Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36372e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e36372e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          t4RqxTNP7zG6ZxPtl8AW6V0dQDOUSuWwce+rBHFAWY4=
Subject key identifier:   34:24:FB:9F:13:79:EC:4A:3B:36:77:1D:C7:7C:88:BC:BB:9A:C4:B9
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       5CC28DC6499E47B22AAABDE9A842EB0EBD38A14B
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36372e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 04 Feb 2025 18:18:48 +0000
ROA not before:           Tue 04 Feb 2025 18:13:48 +0000
ROA not after:            Tue 03 Feb 2026 18:18:48 +0000
asID:                     22011
IP address blocks:        148.243.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c2:8d:c6:49:9e:47:b2:2a:aa:bd:e9:a8:42:eb:0e:bd:38:a1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:48 2025 GMT
            Not After : Feb  3 18:18:48 2026 GMT
        Subject: CN=3424FB9F1379EC4A3B36771DC77C88BCBB9AC4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:d1:25:8a:38:12:26:c9:33:99:c5:68:5f:
                    b4:ed:09:e6:4c:00:63:9b:37:d1:9b:8a:90:5c:0a:
                    c1:98:77:48:cc:66:85:25:b6:db:32:7e:56:8d:e4:
                    32:b4:e9:fc:9b:17:35:d6:71:95:99:53:fa:61:0d:
                    2b:b4:29:3e:db:5a:44:4c:f4:91:9d:43:ca:2e:d8:
                    63:92:3d:4c:02:f0:eb:95:15:6e:a6:9c:e6:d0:72:
                    07:fd:bb:74:41:a8:14:c6:67:da:96:f9:af:eb:57:
                    86:b5:74:1e:89:e0:32:5e:69:34:7e:99:6b:fe:fa:
                    57:67:59:95:39:e7:16:e7:31:40:f3:4e:ca:5e:97:
                    68:bd:d8:6d:33:b4:e4:c2:f8:2d:88:96:ab:87:ec:
                    33:48:0c:20:52:e9:6c:c7:7e:7f:fe:43:49:13:1c:
                    26:01:85:2f:ea:f7:72:13:e9:1b:38:37:b5:b8:38:
                    54:bf:36:f7:71:bb:c9:bf:aa:c5:85:00:86:7c:af:
                    e0:19:94:8d:fe:1d:2f:56:87:7a:6e:9e:76:ab:dd:
                    28:c8:76:a7:e9:f9:41:7b:db:47:a1:67:d4:9c:dd:
                    d8:e3:7b:27:cb:ca:f6:ff:30:e9:39:6b:ac:1c:16:
                    5c:0b:f2:cf:d7:b6:60:80:a6:3c:84:c4:14:84:e5:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:24:FB:9F:13:79:EC:4A:3B:36:77:1D:C7:7C:88:BC:BB:9A:C4:B9
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36372e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:59:69:8a:38:70:e5:a0:30:f8:a4:bb:1c:19:4d:19:a6:9b:
         4b:6e:07:a3:d9:ad:3d:97:db:fb:16:0d:7f:cc:f9:df:3f:ab:
         08:cf:1f:f7:5d:85:57:3f:d8:15:d8:60:a3:c8:c0:c6:62:4e:
         e7:f1:97:b1:96:0e:15:be:52:47:c9:02:f2:b4:cb:e9:6a:eb:
         bf:cc:c0:54:5a:86:f4:05:50:9f:dd:bb:02:a2:d2:41:5c:1b:
         7e:20:9a:75:fa:e2:6c:1b:af:ef:43:bf:ef:f9:ad:6d:04:83:
         2e:a8:6a:cb:5e:a7:8c:04:7e:f7:3d:d6:86:ec:14:97:28:97:
         28:98:d7:ca:a9:02:36:d0:4c:e3:ed:1f:f4:8e:cf:ba:e5:81:
         8f:2c:76:ed:61:6d:1f:13:28:db:33:b6:bb:01:64:77:78:99:
         3c:6d:bb:c7:6b:47:55:66:8a:15:18:21:31:08:0d:81:e9:f9:
         d3:7d:a9:2d:d2:0c:8b:fd:6c:1c:89:da:b7:9f:ad:31:d5:90:
         74:e8:2f:f6:96:85:c4:d8:3a:49:a7:c1:bb:07:e1:8a:fa:05:
         d6:46:ba:af:8b:33:2b:a3:5b:c6:39:e2:90:5a:fb:4d:8d:3a:
         62:7d:5b:5e:6a:40:32:c1:6f:29:e8:2f:db:d8:9a:0b:31:65:
         e0:9c:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:09 2025 by rpki-client