Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa
File:                     3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa (raw, json)
Hash identifier:          QattDbItpVE6HPCZr79oDr/frooaV6Te+YQtgObMB+U=
Subject key identifier:   F4:8E:4B:08:EF:E0:0A:DA:D8:88:9E:F6:BC:FC:44:6D:2F:CC:DD:42
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       7A395AF17B9FBFBD6FB63E8FF9B5EAC71E9D5BEA
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa
Signing time:             Tue 04 Feb 2025 18:18:49 +0000
ROA not before:           Tue 04 Feb 2025 18:13:49 +0000
ROA not after:            Tue 03 Feb 2026 18:18:49 +0000
asID:                     28509
IP address blocks:        148.245.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:39:5a:f1:7b:9f:bf:bd:6f:b6:3e:8f:f9:b5:ea:c7:1e:9d:5b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:49 2025 GMT
            Not After : Feb  3 18:18:49 2026 GMT
        Subject: CN=F48E4B08EFE00ADAD8889EF6BCFC446D2FCCDD42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a4:82:9e:a3:eb:92:fd:f1:4e:18:9e:46:c6:
                    3d:4a:97:f4:66:5a:cc:9b:24:90:8b:fa:13:5a:c4:
                    43:64:58:68:8f:10:bd:83:71:30:63:9f:c0:b6:fb:
                    9d:59:18:6e:47:fb:35:8b:33:da:62:8a:5f:b2:37:
                    4e:be:ef:1c:81:c9:a2:7a:02:a8:62:f2:80:34:19:
                    50:a7:d9:e8:e8:4a:59:8d:ae:6f:10:81:fa:14:93:
                    21:2d:d1:2c:c6:15:d6:f7:b2:ea:e2:a8:e8:a7:ff:
                    23:4e:1e:51:cf:1a:dc:ae:88:6b:3b:5b:0e:0e:81:
                    c0:89:a9:3f:13:af:49:fe:1c:2f:2d:dc:74:3b:ac:
                    31:fe:1e:7b:31:11:56:2f:25:4b:cf:7d:ef:87:79:
                    f8:1d:bd:68:54:5a:67:31:56:c8:35:75:db:c9:44:
                    83:43:a6:52:5b:a4:4f:17:7c:21:1b:d6:d8:c2:73:
                    2e:b3:27:5c:a5:eb:1b:98:28:bb:5f:56:25:b5:ca:
                    8d:a6:e6:fc:b8:6a:0a:7b:d9:42:27:7e:d3:66:95:
                    86:41:00:92:fd:a0:8c:3e:5d:25:36:2b:9c:b7:6c:
                    25:fa:28:e1:2a:8e:70:77:cf:97:d9:b2:29:b7:0c:
                    5c:d0:e5:b0:d0:5a:d1:70:86:76:78:cc:d7:19:42:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8E:4B:08:EF:E0:0A:DA:D8:88:9E:F6:BC:FC:44:6D:2F:CC:DD:42
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:06:4d:75:dd:62:02:92:dd:ec:d0:80:12:3c:b3:19:de:88:
         11:bc:a1:c7:c4:2f:0d:b2:2d:66:4c:ca:af:d1:5a:75:18:7a:
         f6:6b:39:ed:1f:32:e7:a3:60:f1:39:29:13:20:ac:d2:36:07:
         3a:da:96:85:db:69:49:78:31:e2:4b:af:56:33:6d:24:35:c3:
         8a:de:23:20:68:18:49:fb:7b:22:2c:15:e6:62:7e:7d:e0:7d:
         b1:51:a3:00:22:cb:66:90:3a:6a:b9:21:9c:bc:bd:d7:c6:ee:
         14:ec:f3:27:d2:dc:fe:66:0b:4a:af:d6:0b:5d:be:f4:47:1e:
         59:50:98:88:15:87:7f:ea:53:ec:b8:62:e7:84:19:79:9e:fc:
         c1:82:29:81:48:01:36:42:30:56:0a:95:d8:96:97:e7:1a:0e:
         76:0a:e9:cb:59:b2:d6:5f:f3:9f:fd:cc:13:8d:4c:55:e7:69:
         c1:28:da:90:6b:db:ed:82:47:16:a0:1d:b8:5b:fe:57:49:6e:
         c3:80:34:4b:1f:a1:52:7e:76:31:b8:9a:c4:ec:d4:ef:1d:8e:
         f2:eb:f9:14:43:0a:db:5c:c5:e4:14:ef:80:fc:0c:81:82:94:
         5f:45:4b:8f:57:82:9b:f7:21:27:5b:c9:98:6f:4b:ce:dc:7d:
         80:20:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:17 2025 by rpki-client