Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/14f9fc127b1c4f5302becd0429b683c2be8957ca.roa
File:                     14f9fc127b1c4f5302becd0429b683c2be8957ca.roa (raw, json)
Hash identifier:          7GkYYey6SaWr9d7m5hsAgs2KzxHd9ZW1iZ70p5XImj4=
Subject key identifier:   57:D4:76:11:1E:FE:E7:BF:D1:97:98:0A:33:93:3C:0F:F2:16:4F:97
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E7907
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/14f9fc127b1c4f5302becd0429b683c2be8957ca.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948487 (0xe7907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=14f9fc127b1c4f5302becd0429b683c2be8957ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:b3:02:3e:7c:1e:0d:19:18:9a:b5:5a:e8:
                    de:ca:d9:00:66:cc:4d:f9:bd:89:11:f1:27:ce:09:
                    e5:76:a3:78:53:ce:ed:50:6f:c1:a1:af:94:c0:1d:
                    2b:db:11:5d:fd:48:89:d2:2d:4e:f3:3e:2e:13:fe:
                    ca:95:ae:3c:8e:92:4b:ec:91:23:0d:e4:80:2b:35:
                    e4:5e:6d:ed:82:cf:02:b7:ba:04:f1:d1:ec:3e:b4:
                    40:e0:4b:d1:3c:b4:fd:b7:cc:7b:a2:52:b2:72:f3:
                    ae:02:f8:b0:4c:b1:2c:21:06:aa:48:3e:fb:0b:b0:
                    d9:ce:c2:0a:86:b9:1b:92:ce:58:5d:56:b0:99:2c:
                    ad:04:4a:cf:60:cb:95:5b:36:b5:64:9a:d9:be:e9:
                    f4:80:49:c6:f2:c3:5e:8b:ab:da:ef:4f:aa:99:26:
                    55:7b:0e:3d:75:4e:54:bd:c1:97:d9:65:e6:4f:39:
                    91:35:69:1b:12:2a:48:4e:11:39:6b:64:94:fe:b2:
                    47:2a:93:be:28:49:97:1a:87:08:e2:73:d6:42:e9:
                    ec:ca:17:3b:ac:0b:5a:cf:d5:1b:af:11:34:f5:6a:
                    71:cc:c4:c1:af:b2:1b:e9:7d:95:2a:f6:26:81:fe:
                    66:19:e4:b8:b8:e9:d8:5d:85:cf:0e:7c:b3:6d:19:
                    c6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:76:11:1E:FE:E7:BF:D1:97:98:0A:33:93:3C:0F:F2:16:4F:97
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/14f9fc127b1c4f5302becd0429b683c2be8957ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:1e:e4:ad:63:3d:65:54:66:39:20:ab:4d:fb:7a:92:b1:
         e9:1c:31:4d:69:3a:c2:c7:17:69:7d:93:8d:98:be:63:e9:83:
         10:dd:47:9a:70:5c:22:3c:ad:05:8c:fa:49:56:81:17:3f:f9:
         3d:85:4f:17:be:fb:3d:65:d5:19:f3:9f:7a:9c:f3:1e:7c:f3:
         c3:53:ec:5e:be:4c:44:ad:ca:f3:f4:e0:24:96:1a:b8:7c:a8:
         3d:9a:28:ce:7c:e5:67:08:e6:7f:99:54:8c:ea:8c:a7:49:ae:
         02:49:1b:e1:07:59:8c:71:e1:30:82:ab:2b:e3:86:70:e1:10:
         2c:01:c4:12:75:c4:dd:b7:f9:6d:9f:6c:ae:26:20:1c:17:a5:
         5d:82:34:6a:a0:06:21:db:4c:8d:b3:cd:6f:63:2d:40:b6:3a:
         89:27:53:0d:8a:fa:b9:f5:f4:31:be:0f:b5:7a:68:9f:d9:bd:
         69:e7:b1:88:82:e6:54:4a:67:ea:38:34:0e:4d:4a:84:0a:83:
         4d:8b:5e:6c:0c:52:30:36:e0:18:66:ca:36:36:5c:88:90:6d:
         68:7e:06:ca:26:a1:77:1c:0c:55:df:0f:71:f4:19:c6:bf:e0:
         ef:34:3c:5b:32:e6:07:0b:1f:35:00:25:e5:66:83:c9:1a:eb:
         64:12:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:55 2024 by rpki-client on console-fra.rpki-client.org