Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e38302e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e38302e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          Axp3KquturP7QKPClzmUN7GC1zZ64XeM/eK1WCFnFPY=
Subject key identifier:   EF:47:8B:E0:8E:02:21:AB:52:16:97:60:88:B0:57:F0:10:D5:60:D5
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       250D27EC8AFE6BF1E81EBEA60981E7553ABC7B50
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e38302e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 04 Feb 2025 18:42:28 +0000
ROA not before:           Tue 04 Feb 2025 18:37:28 +0000
ROA not after:            Tue 03 Feb 2026 18:42:28 +0000
asID:                     21575
IP address blocks:        148.102.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0d:27:ec:8a:fe:6b:f1:e8:1e:be:a6:09:81:e7:55:3a:bc:7b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:28 2025 GMT
            Not After : Feb  3 18:42:28 2026 GMT
        Subject: CN=EF478BE08E0221AB5216976088B057F010D560D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:87:de:cb:b8:c7:34:59:e7:40:ef:72:20:
                    85:a2:e8:0a:ca:46:ee:a7:61:06:da:dc:75:54:b5:
                    15:77:fb:06:05:87:a0:68:39:40:99:c5:f4:70:ec:
                    3b:0a:98:7e:8e:f4:3b:5f:4e:1f:ad:8c:d1:db:73:
                    19:24:00:76:24:8b:ee:97:00:59:cd:06:0d:af:dd:
                    35:9d:5b:d1:00:1f:cd:9d:52:cc:84:1a:a7:a4:8f:
                    b6:e5:3b:fb:24:d3:b2:b8:fa:1e:cc:4b:06:7b:02:
                    05:2e:aa:b6:fa:8f:bd:c0:aa:69:fa:14:4a:fd:62:
                    02:04:02:ae:19:a4:0b:62:e7:33:bd:74:e2:3a:ed:
                    d3:96:21:aa:16:90:91:2a:47:14:09:55:cd:42:6e:
                    6d:f7:e0:89:b3:97:0d:77:79:37:d2:be:05:d0:9f:
                    bc:e1:ad:23:e8:09:27:56:fd:fd:87:d4:ef:0d:fc:
                    77:04:32:cd:c5:8f:81:60:89:4e:db:48:dc:81:0d:
                    5e:8f:65:fe:e2:7b:6d:6f:3f:41:22:2e:2e:03:5d:
                    87:84:89:b7:e9:be:6c:f7:96:0f:6a:ba:1d:da:1f:
                    76:d0:44:4f:72:5e:93:73:d4:93:b3:6a:b4:31:e3:
                    32:89:62:02:c0:2a:8b:e6:fb:12:f0:c2:ee:2d:1b:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:47:8B:E0:8E:02:21:AB:52:16:97:60:88:B0:57:F0:10:D5:60:D5
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e38302e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:41:0a:67:27:31:6b:95:3f:c3:6f:a8:cc:66:c6:7c:04:a8:
         15:b8:6a:c9:02:7b:6b:22:15:6f:08:e0:8a:ae:2d:4b:3b:7d:
         16:d6:b1:2b:64:51:39:3f:30:72:0f:11:56:38:90:2c:f5:f9:
         e2:59:41:a5:43:7d:36:f4:0d:41:ce:3f:15:9a:da:4a:46:ac:
         63:76:55:31:4e:7b:ff:78:39:30:b7:f8:b5:e4:af:cc:c8:93:
         c8:f4:5e:97:e4:ea:e0:e0:1b:13:1a:4f:45:c0:3b:ba:7d:c7:
         e7:cb:3d:99:d8:c3:67:a7:e2:58:a3:0f:4d:4d:41:69:4e:17:
         ee:ad:ab:ca:5b:52:5e:5f:60:fa:69:95:08:9c:3c:45:23:68:
         3c:72:42:c5:2c:68:76:42:31:54:d0:8e:80:0c:49:fc:85:17:
         06:e6:41:7d:8c:73:77:85:9e:ac:19:bb:f1:15:c4:82:03:12:
         58:e5:3c:0d:c5:b8:57:b7:d4:e9:43:e2:42:8e:43:74:ab:01:
         53:a6:54:33:d7:01:c1:dd:38:b1:3d:f7:72:fe:97:a4:46:4f:
         46:96:e5:b0:24:7a:fe:b3:f4:0c:2b:fe:29:ed:09:4f:bd:5b:
         7a:4c:8f:f5:e1:d2:3d:e5:f8:6c:78:69:71:c0:be:92:2e:10:
         59:f7:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:13 2025 by rpki-client