Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3133352e302f32342d3234203d3e203131313732.roa
File:                     3134382e3234352e3133352e302f32342d3234203d3e203131313732.roa (raw, json)
Hash identifier:          pIaTOxAazxmm1gOJ6sE/p0sXNWfOZAYq4Vu2QRX0+Oo=
Subject key identifier:   1D:BE:CA:28:FB:93:1C:33:56:6D:19:34:4A:1C:79:3D:2E:57:57:82
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       672D1E76E3A5752DD00437D8F37BEFAD3159BB8A
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3133352e302f32342d3234203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:18:57 +0000
ROA not before:           Tue 04 Feb 2025 18:13:57 +0000
ROA not after:            Tue 03 Feb 2026 18:18:57 +0000
asID:                     11172
IP address blocks:        148.245.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2d:1e:76:e3:a5:75:2d:d0:04:37:d8:f3:7b:ef:ad:31:59:bb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:57 2025 GMT
            Not After : Feb  3 18:18:57 2026 GMT
        Subject: CN=1DBECA28FB931C33566D19344A1C793D2E575782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:ed:85:ca:d8:e0:a9:7a:fa:8a:c9:35:07:
                    67:1e:79:e7:07:8d:ae:50:e1:24:3d:2d:78:56:66:
                    c2:f2:e2:27:5f:89:8d:8c:5f:6e:db:ec:df:05:07:
                    a2:73:4d:e7:eb:66:83:b2:27:ea:23:5e:88:3e:16:
                    0b:f7:f4:b2:e9:cc:5c:bf:c0:42:8a:a0:3c:4f:d4:
                    0c:aa:5f:73:5c:f1:7c:e9:1b:10:c6:32:bb:d3:15:
                    7c:65:4d:ac:24:27:e7:ec:9d:ee:f7:83:b6:ed:05:
                    65:37:f1:0d:48:f9:2c:60:51:e7:25:68:50:09:a6:
                    d8:1c:9a:a9:93:dd:4c:1b:ff:d1:74:8c:9b:68:c9:
                    77:90:b6:e6:e6:03:fa:a1:6d:0c:f8:18:8f:3f:7b:
                    a6:3c:a2:18:d8:00:a7:66:a1:6d:48:88:9f:0c:21:
                    2e:8c:35:d1:25:12:a9:cc:5f:7e:0d:9c:27:82:10:
                    95:a4:ba:7f:f9:46:90:98:95:97:ab:78:42:3a:b2:
                    a7:52:5f:6f:04:f0:58:59:b3:a5:38:2a:7e:37:1d:
                    f0:25:ca:11:c6:3a:b1:56:1d:f5:57:a1:7c:45:e3:
                    60:39:1f:ba:58:61:34:75:79:71:48:af:d2:ad:85:
                    9c:62:cb:df:56:bc:29:5f:c1:46:6d:db:96:97:11:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BE:CA:28:FB:93:1C:33:56:6D:19:34:4A:1C:79:3D:2E:57:57:82
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3133352e302f32342d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d9:3d:5a:ce:27:8d:e3:ea:e4:ad:ac:fb:e9:83:35:b7:39:
         1c:61:ef:46:03:52:d6:ec:d8:4c:d9:c4:05:d9:d7:73:cf:47:
         a9:cd:0c:1a:ea:a0:9b:61:a1:38:5e:62:45:62:9e:6f:6c:55:
         0c:18:a6:45:7f:ce:92:fc:ac:9c:93:41:6d:41:46:1a:6e:43:
         af:2d:cf:2c:b7:1a:64:82:aa:d6:50:cc:95:70:5c:d2:ab:10:
         16:47:bb:e6:66:cc:fc:ae:0c:54:54:06:d1:6b:50:09:f0:cf:
         17:57:78:0a:36:5a:9b:7e:1d:f8:8e:f3:8b:c5:81:dc:66:83:
         a7:38:03:35:88:29:1d:31:33:34:f3:68:cf:7c:bc:44:a1:6f:
         04:49:5c:9b:5c:e6:d5:0d:5f:c7:e7:d8:96:9d:ad:f9:f2:5c:
         c9:e9:7f:9a:46:e3:e2:fe:ea:b9:8b:de:0e:a3:19:34:64:60:
         e9:f6:63:79:49:43:31:e6:c5:93:06:ad:f1:c9:e1:0d:66:b0:
         5c:56:6e:a8:0a:a7:bd:cf:79:83:05:0f:f3:e0:92:85:e9:dc:
         ef:2d:8a:0b:c4:9b:f3:9f:4c:22:f6:ef:01:9c:25:3d:6f:c4:
         3c:27:a1:1b:31:70:ef:41:ec:2c:6d:8a:16:16:6b:a4:ad:43:
         44:0e:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:53 2025 by rpki-client