Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/323030313a313234383a3a2f33322d3438203d3e203131313732.roa
File:                     323030313a313234383a3a2f33322d3438203d3e203131313732.roa (raw, json)
Hash identifier:          iDjgl99t0SoD3p4ozVDk5msabgPcQX0MFDSJ3+RdOow=
Subject key identifier:   DC:C3:0E:46:BE:C6:80:3E:BB:CF:7D:66:9B:B1:A9:51:81:3C:5D:47
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       24A5F55EDFE707D4AB5DD6572BE8F8FDE6927B6D
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/323030313a313234383a3a2f33322d3438203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:52:43 +0000
ROA not before:           Tue 04 Feb 2025 18:47:43 +0000
ROA not after:            Tue 03 Feb 2026 18:52:43 +0000
asID:                     11172
IP address blocks:        2001:1248::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a5:f5:5e:df:e7:07:d4:ab:5d:d6:57:2b:e8:f8:fd:e6:92:7b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:43 2025 GMT
            Not After : Feb  3 18:52:43 2026 GMT
        Subject: CN=DCC30E46BEC6803EBBCF7D669BB1A951813C5D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:7d:47:ac:5e:8f:a5:13:d4:56:28:2a:03:
                    b5:17:3a:b9:6d:f3:5a:b3:93:f4:3a:04:01:f0:59:
                    1b:81:f4:c8:d9:57:fd:22:0d:80:7b:73:4f:3a:bf:
                    80:f6:40:f6:a3:3c:fb:f8:58:07:63:30:94:53:ed:
                    c9:a8:ef:da:84:37:67:30:a1:2e:c0:4e:cb:aa:f6:
                    18:a9:ea:cb:94:8a:65:2c:ac:16:9d:61:a6:57:8b:
                    d0:e6:cc:d4:97:63:5c:ae:64:f5:28:48:4a:63:d0:
                    37:dd:50:b1:55:dc:5f:c8:05:7e:5b:8d:8c:6f:86:
                    c2:69:26:bf:d2:54:f1:f3:12:9b:df:aa:02:63:d9:
                    3b:8f:28:51:1c:03:b8:dd:ce:3a:72:d0:8d:0c:7f:
                    7e:4d:e2:ea:a3:f0:0b:2d:90:b6:85:91:58:de:3b:
                    3f:f1:32:0b:9d:a7:f8:c8:9c:68:02:d3:e5:8d:1d:
                    ce:37:b0:9e:02:f2:0a:a1:49:23:35:38:ec:c2:22:
                    60:06:2d:e2:c3:05:94:ad:fe:c5:db:c6:34:be:d2:
                    fb:69:9c:d1:3e:95:67:60:b7:24:23:d7:37:11:ab:
                    3c:b7:cd:da:63:88:86:ae:52:de:e2:1e:f5:32:58:
                    d7:59:86:4f:c5:48:8c:66:50:45:20:b2:15:de:b5:
                    a7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:0E:46:BE:C6:80:3E:BB:CF:7D:66:9B:B1:A9:51:81:3C:5D:47
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/323030313a313234383a3a2f33322d3438203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1248::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:ec:54:b6:dc:da:ca:c8:cf:66:56:2b:bd:6f:15:e2:fe:
         97:38:0d:56:c6:41:8c:4a:18:ea:b9:a2:19:d1:a3:4c:28:e2:
         da:ab:f6:5b:50:c6:70:bb:67:7d:fa:97:61:52:ff:7a:09:87:
         4a:08:97:24:1a:9d:ea:7d:00:39:fd:cf:99:da:e1:22:fa:fb:
         85:10:9c:f0:13:bc:4d:df:a9:e5:5d:84:03:54:b2:35:7d:4d:
         3c:25:7a:7f:47:bf:ad:60:85:a5:12:fd:f1:92:44:68:1a:ea:
         e2:0d:53:96:b7:d2:00:40:db:f4:d9:6b:a2:69:9f:64:24:5b:
         ed:f3:3e:fa:f1:d9:27:ff:b8:02:77:f1:8c:70:d0:29:79:54:
         1e:43:06:e6:7a:76:bf:8f:1d:ef:e6:8d:7a:0b:db:68:b6:46:
         1a:7f:a4:2b:b9:52:0f:8a:eb:72:bf:b7:40:31:d3:d6:b4:36:
         f7:9d:56:4c:59:fb:96:f5:b0:24:ca:93:f4:f7:6b:27:c6:d3:
         cb:e5:19:69:48:8a:30:af:51:07:38:ed:20:9b:0e:50:84:2d:
         33:77:9f:8f:02:ab:20:62:57:be:ae:1a:16:21:45:31:e2:ef:
         d5:73:71:29:57:e2:3d:9e:1d:e8:ce:81:93:95:a1:18:82:68:
         5b:e3:6d:cf
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUJKX1Xt/nB9SrXdZXK+j4/eaSe20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNTAyMDQxODQ3NDNaFw0yNjAyMDMxODUyNDNaMDMxMTAvBgNV
BAMTKERDQzMwRTQ2QkVDNjgwM0VCQkNGN0Q2NjlCQjFBOTUxODEzQzVENDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlFX1HrF6PpRPUVigqA7UXOrlt
81qzk/Q6BAHwWRuB9MjZV/0iDYB7c086v4D2QPajPPv4WAdjMJRT7cmo79qEN2cw
oS7ATsuq9hip6suUimUsrBadYaZXi9DmzNSXY1yuZPUoSEpj0DfdULFV3F/IBX5b
jYxvhsJpJr/SVPHzEpvfqgJj2TuPKFEcA7jdzjpy0I0Mf35N4uqj8AstkLaFkVje
Oz/xMgudp/jInGgC0+WNHc43sJ4C8gqhSSM1OOzCImAGLeLDBZSt/sXbxjS+0vtp
nNE+lWdgtyQj1zcRqzy3zdpjiIauUt7iHvUyWNdZhk/FSIxmUEUgshXetafHAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU3MMORr7GgD67z31mm7GpUYE8XUcwHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMyMzAzMDMxM2EzMTMyMzQzODNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzEzMTM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARJIMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ6OxUttzaysjPZlYrvW8V4v6XOA1WxkGMShjquaIZ
0aNMKOLaq/ZbUMZwu2d9+pdhUv96CYdKCJckGp3qfQA5/c+Z2uEi+vuFEJzwE7xN
36nlXYQDVLI1fU08JXp/R7+tYIWlEv3xkkRoGuriDVOWt9IAQNv02WuiaZ9kJFvt
8z768dkn/7gCd/GMcNApeVQeQwbmena/jx3v5o16C9totkYaf6QruVIPiutyv7dA
MdPWtDb3nVZMWfuW9bAkypP092snxtPL5RlpSIowr1EHOO0gmw5QhC0zd5+PAqsg
Yle+rhoWIUUx4u/Vc3EpV+I9nh3ozoGTlaEYgmhb423P
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:17 2025 by rpki-client