Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/1d6caf310bf9fa77a0e0a02f568ca2ab38029c2c.roa
File:                     1d6caf310bf9fa77a0e0a02f568ca2ab38029c2c.roa (raw, json)
Hash identifier:          UnaQ6fx6PmSjQPVZi+K9b9VKYTQrSz3+DOs8IdhauZA=
Subject key identifier:   6E:BA:59:E0:AA:7D:C9:ED:F2:E5:7C:8F:AD:31:26:F5:57:0D:7A:6E
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E94A3
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/1d6caf310bf9fa77a0e0a02f568ca2ab38029c2c.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955555 (0xe94a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=1d6caf310bf9fa77a0e0a02f568ca2ab38029c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:76:9f:f0:a7:8a:4c:d1:d6:7c:48:11:a6:
                    41:fe:50:af:20:8c:8e:82:59:74:c8:9c:a3:72:2a:
                    e4:78:a6:85:d7:30:7a:2a:58:8b:6f:5a:c9:ff:fb:
                    ba:c7:8e:b2:33:b9:47:20:ed:2a:cb:29:b3:64:5c:
                    2c:bf:75:c6:e8:4a:84:c6:25:be:05:f8:ce:ba:69:
                    7f:8d:23:f5:44:7f:87:c4:5b:96:ab:6d:e3:ad:c9:
                    8f:3b:4d:35:d2:31:cc:2b:b7:ac:17:0e:17:76:b2:
                    bf:a8:a3:fa:2c:6a:5c:3e:d9:1a:7e:dd:30:35:a9:
                    77:14:de:51:79:8d:ae:7a:59:68:1a:34:b6:77:8f:
                    58:d0:b9:64:95:59:e2:67:78:3a:a2:5f:01:59:f7:
                    b1:82:96:48:ef:80:d0:c9:06:c8:1f:e9:81:7b:54:
                    a1:ac:f6:56:bf:57:a2:32:e2:21:05:84:d3:c8:bd:
                    f8:74:5e:c5:b9:93:99:11:91:b5:8f:02:5d:d4:8c:
                    e8:a2:34:eb:b0:22:a9:6a:64:66:86:a1:dd:df:74:
                    a2:a0:9b:9f:8b:56:48:58:c5:62:90:86:be:0a:c7:
                    0a:7b:82:0e:84:d7:1a:50:12:10:5f:a5:de:82:7d:
                    7e:07:28:aa:58:34:26:6c:1e:f5:95:16:07:0e:69:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BA:59:E0:AA:7D:C9:ED:F2:E5:7C:8F:AD:31:26:F5:57:0D:7A:6E
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/1d6caf310bf9fa77a0e0a02f568ca2ab38029c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:84:54:25:af:3a:1a:78:19:0e:06:bd:bf:b6:3b:7a:60:07:
         ae:27:e1:ab:46:01:47:e5:8b:b1:e6:e9:dc:08:90:04:b8:03:
         9c:02:be:d5:92:b0:8d:98:f7:fc:bc:d7:6f:96:7a:03:35:b1:
         ff:6b:8f:8e:de:00:60:fe:ee:cf:1d:49:1e:37:81:59:7e:2c:
         68:0a:18:1e:f1:a6:f7:75:7f:26:db:a1:4a:b3:11:3b:75:3f:
         e2:31:01:05:85:7d:74:45:41:1a:e2:7e:f7:51:c1:2b:3a:f3:
         94:f7:52:01:60:23:04:5e:0e:cb:d0:01:bb:db:c9:54:e6:4d:
         85:d1:6b:fb:a7:df:af:d4:77:99:cb:b1:13:57:e8:c4:7f:44:
         31:46:6d:94:63:bf:c3:52:8d:3d:b2:03:3d:2f:43:e2:d9:6c:
         a1:99:e0:50:b7:a3:6c:ee:01:0a:ea:8a:70:a9:1c:82:ae:37:
         ed:9a:1f:fb:0a:7f:96:3a:21:99:cb:0b:74:e4:d3:f8:cf:cc:
         4f:9e:42:54:28:5d:c6:d2:39:19:25:bf:9f:9b:93:a0:59:f2:
         5c:80:fe:49:b4:f5:6b:15:98:91:cf:6b:3c:d8:20:41:6f:92:
         be:9a:7d:49:9d:5d:fa:cd:54:5f:9e:e7:d1:86:89:b9:c6:20:
         d4:70:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:55 2024 by rpki-client on console-fra.rpki-client.org