Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37362e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37362e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          dCZGNE9JHp2vZVZ1angeUAY+Xz5vpco/UlFOrC3w3xE=
Subject key identifier:   A1:29:DA:AF:57:58:6B:93:FC:F1:05:23:23:4F:86:CC:58:E9:7E:B3
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       035B91B6EB6AD8BEF75C30CA03152A37C2F12824
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37362e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 04 Feb 2025 18:18:58 +0000
ROA not before:           Tue 04 Feb 2025 18:13:58 +0000
ROA not after:            Tue 03 Feb 2026 18:18:58 +0000
asID:                     22011
IP address blocks:        148.243.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5b:91:b6:eb:6a:d8:be:f7:5c:30:ca:03:15:2a:37:c2:f1:28:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:58 2025 GMT
            Not After : Feb  3 18:18:58 2026 GMT
        Subject: CN=A129DAAF57586B93FCF10523234F86CC58E97EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:7f:9f:08:01:d6:be:7a:0a:93:80:d6:83:
                    93:6d:91:f3:1e:25:a2:b4:ba:50:6d:ae:ba:98:23:
                    37:be:51:76:f6:8a:d1:0b:e9:2c:a0:a3:a3:58:b9:
                    bb:06:26:46:86:6a:66:15:b0:d0:d4:b6:0e:dc:31:
                    90:24:64:71:ce:f1:14:39:85:dd:e7:69:d9:04:2e:
                    18:8d:bc:9b:f3:3f:df:5c:f9:84:71:49:d7:cd:1a:
                    b8:08:23:4a:be:b8:6b:ea:33:ed:83:e0:b4:1f:83:
                    f0:80:bf:13:42:53:bf:d9:c2:58:4e:c8:85:db:59:
                    14:d8:d6:c1:5d:4c:90:7f:11:a0:85:c5:c8:18:9e:
                    2f:03:ce:6b:e9:47:95:15:d1:14:bf:a1:80:0c:93:
                    2c:94:42:6c:fe:c5:41:33:83:00:12:72:ce:43:54:
                    03:ba:aa:67:97:70:c9:c7:c0:cd:ec:0a:21:3b:ac:
                    42:b1:cc:fc:fd:d2:b0:4f:54:d8:f3:f3:4b:59:93:
                    33:e7:85:ad:d0:d5:49:b0:6e:77:cf:03:72:08:c4:
                    c3:ed:47:8a:40:17:14:0e:2a:90:22:ca:cf:18:62:
                    29:eb:f1:3c:8c:1f:e8:35:a1:77:6c:a1:4f:7a:62:
                    bf:70:f7:16:dc:2c:b9:04:4e:a7:28:bf:87:c4:98:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:29:DA:AF:57:58:6B:93:FC:F1:05:23:23:4F:86:CC:58:E9:7E:B3
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37362e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:a7:54:aa:86:15:8c:fa:ff:f7:da:86:55:e9:8f:11:b6:
         c7:4b:10:da:68:c3:cb:0e:db:b7:8f:62:3e:7d:11:aa:40:87:
         e6:b2:ae:2b:04:05:98:c0:7b:a7:df:0c:6e:b5:de:96:8f:e1:
         9b:24:79:db:08:40:cb:1b:b2:e2:6d:3d:25:99:f2:6e:58:bf:
         93:bf:94:bb:de:c9:43:2f:32:d8:78:19:eb:62:f1:b6:68:04:
         ed:71:16:7b:f3:29:44:93:f9:a4:12:05:9b:08:33:0f:bd:06:
         de:b9:ec:2a:81:e1:f9:16:c2:7e:94:6e:b8:d4:82:ac:06:b8:
         87:87:8f:25:67:04:3d:31:3c:83:4e:ad:bb:9d:35:0d:7d:fe:
         8c:07:b2:c4:c2:bd:0e:de:30:bf:a6:e6:e0:4c:bf:e8:ef:d7:
         44:d0:26:4d:18:b9:d3:ef:a9:9b:3f:b4:1a:f7:4f:0f:89:3b:
         18:54:52:bc:fb:60:7c:6d:ed:02:4c:f5:0c:e0:0d:23:32:cf:
         0a:f1:85:5e:30:60:38:c0:ae:55:6a:01:c2:18:89:6b:d6:e0:
         b8:98:86:0a:9b:33:33:17:72:da:65:1d:43:51:a4:ef:78:49:
         78:f1:47:c3:09:77:93:af:ed:82:9c:47:9f:40:03:e6:ea:36:
         f4:83:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:12 2025 by rpki-client