Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/323030313a313231303a3a2f33322d3336203d3e2032353439.roa
File:                     323030313a313231303a3a2f33322d3336203d3e2032353439.roa (raw, json)
Hash identifier:          7LrBj7UqfGSZ6wXu0bwrao+ddLy5eZzWket4U8RC3t8=
Subject key identifier:   EC:3D:76:CA:98:1E:28:5E:7E:CD:C9:39:1A:43:17:03:1F:A6:53:78
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       7B7B07190BC0C7CF084DA16D5AF0D1E11D8CEE26
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/323030313a313231303a3a2f33322d3336203d3e2032353439.roa
Signing time:             Tue 04 Feb 2025 20:00:33 +0000
ROA not before:           Tue 04 Feb 2025 19:55:33 +0000
ROA not after:            Tue 03 Feb 2026 20:00:33 +0000
asID:                     2549
IP address blocks:        2001:1210::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7b:07:19:0b:c0:c7:cf:08:4d:a1:6d:5a:f0:d1:e1:1d:8c:ee:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: Feb  4 19:55:33 2025 GMT
            Not After : Feb  3 20:00:33 2026 GMT
        Subject: CN=EC3D76CA981E285E7ECDC9391A4317031FA65378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:5c:00:84:cf:b0:78:11:15:ee:fc:a9:2f:
                    8a:72:f0:b8:5e:35:ff:cf:37:78:0b:c9:18:c3:01:
                    27:9d:60:c6:5c:50:9b:97:6b:dc:e7:d6:f5:cc:50:
                    9c:af:7c:ed:e1:21:60:3d:d5:87:6d:69:e2:64:ad:
                    87:83:a9:34:fa:0f:77:17:3a:7e:6e:cf:05:6c:cf:
                    86:96:5f:12:28:8b:24:19:00:12:2b:7f:e6:06:e3:
                    8d:17:67:55:f3:bf:91:79:ad:e2:9c:9a:1f:22:fe:
                    35:4b:2a:2c:7f:dd:08:2c:f0:23:0b:b1:5e:9a:c7:
                    08:e1:20:1d:ed:a6:a5:5b:ee:8d:35:67:0e:26:30:
                    37:8f:55:f4:eb:0d:20:2f:e8:6a:ff:c0:cb:47:1c:
                    68:95:b5:ea:c5:4f:eb:a0:6d:62:fe:b9:74:04:16:
                    03:b4:57:60:3c:35:58:0c:1e:7e:49:e6:70:31:4e:
                    58:05:6f:87:42:e2:b6:6d:64:b3:cc:6c:5a:a5:a5:
                    3a:88:71:66:17:1d:48:5d:73:d6:bc:0c:94:05:2f:
                    3c:11:97:28:25:0d:5c:42:a4:f8:ed:14:0a:2c:91:
                    e0:7c:61:b2:92:c7:0a:80:b4:7c:b7:32:32:3e:48:
                    a0:e6:9c:ea:c8:73:7a:3f:c5:c4:82:31:bb:9a:0e:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3D:76:CA:98:1E:28:5E:7E:CD:C9:39:1A:43:17:03:1F:A6:53:78
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/323030313a313231303a3a2f33322d3336203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1210::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:01:06:c6:d3:23:0c:06:6b:96:de:c0:e2:3c:02:bd:ea:da:
         a7:2c:85:4c:ef:87:a5:23:a2:2e:20:66:ae:34:1c:19:ad:31:
         fd:e3:d8:0b:88:ce:3c:53:0a:fc:75:ae:74:03:0a:f4:3f:6d:
         cb:40:bc:47:72:3f:3d:b5:39:2c:0d:9c:35:eb:81:ad:ce:bb:
         97:6a:c2:68:fd:15:e4:b8:8c:74:28:b7:69:9e:86:8c:80:91:
         3f:7c:67:65:08:fb:0e:f9:32:42:73:1e:8c:14:d8:85:30:21:
         6f:48:3b:d4:45:4c:ca:c7:5f:32:71:a8:c6:41:be:9f:c1:c2:
         39:fc:90:f3:48:33:87:f5:5c:05:44:0f:cf:36:69:58:30:65:
         cb:41:1c:a9:67:33:cc:91:e1:28:f8:74:de:4a:60:86:7b:e8:
         fa:aa:6f:1e:67:7b:e2:37:a6:77:66:c9:71:47:6e:35:e4:99:
         be:4a:72:af:80:23:c3:9e:55:5f:a1:3f:1e:f5:ef:93:11:1e:
         09:fe:9b:d0:15:97:29:8e:75:48:c5:61:92:45:58:c9:16:1c:
         cb:34:0c:2b:b4:98:59:cd:8f:4c:6b:16:e3:05:e5:f3:78:ea:
         95:15:06:47:5b:fc:2a:9d:dc:dc:45:8d:3e:ee:a1:0b:ad:ea:
         38:67:52:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:30:51 2025 by rpki-client