Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/323030313a313363373a363030303a3a2f34382d3438203d3e203134393730.roa
File:                     323030313a313363373a363030303a3a2f34382d3438203d3e203134393730.roa (raw, json)
Hash identifier:          Ye9t6NlANqdlRzjmkuTF8WUl+qx0dOJU9RP89GM+lRQ=
Subject key identifier:   DE:FF:97:20:49:1C:21:AC:64:C1:3E:FA:C4:45:F7:40:F4:A8:10:96
Certificate issuer:       /CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
Certificate serial:       4A0BFC55332C1C2955C58289F5CD02D3C1929594
Authority key identifier: 40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/323030313a313363373a363030303a3a2f34382d3438203d3e203134393730.roa
Signing time:             Tue 04 Feb 2025 18:01:57 +0000
ROA not before:           Tue 04 Feb 2025 17:56:57 +0000
ROA not after:            Tue 03 Feb 2026 18:01:57 +0000
asID:                     14970
IP address blocks:        2001:13c7:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0b:fc:55:33:2c:1c:29:55:c5:82:89:f5:cd:02:d3:c1:92:95:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
        Validity
            Not Before: Feb  4 17:56:57 2025 GMT
            Not After : Feb  3 18:01:57 2026 GMT
        Subject: CN=DEFF9720491C21AC64C13EFAC445F740F4A81096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:32:4e:cd:9e:6c:26:9f:d2:2b:9f:15:45:
                    1c:c7:2b:26:98:92:40:15:5d:4b:25:f8:e4:26:89:
                    14:31:c6:e1:1c:65:e6:3b:15:37:fe:a3:37:c5:01:
                    fd:d2:c4:b5:eb:32:43:03:c2:cf:43:4b:1f:01:22:
                    10:b2:13:47:f0:48:0f:91:55:8b:b7:c9:af:82:1d:
                    ea:30:ac:7e:e2:5f:bf:0d:59:f3:ff:38:66:fb:7b:
                    e7:ce:32:fb:06:da:c9:71:df:02:28:07:a1:97:bd:
                    40:05:f9:b7:e9:36:9e:4c:63:bb:bf:96:7c:22:86:
                    28:6f:db:f0:fa:2e:04:2e:58:09:8a:91:56:00:5b:
                    c0:eb:94:62:96:a1:04:22:f3:e0:13:b0:7f:4a:9c:
                    ab:cb:02:e0:7c:d8:75:ec:4a:79:4d:0b:58:de:0f:
                    0b:4d:6d:b5:17:d4:4a:43:7d:f8:73:58:88:5b:37:
                    19:5c:4c:34:15:35:0b:f3:1e:74:97:f2:10:57:e7:
                    0a:73:f1:66:81:41:a9:29:6b:25:9d:2f:c6:2d:31:
                    43:e2:b7:12:49:97:38:bf:ec:b2:ba:0b:49:e7:83:
                    60:e1:00:e5:7a:72:3d:a4:1b:e3:ab:40:00:7a:40:
                    ac:0c:4d:47:b2:90:b3:cf:ca:fa:77:b5:d5:ad:64:
                    99:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:97:20:49:1C:21:AC:64:C1:3E:FA:C4:45:F7:40:F4:A8:10:96
            X509v3 Authority Key Identifier:
                keyid:40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/323030313a313363373a363030303a3a2f34382d3438203d3e203134393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:87:63:ef:84:5e:d1:88:c0:24:03:5b:3e:fd:47:c0:75:76:
         46:ae:7a:f9:09:3c:f0:45:94:38:aa:11:d6:84:4e:e1:a6:ae:
         71:d9:ef:2b:30:fb:c1:a8:2e:25:fc:d4:d5:db:2e:20:50:2a:
         a9:2a:a1:ce:5c:85:f1:3d:74:25:fb:04:ec:dc:1a:8c:d6:ac:
         59:5d:7e:bd:4b:58:e2:8b:74:47:6d:a1:b2:21:b8:77:a1:45:
         29:72:5d:f9:89:47:9e:d1:dc:61:fd:02:bf:0a:09:d7:60:be:
         de:9e:7c:d2:41:f7:e6:65:23:1a:c3:81:6a:37:85:a9:dc:78:
         f0:ea:f8:52:d6:6c:8e:c2:c6:d6:45:96:8b:0f:7d:39:1f:15:
         26:fb:f8:86:72:ed:bb:8c:a8:f6:65:51:ce:68:c2:4d:25:eb:
         ce:88:f5:9b:f0:e8:5c:90:a4:74:ac:e1:05:17:1d:c1:83:0b:
         42:94:9d:c2:ea:0b:6e:e7:0f:fd:1e:11:c0:60:ab:ac:ab:9b:
         8a:95:44:8f:cc:93:d5:b9:9b:39:c2:ae:7c:a6:f8:97:55:54:
         87:84:28:12:dd:78:d1:01:e9:16:f0:66:e8:53:0d:d6:a8:3e:
         c9:1e:7b:f2:cc:aa:a1:c2:fa:c1:9c:12:69:db:98:88:32:7d:
         65:2b:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:38:05 2025 by rpki-client