Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3132322e302f32342d3234203d3e203238343932.roa
File:                     3134382e3234352e3132322e302f32342d3234203d3e203238343932.roa (raw, json)
Hash identifier:          g/IR2Ik9zR10y2ZwRbdnv/Zdz4FRQRStUzuATKcFYlk=
Subject key identifier:   AB:EF:67:9E:DE:BF:D5:EE:23:8E:D0:D5:52:35:6E:31:28:98:A0:8B
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       225785619B418DE7689DC6F61ECE090DDF00175A
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3132322e302f32342d3234203d3e203238343932.roa
Signing time:             Tue 04 Feb 2025 18:18:53 +0000
ROA not before:           Tue 04 Feb 2025 18:13:53 +0000
ROA not after:            Tue 03 Feb 2026 18:18:53 +0000
asID:                     28492
IP address blocks:        148.245.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:57:85:61:9b:41:8d:e7:68:9d:c6:f6:1e:ce:09:0d:df:00:17:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:53 2025 GMT
            Not After : Feb  3 18:18:53 2026 GMT
        Subject: CN=ABEF679EDEBFD5EE238ED0D552356E312898A08B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6e:ae:38:6c:60:7e:24:39:63:d7:97:e0:39:
                    67:11:18:fc:d9:0b:7d:d4:1f:9f:1e:83:a0:71:50:
                    64:6b:e2:91:dc:f7:cd:f7:3f:f1:21:63:a2:76:2b:
                    c0:5f:fa:32:7e:aa:17:44:85:a2:54:c9:56:bb:88:
                    11:76:db:7b:cc:8c:62:30:13:10:28:d5:e5:3e:e5:
                    da:ed:d2:b7:94:2d:53:a0:55:a2:b4:40:a1:51:39:
                    ff:aa:f0:76:5a:94:a1:5b:8f:4d:05:c1:fd:5d:1d:
                    e9:2b:8b:72:69:96:55:73:f5:77:5c:e3:a2:b8:13:
                    5d:8c:30:c8:4e:1b:06:9a:24:7c:5b:e8:5c:fd:7e:
                    8c:46:4f:87:f5:78:18:df:53:8f:e9:9a:c4:fc:aa:
                    62:42:b3:e0:d4:31:7a:2f:f2:cd:02:de:e3:95:8a:
                    88:24:02:6b:75:01:72:55:b9:8c:7f:2b:e4:f1:84:
                    4b:7b:92:0f:dc:df:88:1d:df:a6:75:bd:18:95:16:
                    5d:bb:7e:ef:88:bb:91:1b:cb:5e:86:44:66:a4:11:
                    e1:e1:1d:ae:82:18:cf:a1:eb:cb:c9:0b:35:28:4f:
                    c7:63:18:f7:b9:0d:a7:82:83:76:be:d9:c6:ba:f0:
                    05:5d:51:c0:7a:d2:05:c6:e7:cb:57:10:19:92:8d:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EF:67:9E:DE:BF:D5:EE:23:8E:D0:D5:52:35:6E:31:28:98:A0:8B
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3132322e302f32342d3234203d3e203238343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b7:4b:28:d2:97:44:f8:08:56:58:db:a0:61:77:c6:7b:e1:
         b4:b9:5d:fa:4a:52:3b:4a:d1:8a:04:01:67:df:97:26:4d:30:
         6d:cc:17:7c:4a:ec:d3:34:2f:ba:a9:cf:6a:b3:2c:bb:de:8e:
         19:f8:17:2e:8d:0c:f7:fe:f4:5c:73:34:13:da:b3:91:03:0f:
         b9:3f:0e:af:46:52:44:13:d4:c9:a0:57:b7:bf:44:73:8f:97:
         77:74:97:a1:28:c0:9e:2d:44:03:84:c4:a6:25:78:e5:fd:84:
         5a:54:c1:a4:1e:29:8d:a6:cd:b1:3b:46:f8:1c:2d:c3:5b:8a:
         d2:9f:97:fb:d9:e0:50:5e:35:49:84:a3:ca:3d:39:3a:e2:25:
         9c:58:da:f9:12:82:72:77:82:2b:89:76:e2:a3:93:86:bb:a3:
         8e:9d:de:5d:61:f5:22:df:ce:18:c6:f8:d3:83:32:5e:bc:8d:
         b2:f0:c1:29:a2:50:70:04:ed:6b:a2:f2:69:e4:ae:3c:c2:4d:
         69:1f:31:e0:ac:be:27:9b:d5:3e:82:14:66:91:f1:2b:a9:67:
         fc:27:c7:9c:48:e8:a1:09:15:86:7a:33:29:a6:61:8a:d4:30:
         3b:53:a0:52:a2:4f:9a:76:cd:56:63:46:1e:66:5e:0f:d2:4f:
         30:c3:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:17 2025 by rpki-client