Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e33372e302f32342d3234203d3e203238353036.roa
File:                     3134382e3234332e33372e302f32342d3234203d3e203238353036.roa (raw, json)
Hash identifier:          ySeaKHBBL8D4+C6tZy33jcCZljA/IFvtXCkJ6hcffys=
Subject key identifier:   37:DE:15:A5:A1:4A:AF:22:59:10:D9:8C:95:BA:81:D8:4F:4C:87:17
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       0D446DD361BE0C1E1B83585F3DAD4BE76F0BE7C4
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e33372e302f32342d3234203d3e203238353036.roa
Signing time:             Tue 04 Feb 2025 18:18:53 +0000
ROA not before:           Tue 04 Feb 2025 18:13:53 +0000
ROA not after:            Tue 03 Feb 2026 18:18:53 +0000
asID:                     28506
IP address blocks:        148.243.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:44:6d:d3:61:be:0c:1e:1b:83:58:5f:3d:ad:4b:e7:6f:0b:e7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:53 2025 GMT
            Not After : Feb  3 18:18:53 2026 GMT
        Subject: CN=37DE15A5A14AAF225910D98C95BA81D84F4C8717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:7c:2c:02:0c:25:c1:8e:4b:3c:52:2c:96:
                    22:86:1f:64:8d:64:9c:f1:3d:29:bc:a9:be:de:a3:
                    8a:4c:98:76:fb:21:76:4f:74:97:af:75:1b:7a:e0:
                    f8:13:7e:8a:21:08:9c:ae:d0:68:0c:e4:4a:b0:1e:
                    41:c8:30:41:c2:57:2a:34:98:fe:f8:ab:16:5c:31:
                    df:24:6c:f8:45:e4:ae:ca:45:ed:79:ca:4a:76:0d:
                    4b:e1:70:1c:d0:bb:0b:93:3f:61:24:ce:ef:07:e3:
                    36:85:13:74:26:28:ce:c8:fa:7a:a5:d0:7f:08:07:
                    64:2a:4d:1e:02:f5:5a:be:31:c7:db:eb:39:fc:1d:
                    13:ef:03:13:9a:aa:df:37:82:d9:1c:5e:26:d3:75:
                    42:8c:88:5d:66:58:97:c8:ff:be:89:e7:af:f0:60:
                    cb:40:f3:8b:eb:b2:9c:07:58:3e:2b:67:bf:32:c3:
                    26:ed:3f:2c:b3:1c:35:3c:e7:cb:db:27:fe:de:2f:
                    50:21:db:4e:15:74:c1:8e:cc:97:7a:67:1f:c3:9c:
                    26:f5:b5:3d:dc:09:5d:fc:87:52:70:86:5e:53:50:
                    2b:7a:95:2e:48:ed:21:c7:a9:22:c2:fc:26:0f:3c:
                    fe:fb:b0:18:b2:99:53:c6:d6:bf:e0:5e:6d:5a:81:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DE:15:A5:A1:4A:AF:22:59:10:D9:8C:95:BA:81:D8:4F:4C:87:17
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e33372e302f32342d3234203d3e203238353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:c3:ed:ec:fb:12:d6:89:9e:ec:85:06:7a:5e:91:20:99:f3:
         1f:ff:98:88:24:76:0e:11:79:e1:99:ed:bb:a0:2e:16:3e:0b:
         c1:3f:08:05:f5:fa:a6:1b:21:2e:59:a3:52:78:97:b0:6f:c1:
         84:b3:36:c0:8f:5a:82:04:55:d1:f7:05:33:04:55:5f:9a:db:
         5e:00:1e:b2:d4:1e:6c:55:bd:8c:a6:96:6d:b9:b7:fc:2c:36:
         87:82:67:17:fb:32:33:df:4e:8e:f1:4e:64:08:12:ed:85:fe:
         dd:a8:02:ba:a8:04:14:b8:48:c5:de:a0:50:db:6a:d3:85:ce:
         57:d0:aa:1b:97:d3:e1:fb:6f:ff:56:a1:e3:32:74:f1:1b:f5:
         4c:6a:2e:da:e8:61:2a:63:9d:bb:40:6c:53:19:72:b6:b9:48:
         cf:d7:a5:04:a6:73:91:8e:c8:fa:ca:6b:ef:83:75:c8:fe:e4:
         7a:f6:c1:b8:16:dd:9e:78:63:8a:9d:40:2b:59:7d:95:2d:20:
         8a:0d:45:df:15:41:cf:03:2e:61:bf:d1:30:1c:0d:a4:ed:aa:
         64:70:f3:f9:5a:df:9c:54:c9:99:99:e5:99:29:4b:f1:fc:ad:
         b3:d2:90:18:4e:d7:81:c9:33:dc:48:bb:c8:86:f7:8d:2c:fd:
         73:07:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:35:33 2025 by rpki-client