpki-client