Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3138342e302f32342d3234203d3e203131313732.roa
File:                     3134382e3234352e3138342e302f32342d3234203d3e203131313732.roa (raw, json)
Hash identifier:          LdG9AhAXAsoUKP8f/fpaOujUVdZb8sdHDW4OD9DZGA0=
Subject key identifier:   85:C3:B3:48:20:92:94:68:CC:0C:E7:02:54:45:31:BC:57:BE:C4:7C
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       3975FC3A50D1BDB1DEDB1C992048BEE5865F2EB8
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3138342e302f32342d3234203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:18:51 +0000
ROA not before:           Tue 04 Feb 2025 18:13:51 +0000
ROA not after:            Tue 03 Feb 2026 18:18:51 +0000
asID:                     11172
IP address blocks:        148.245.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:75:fc:3a:50:d1:bd:b1:de:db:1c:99:20:48:be:e5:86:5f:2e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:51 2025 GMT
            Not After : Feb  3 18:18:51 2026 GMT
        Subject: CN=85C3B34820929468CC0CE702544531BC57BEC47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:56:07:f1:2c:e5:d2:df:ed:0d:9d:35:40:
                    19:51:13:40:8a:2f:23:e9:55:2d:e8:a0:9c:21:2e:
                    d6:df:c1:6d:1f:23:ca:bd:b5:a2:4a:37:3b:b6:85:
                    be:84:45:0b:ff:ba:12:30:43:18:35:4b:1e:0b:59:
                    88:23:16:e6:08:5b:5a:dd:07:a6:b3:f2:fe:12:14:
                    ba:b4:78:1b:60:15:f0:9a:1b:7e:ac:e2:b3:7f:4a:
                    c2:c3:06:79:a4:c1:99:d2:32:d7:44:d9:f0:f5:72:
                    88:5a:7b:3d:5c:d6:12:63:af:ca:60:9a:0e:8e:36:
                    ea:9b:a1:67:5b:38:c7:b4:93:71:09:e5:13:d7:2c:
                    8c:41:44:c9:97:82:3a:ce:1a:e6:31:40:f7:6b:a4:
                    5e:16:7b:41:7d:ed:de:68:75:f3:25:92:e9:55:9b:
                    6d:3b:80:bc:3f:fb:03:08:ed:a2:db:53:80:9f:0a:
                    c4:98:f8:6d:96:ce:be:04:d0:e3:da:68:23:8b:a6:
                    6e:a5:07:ab:a6:90:bc:0f:87:af:bb:30:63:d5:14:
                    7c:54:5e:7f:76:db:94:76:02:4f:f1:fc:8d:fb:7f:
                    d3:bb:a0:c3:e4:70:f8:77:4c:8a:e1:ee:5b:64:7e:
                    40:09:1e:04:e4:8d:6f:e8:f7:ff:05:97:1f:30:07:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:B3:48:20:92:94:68:CC:0C:E7:02:54:45:31:BC:57:BE:C4:7C
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3138342e302f32342d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:d4:11:4b:76:cf:b4:90:c0:b7:63:2a:9c:1f:d4:c9:eb:
         e7:c5:a6:bc:5e:c8:01:d8:d8:40:61:75:8b:f7:9d:14:9c:d1:
         ae:ca:33:17:e1:27:a6:f3:d1:ad:09:bc:81:68:93:ac:17:6d:
         46:a8:cf:06:f5:d9:a5:b7:fb:e0:1f:22:5e:58:bb:70:91:e9:
         e9:77:aa:22:b6:63:9f:3b:2b:48:78:e2:ab:9b:8e:c4:38:fb:
         20:b9:68:89:4e:85:68:b0:4b:ec:53:6e:14:a6:2a:53:11:4d:
         97:2a:db:76:43:26:eb:46:a2:c2:f8:54:e5:6c:08:cc:7f:60:
         cc:91:b0:46:14:9e:ac:28:ba:40:72:4b:d7:54:f7:f1:a7:cb:
         87:8e:a4:83:84:8c:ec:36:36:05:d6:54:42:d6:c9:9d:3e:8e:
         0b:2b:1b:e5:4e:99:63:4a:f2:69:d8:c5:12:98:8b:03:33:80:
         60:b6:ec:44:53:73:ff:c8:40:e5:9b:d5:fd:da:b4:41:21:fc:
         a9:0f:01:52:89:eb:0c:07:3b:1c:05:11:4b:82:c0:38:38:06:
         d2:b9:bb:bb:6a:11:8d:09:0a:5e:42:9d:45:87:80:48:d1:cd:
         78:f0:9a:a7:b8:58:80:9d:d2:c7:40:bb:e8:8f:59:d5:fa:bf:
         d7:7b:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:11 2025 by rpki-client