Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323030313a313333383a3a2f33322d3332203d3e203237383037.roa
File:                     323030313a313333383a3a2f33322d3332203d3e203237383037.roa (raw, json)
Hash identifier:          gRSqwnXG4+Dxu3SFUPSU4CiSpI6lrcLjEKR2osMC0Iw=
Subject key identifier:   06:8D:19:0B:BE:48:72:A7:CF:55:A4:82:DC:06:D8:63:E6:0F:0B:3A
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       5EBAE6F7443308EABD846E9F51528B1F6534A725
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323030313a313333383a3a2f33322d3332203d3e203237383037.roa
Signing time:             Tue 04 Feb 2025 18:21:42 +0000
ROA not before:           Tue 04 Feb 2025 18:16:42 +0000
ROA not after:            Tue 03 Feb 2026 18:21:42 +0000
asID:                     27807
IP address blocks:        2001:1338::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ba:e6:f7:44:33:08:ea:bd:84:6e:9f:51:52:8b:1f:65:34:a7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Feb  4 18:16:42 2025 GMT
            Not After : Feb  3 18:21:42 2026 GMT
        Subject: CN=068D190BBE4872A7CF55A482DC06D863E60F0B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:32:fa:71:f1:78:67:6c:7d:4c:1d:6a:74:
                    1a:f0:e6:fd:74:5c:2d:2d:e6:61:98:e8:cf:a1:8c:
                    98:9f:31:92:f2:ee:d7:a2:53:44:0e:32:6e:cb:65:
                    e2:e9:ce:f3:df:d3:8e:1b:d7:a9:a1:b6:c5:2c:d6:
                    4d:17:4e:8a:34:ca:c5:6f:3f:45:76:27:56:ca:58:
                    a9:7e:de:84:dc:7a:f3:1b:00:d5:90:ff:80:c1:13:
                    c2:f8:c2:06:d9:c8:9e:75:a7:f6:4b:5f:53:16:97:
                    c8:f8:d7:84:ae:1d:29:13:43:0c:e4:f7:4e:03:7d:
                    cd:53:be:5f:9e:43:c8:d6:1a:a8:bb:d2:5a:d2:a0:
                    4a:1a:84:15:ea:aa:93:14:a1:24:5d:22:d2:6b:56:
                    b6:a4:9b:5e:33:12:24:d9:b3:21:44:f2:97:83:bd:
                    48:27:23:87:c2:8c:34:39:10:8a:71:0a:d6:b9:19:
                    34:54:67:26:c5:79:56:c3:09:48:a9:61:82:8f:82:
                    64:83:b0:97:86:35:9d:80:d0:55:d5:c7:7c:ea:5b:
                    0b:71:7b:13:eb:cd:10:f0:79:6c:5d:57:0e:00:0a:
                    d0:1d:c5:c9:e1:f4:78:90:c0:9b:fb:9f:67:b2:41:
                    bd:22:38:b6:13:e8:38:9c:db:e7:b9:e2:3b:0d:f1:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8D:19:0B:BE:48:72:A7:CF:55:A4:82:DC:06:D8:63:E6:0F:0B:3A
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/323030313a313333383a3a2f33322d3332203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1338::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:67:cc:6e:50:c4:6f:a5:6a:d5:62:25:c3:b0:e9:e7:67:08:
         52:7e:c7:9a:43:48:c0:ea:2f:f8:e3:b1:cb:17:3e:a0:ad:82:
         c6:1b:8f:d1:30:32:28:f2:5f:66:73:7c:2f:78:81:98:ae:64:
         dd:68:c0:f1:46:70:88:16:46:53:da:84:1c:55:b8:df:9b:06:
         30:5e:2f:bb:f8:39:00:c3:e6:03:a7:03:94:ca:3c:33:11:d8:
         5d:b1:90:9f:84:4b:3e:19:a4:91:fb:50:46:59:3e:57:d1:b0:
         6f:99:4a:58:b4:e1:f9:f2:5b:cc:bd:44:af:0b:a2:00:92:c8:
         fb:45:42:81:cf:ed:3a:3e:07:c1:99:8d:58:6c:80:d6:72:7f:
         95:98:5f:6d:81:d6:60:f1:4d:de:4c:06:76:46:7e:59:11:f6:
         bd:95:dd:d5:7e:97:07:2d:c2:44:81:71:c3:37:c4:9c:61:08:
         fb:bf:6f:36:c6:bf:a9:11:52:54:01:6c:5d:6c:c0:1e:9c:53:
         38:c0:78:84:b0:e4:ff:c5:30:da:6e:1d:0b:08:8b:41:2f:59:
         2c:9c:57:16:66:c2:b1:9a:a8:2a:57:1c:5e:07:62:4a:ea:7e:
         3e:20:40:2f:72:64:c0:cf:5b:95:f9:f9:ee:5c:58:3a:52:91:
         4b:d9:b5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:11 2025 by rpki-client