Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e38312e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e38312e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          XMUraTg4IgLQpZ8b1gaiihp97I7UjnHDhYAj4K4lZvs=
Subject key identifier:   48:FE:ED:0D:2D:AE:DC:CC:60:9D:6D:D9:91:28:FB:6A:D8:5D:99:C1
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       74BDE40DC9A6B2CAF43C7D08D5839971C1F1E7E5
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e38312e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 04 Feb 2025 18:42:37 +0000
ROA not before:           Tue 04 Feb 2025 18:37:37 +0000
ROA not after:            Tue 03 Feb 2026 18:42:37 +0000
asID:                     21575
IP address blocks:        148.102.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bd:e4:0d:c9:a6:b2:ca:f4:3c:7d:08:d5:83:99:71:c1:f1:e7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:37 2025 GMT
            Not After : Feb  3 18:42:37 2026 GMT
        Subject: CN=48FEED0D2DAEDCCC609D6DD99128FB6AD85D99C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:3b:13:91:7e:93:d6:ea:3e:24:df:96:a7:
                    35:d1:10:f9:f2:87:55:19:e4:67:6f:9f:32:4c:08:
                    2b:f0:31:03:75:15:b0:14:97:ad:66:75:b0:3b:84:
                    a8:1e:75:de:7b:17:67:8d:83:88:1e:26:3b:c0:86:
                    6f:ed:a1:3d:25:4b:de:b4:a1:56:df:4f:71:33:9c:
                    4b:0f:da:c4:be:db:2b:c3:ed:71:74:9c:b4:fb:34:
                    41:e5:fe:06:f7:79:65:c7:f1:43:df:5a:32:7e:47:
                    a8:c6:e3:9d:07:fe:47:e9:36:88:96:6a:8c:9b:e1:
                    14:dd:20:3f:a5:87:fb:ab:a8:09:aa:9d:61:fb:35:
                    f4:ad:b9:5d:dc:17:45:b8:0f:96:36:fa:c4:c9:b3:
                    16:df:2f:bb:5c:9e:df:ca:0b:6b:14:59:f5:93:a0:
                    95:49:fc:8d:f0:01:d7:f1:ec:ad:63:dd:8c:ab:d9:
                    34:77:19:c5:56:cf:12:77:d8:18:c7:7b:66:1f:e8:
                    e5:b8:9d:68:e8:3f:09:69:1c:ec:b5:5c:2f:b4:ce:
                    ba:58:83:ee:38:33:06:51:f4:47:4a:81:4b:2f:61:
                    4f:26:06:a5:23:bb:4e:68:4d:93:96:98:ef:c9:ee:
                    47:b1:fd:e8:59:3e:6c:2a:43:46:d0:c4:4e:0f:31:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FE:ED:0D:2D:AE:DC:CC:60:9D:6D:D9:91:28:FB:6A:D8:5D:99:C1
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e38312e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:65:2b:5a:bc:73:f4:d2:aa:8c:54:2e:7f:48:be:fa:dd:76:
         8a:83:7e:73:4a:c0:27:99:42:f0:d6:59:34:51:ac:5b:85:f6:
         15:1b:0f:9a:1a:42:09:98:74:f9:5b:cd:52:69:a2:80:22:70:
         a3:16:d5:18:40:d3:b8:f0:e5:6e:5a:9c:b9:f8:42:ea:96:1b:
         05:53:cd:53:3d:ca:98:b9:3b:62:ee:32:5a:5b:49:17:74:13:
         c2:a5:e4:a2:e4:a2:66:1b:72:cc:f7:2c:51:e1:53:2f:76:2a:
         42:89:c0:f0:a2:85:3a:ac:ba:b3:ad:2d:12:34:1c:b3:cc:72:
         31:78:03:22:1f:0e:55:38:6f:61:20:bc:63:f1:73:fa:fd:7b:
         ce:6e:cc:1c:92:95:02:71:1d:10:05:d2:6a:ec:99:e7:87:02:
         90:20:b0:2d:11:ca:e3:af:6f:ab:93:06:c4:60:d7:4a:47:db:
         f1:d5:54:40:8b:f4:79:bc:f9:d1:73:8c:9e:b7:b7:04:3c:c3:
         16:87:44:a8:85:98:fd:d0:c7:bd:59:e3:7a:aa:2e:74:22:38:
         85:18:10:5c:36:01:0c:c3:73:37:21:bc:32:a5:45:2f:3e:68:
         65:cb:6f:b5:51:5a:4c:2c:d3:13:45:d6:05:4c:76:c2:33:ff:
         88:03:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:29 2025 by rpki-client