Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/0b0d13eab946d5c4ed1f05d3c7c027783e5b9d16.roa
File:                     0b0d13eab946d5c4ed1f05d3c7c027783e5b9d16.roa (raw, json)
Hash identifier:          0QE55+pntRLHKhKHu8CIyjvnaOGLt+UxUzcuRA7rwao=
Subject key identifier:   5A:30:E5:8A:C9:5A:70:19:39:2F:72:B5:ED:5A:CE:90:4A:F1:48:7F
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       235537
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/0b0d13eab946d5c4ed1f05d3c7c027783e5b9d16.roa
Signing time:             Thu 04 May 2023 18:19:37 +0000
ROA not before:           Wed 03 May 2023 18:19:37 +0000
ROA not after:            Sun 04 May 2025 18:19:37 +0000
asID:                     52323
IP address blocks:        181.16.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2315575 (0x235537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: May  3 18:19:37 2023 GMT
            Not After : May  4 18:19:37 2025 GMT
        Subject: CN=0b0d13eab946d5c4ed1f05d3c7c027783e5b9d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b0:a5:ab:47:77:b0:94:98:c1:bb:55:1e:b6:
                    c9:a9:ed:39:26:28:55:c4:2f:1f:8d:9f:d3:c0:a7:
                    fe:6f:76:f2:54:ee:41:ac:36:aa:78:09:b7:31:61:
                    d6:8d:95:10:c0:46:64:91:98:70:2b:76:1d:5a:21:
                    ba:dc:d5:2e:c3:ab:a6:be:6a:15:8f:72:83:08:d2:
                    47:98:fb:bb:fd:d9:6f:03:c2:74:ff:da:c3:d8:4b:
                    c8:0e:15:7f:f4:a0:70:ae:81:66:7c:fd:ec:b3:7e:
                    55:c2:5e:5b:12:5a:6f:ef:96:d1:55:8f:87:90:05:
                    89:98:a4:35:14:0b:1f:e2:2d:43:53:11:0d:82:b3:
                    31:69:14:77:ab:b9:e1:cb:4b:29:43:46:48:6d:dd:
                    6d:5f:3a:dd:22:9d:57:8c:87:ae:6a:94:24:80:ef:
                    ef:36:99:05:2c:03:3a:f3:9a:5f:ad:95:52:b7:0d:
                    cb:14:9f:1b:7b:d7:62:ac:bf:f2:6c:86:29:3d:74:
                    18:fe:db:04:f7:0d:c2:4c:2e:b7:2e:3e:db:67:8b:
                    d7:f8:f2:a5:99:2e:8b:d4:b3:f0:6c:bb:ac:ee:b6:
                    07:ab:26:64:1a:67:54:7a:7e:88:a0:71:3b:d2:1c:
                    95:01:e4:e1:a0:63:3b:f9:39:60:d8:cd:f7:33:d2:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:30:E5:8A:C9:5A:70:19:39:2F:72:B5:ED:5A:CE:90:4A:F1:48:7F
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/0b0d13eab946d5c4ed1f05d3c7c027783e5b9d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:3d:88:9b:d5:c1:52:0b:31:2f:90:55:3e:3a:f6:6e:ca:5a:
         20:6a:72:5d:08:b3:ec:0f:3c:0e:5f:3b:f9:94:69:94:a3:9b:
         16:16:08:b4:88:e8:8d:70:98:a9:05:8c:19:ad:c1:5e:6e:6e:
         aa:99:21:da:8e:68:95:eb:a8:33:be:d2:0a:34:07:ee:7e:a4:
         f0:0f:51:54:10:c7:c9:42:4a:4a:ac:aa:20:a0:f2:01:c3:97:
         00:ca:d9:ac:e8:35:b2:21:1e:36:1c:78:ac:4f:04:37:b9:d1:
         90:a5:5d:f0:dc:cb:a9:10:1b:85:45:bd:f3:34:9e:13:3e:a7:
         5c:d1:dc:cb:50:d2:d2:dd:6b:66:8a:49:6d:0f:82:b8:88:83:
         08:74:f3:04:ce:8a:c8:91:aa:b0:46:50:24:8e:c0:05:da:ac:
         ba:03:93:3f:7e:c3:cf:61:0a:f9:fa:38:10:77:10:43:f9:73:
         07:32:4f:3d:b6:e5:6d:76:17:c1:26:a3:c2:79:93:5b:2f:bb:
         d2:91:2c:23:cc:f8:42:20:c2:6b:6e:98:77:1d:8a:88:56:08:
         ca:d6:cf:6f:1f:f4:8e:f2:6b:e3:b2:9f:cd:14:47:4b:3a:6d:
         e4:92:47:7e:81:e1:ba:c7:cb:d7:d7:46:2d:a9:d5:37:7c:fe:
         4c:e3:25:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org