Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/09968934f1a331ba0649996fe35f04f8c1ca305f.roa
File:                     09968934f1a331ba0649996fe35f04f8c1ca305f.roa (raw, json)
Hash identifier:          +3zf8MC0uuROtbK2x2jJpH1JxKxeHclGofzxMPT6REI=
Subject key identifier:   B0:53:EA:27:80:F6:92:A9:5B:69:B3:50:4E:80:6E:38:86:36:AF:B8
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       14062C
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/09968934f1a331ba0649996fe35f04f8c1ca305f.roa
Signing time:             Mon 18 Oct 2021 17:19:28 +0000
ROA not before:           Mon 18 Oct 2021 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312300 (0x14062c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Oct 18 03:00:00 2021 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=09968934f1a331ba0649996fe35f04f8c1ca305f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:1e:46:ee:01:57:50:c6:3b:f2:84:79:6b:
                    b3:c6:de:5d:52:0d:d4:57:da:97:74:74:f1:73:ce:
                    82:e3:e2:32:c6:c6:a3:3e:47:fa:a1:99:3b:eb:45:
                    a9:ae:d1:b3:f6:81:59:ec:14:87:9b:87:12:4a:87:
                    fa:46:cf:44:27:13:82:f0:b9:ce:de:4f:1b:dd:4b:
                    f8:35:e2:af:20:31:d2:df:d0:13:5a:4a:26:eb:7b:
                    32:ba:d9:59:b8:75:9c:fd:23:5e:07:26:49:99:6f:
                    5e:80:9b:f0:1d:20:43:02:4d:c7:62:94:a6:b1:24:
                    87:33:35:80:cf:6d:da:ae:fb:e8:00:37:ac:2d:e3:
                    d4:d2:06:07:d9:2b:97:56:28:23:0d:20:e2:92:43:
                    57:50:a3:70:1f:2f:19:58:20:31:5e:5c:ba:b9:b4:
                    3a:fa:cd:15:b3:ed:f7:83:f1:ab:8d:57:72:ad:0c:
                    73:41:d8:70:38:e8:f9:1a:e2:41:48:a2:39:ab:99:
                    f0:75:6b:3a:55:c7:a7:df:63:56:9e:86:40:a2:5c:
                    78:5c:51:a9:35:09:ea:02:7b:32:8b:46:0e:9f:13:
                    6c:52:11:2a:10:a4:b1:92:9d:44:4d:9e:3b:2a:03:
                    bf:be:19:fe:94:2a:ed:c2:56:92:b6:4a:ad:0e:20:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:EA:27:80:F6:92:A9:5B:69:B3:50:4E:80:6E:38:86:36:AF:B8
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/09968934f1a331ba0649996fe35f04f8c1ca305f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:de:eb:4d:70:dc:87:00:25:0c:62:2e:55:b0:6d:9b:6a:39:
         de:7e:fc:c9:a2:d3:4e:db:77:76:02:47:6b:1f:8a:19:24:4f:
         5a:c0:05:d8:c3:5f:f1:e9:69:a1:fb:c2:7b:b0:e9:ce:c3:d8:
         57:7a:42:c4:96:96:7f:ae:92:1b:c7:01:6c:84:a7:3c:07:7c:
         d4:8b:91:85:4b:34:c9:05:f4:aa:2b:64:da:8a:01:8f:24:bf:
         16:7b:88:14:22:1e:b6:a2:c2:34:b3:4b:bd:76:7d:9c:ea:db:
         9e:c9:30:87:70:16:34:1c:8b:a0:1c:05:7c:62:5e:a7:a6:a6:
         0d:61:e5:ef:7c:ad:c2:c2:8e:d3:41:91:24:c6:f3:b3:bd:74:
         2f:20:68:d2:24:87:d8:1e:11:99:04:1d:1d:e5:39:14:06:b9:
         ac:c8:5b:b8:cb:5b:92:dd:53:c8:a4:8c:a5:40:8e:ba:18:98:
         1f:91:ae:61:13:86:4e:5f:7b:f5:1f:e7:27:92:2d:e8:eb:40:
         ef:0c:59:6a:72:8f:28:e4:ee:d8:54:43:cb:fc:dc:d4:13:6a:
         df:b1:a9:a4:2c:ac:21:8b:5f:e0:87:25:ec:e1:af:39:43:1b:
         e4:a5:17:36:3e:0b:9b:33:88:ba:79:2a:d9:e8:30:e7:38:1f:
         13:66:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:55 2024 by rpki-client on console-fra.rpki-client.org