Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/29b42aa543f250a9fdfeab96d2cfe61fa23d343f.roa
File:                     29b42aa543f250a9fdfeab96d2cfe61fa23d343f.roa (raw, json)
Hash identifier:          EnIobn61a3ImFw5D5ak3xqK5UOfQ+RMwUg5geKO7TDg=
Subject key identifier:   2C:85:05:BD:DC:08:94:A6:5F:0E:DE:D9:5B:80:ED:47:D5:47:7D:4C
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E7A52
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/29b42aa543f250a9fdfeab96d2cfe61fa23d343f.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948818 (0xe7a52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=29b42aa543f250a9fdfeab96d2cfe61fa23d343f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:5c:83:c9:66:82:65:2d:ac:51:ae:37:1d:
                    19:c1:7b:70:20:f9:66:d6:5f:d8:7f:70:7a:7e:e0:
                    34:83:4e:34:5c:06:11:a4:37:22:de:f1:f1:b4:6d:
                    98:f8:c5:f6:27:ec:54:c9:2d:2c:15:04:a6:dc:d3:
                    ba:6b:97:27:5c:92:0b:bc:dc:1c:d5:2f:b8:22:c7:
                    f8:ab:a7:cd:4c:f6:25:fc:9b:45:eb:8a:19:96:07:
                    5f:08:c0:58:cf:72:9e:3c:83:83:3e:7b:dc:75:c6:
                    57:78:06:ad:0d:92:95:8b:d2:b5:46:ec:b3:d8:7d:
                    2f:22:48:78:8f:11:be:a2:6a:e9:7d:5b:8a:19:ed:
                    a5:a8:9c:c6:ca:34:b4:05:4c:38:77:97:4a:03:4e:
                    a9:77:a3:f0:df:79:ec:87:8a:28:37:fa:4f:19:75:
                    00:dd:c0:61:ef:41:5f:81:de:df:4f:9a:5a:ba:23:
                    95:69:be:e5:dd:32:de:94:11:22:e3:b0:f9:75:e8:
                    e0:e5:1b:38:44:dd:cf:ac:09:5e:a4:53:c8:32:39:
                    ce:7d:5c:bc:13:15:35:66:28:ed:b8:cc:1d:54:ed:
                    51:3a:b8:b0:a4:ed:45:17:34:5c:4d:eb:25:20:f8:
                    4b:4c:a0:51:a2:b4:47:63:20:c1:1b:c5:02:1b:77:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:85:05:BD:DC:08:94:A6:5F:0E:DE:D9:5B:80:ED:47:D5:47:7D:4C
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/29b42aa543f250a9fdfeab96d2cfe61fa23d343f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d6:ad:a5:5d:04:85:d3:a4:55:49:eb:6b:cf:c6:9d:12:e2:
         30:6a:72:f6:b9:32:77:4d:2c:ac:0e:c5:0f:99:fa:31:02:17:
         25:b4:a7:0d:d8:38:0c:3b:7c:6c:88:74:6c:6f:fa:5a:39:3f:
         4e:97:88:3e:d0:f0:09:fd:2d:f2:e3:17:67:02:cf:01:e5:e6:
         7e:2c:d8:c9:b2:27:e8:ae:16:f2:ee:da:08:55:dc:83:e1:8e:
         01:52:ae:d7:69:94:33:c0:34:08:a0:1f:2c:0e:e2:66:aa:2a:
         4e:79:05:04:9a:4e:a6:3d:2b:66:d5:d2:03:6d:d0:5c:cd:0c:
         f8:bd:b4:20:b4:b3:86:64:7c:6e:ac:70:b7:88:a2:54:e6:0b:
         d5:4b:f4:16:c6:b2:c0:93:53:a8:6b:73:b0:4a:04:af:ca:a5:
         66:b1:02:b6:86:06:13:6d:65:20:ea:79:18:2f:05:8b:0a:1b:
         4f:9c:04:b3:01:87:26:b3:d1:93:19:41:cc:9a:7f:6f:8d:73:
         b0:c8:1c:6d:89:f5:cb:c4:36:20:12:a3:9c:d9:25:8d:35:91:
         d9:07:f5:04:16:37:88:32:60:56:c8:16:55:64:a5:a0:bd:01:
         33:f8:db:cc:1a:64:71:57:e2:89:69:8b:e7:c4:4d:a8:0b:21:
         77:46:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:55 2024 by rpki-client on console-fra.rpki-client.org