Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e302e302f31372d3234203d3e203139313830.roa
File:                     3134382e3130322e302e302f31372d3234203d3e203139313830.roa (raw, json)
Hash identifier:          CG7h6OhSNWLSqY64o6KlmCeqnx5uX2t71A+MCHI2G18=
Subject key identifier:   C8:04:F5:D5:F0:EE:F4:82:10:4F:DB:B0:C9:F1:4A:B7:E6:C5:7B:AF
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       545BD186FCF1F5A2B5808914A5E650FB58D1FBE1
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e302e302f31372d3234203d3e203139313830.roa
Signing time:             Tue 04 Feb 2025 18:42:36 +0000
ROA not before:           Tue 04 Feb 2025 18:37:36 +0000
ROA not after:            Tue 03 Feb 2026 18:42:36 +0000
asID:                     19180
IP address blocks:        148.102.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5b:d1:86:fc:f1:f5:a2:b5:80:89:14:a5:e6:50:fb:58:d1:fb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:36 2025 GMT
            Not After : Feb  3 18:42:36 2026 GMT
        Subject: CN=C804F5D5F0EEF482104FDBB0C9F14AB7E6C57BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:b9:2c:b4:ab:09:30:d2:87:4e:4d:25:42:
                    4a:d6:22:47:8d:ba:05:27:f5:ed:92:0d:45:3d:7d:
                    33:ef:0d:f2:3c:8d:c3:e2:94:54:d4:26:7f:98:1e:
                    89:a9:b6:a6:ac:47:f1:7a:dd:36:98:4d:5a:59:3a:
                    03:bc:65:51:ac:7d:33:e0:1a:e8:a9:ff:49:9c:80:
                    16:0f:50:84:7b:47:14:97:07:51:79:05:e3:52:b2:
                    b0:95:bf:78:38:92:76:eb:c2:77:a1:2d:52:6f:fa:
                    7f:a6:2d:08:7c:66:ea:6e:58:56:e2:69:5f:dc:3c:
                    03:8a:a6:8f:e6:fb:77:56:c5:eb:f8:b9:8a:10:9d:
                    e5:f3:f3:d8:e6:58:1c:11:a6:ec:a4:42:a5:6d:5b:
                    b4:93:32:08:da:d7:be:b7:43:5f:0a:99:d6:af:d8:
                    8d:84:b5:ee:d9:97:28:6e:33:ea:2a:d8:be:fc:f1:
                    e5:77:84:c5:86:e2:f3:32:23:16:65:b2:cd:d9:77:
                    18:0f:bc:8a:65:fe:0a:94:fe:cf:18:4d:e3:f8:48:
                    f1:30:2d:e4:5d:a5:ff:fc:54:76:f9:b1:ed:90:ee:
                    59:91:0a:1e:46:55:8a:46:f8:47:c6:3f:22:7f:1a:
                    fb:26:83:18:92:b5:93:1b:96:e0:b7:3f:5a:78:28:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:04:F5:D5:F0:EE:F4:82:10:4F:DB:B0:C9:F1:4A:B7:E6:C5:7B:AF
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e302e302f31372d3234203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         07:43:b6:bf:b1:6d:c6:12:d8:49:78:0c:c8:b0:54:9b:09:0d:
         b8:c5:fb:e2:2c:df:54:97:ae:39:05:6d:9d:cd:4c:8b:4e:03:
         f6:be:97:d7:20:6d:bc:38:2a:1c:5e:96:c5:12:57:b1:a8:3f:
         e1:3f:81:52:f1:af:7f:c1:ac:27:73:89:81:8d:2a:1d:68:92:
         30:0b:c9:43:ac:1a:33:ab:0e:3b:27:6a:d7:47:61:55:e0:a5:
         15:a7:a7:9e:a2:87:e1:6d:39:6d:b3:28:39:69:2f:d7:ab:96:
         f9:21:97:0b:c0:7a:ea:f1:d3:a3:99:e8:ed:cd:39:2d:00:4e:
         ad:b7:21:da:e3:c2:d6:62:7e:8b:81:da:85:32:22:9c:b7:cf:
         8d:7e:f4:be:49:04:c4:3d:4a:f1:bb:d4:0d:7d:38:2a:97:1a:
         29:e7:7b:42:c8:87:5c:7f:ea:d9:c3:7b:12:1c:ea:93:d6:55:
         81:1e:82:5d:7a:93:19:bf:2a:7b:72:17:fb:f5:9f:08:e3:c1:
         88:cb:63:6e:2c:51:25:02:36:59:76:96:d4:ff:77:c4:ba:2f:
         ad:13:65:51:59:1e:e9:98:1a:d9:8f:a8:50:92:53:d9:a8:b0:
         43:11:e1:31:b0:d2:fd:c5:b5:67:20:a2:be:f9:8b:59:44:7b:
         b5:bd:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:10 2025 by rpki-client