Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2a76e6f2a31adbd74dfc5cd4379a560cec285076.roa
File:                     2a76e6f2a31adbd74dfc5cd4379a560cec285076.roa (raw, json)
Hash identifier:          ON9/Cwy7MyOI1xy3PmY13TFc5zFYN2tul4jbrkJHeSk=
Subject key identifier:   C5:EF:72:1D:5B:5F:D1:4F:3E:7C:12:88:5B:E2:F3:7A:8E:3D:21:63
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       2575A2
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2a76e6f2a31adbd74dfc5cd4379a560cec285076.roa
Signing time:             Tue 25 Jul 2023 17:01:31 +0000
ROA not before:           Mon 24 Jul 2023 17:01:31 +0000
ROA not after:            Fri 25 Jul 2025 17:01:31 +0000
asID:                     52323
IP address blocks:        181.16.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2454946 (0x2575a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 24 17:01:31 2023 GMT
            Not After : Jul 25 17:01:31 2025 GMT
        Subject: CN=2a76e6f2a31adbd74dfc5cd4379a560cec285076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:92:8a:12:e8:fd:d0:46:33:c2:7b:98:51:f1:
                    b0:bf:91:d1:dc:0f:21:8f:ae:70:05:1f:ee:6c:07:
                    b6:7f:b8:81:f0:1f:f2:fe:32:ef:1b:14:ee:d3:1d:
                    c9:94:2c:a6:57:49:81:6d:2a:e0:6f:65:f7:57:70:
                    c0:f3:fd:2d:db:99:d5:97:0f:f4:4c:1b:f5:22:fc:
                    9a:ad:54:67:d9:a1:37:1c:56:05:54:f2:7b:53:9c:
                    3f:e2:fc:8d:e4:d3:04:e0:6b:62:c4:09:a9:07:a7:
                    e9:c7:32:72:68:70:1e:b1:a0:99:b5:39:4b:bb:9f:
                    f4:97:15:7b:ec:65:74:50:b7:24:d9:a1:09:ee:68:
                    ba:c5:99:22:1e:39:c7:8d:7c:5b:a2:b0:95:8f:10:
                    14:d3:11:4f:5a:e8:ed:a1:38:4e:ac:df:d3:24:44:
                    52:8a:fe:5b:2a:d1:db:5c:82:77:c9:e2:53:b9:df:
                    55:0e:d4:68:48:7c:30:78:33:b7:53:2b:a2:9c:e9:
                    6e:75:d5:6b:b0:62:20:3e:4c:b7:77:f9:8a:31:62:
                    95:71:77:b1:75:2c:bd:bf:a0:a3:15:24:a8:48:a4:
                    c4:d3:a5:da:cc:33:01:24:8b:bd:f3:9b:0c:66:d7:
                    c2:dc:4c:de:e9:7a:ba:b9:16:18:f6:8b:a0:aa:e1:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EF:72:1D:5B:5F:D1:4F:3E:7C:12:88:5B:E2:F3:7A:8E:3D:21:63
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2a76e6f2a31adbd74dfc5cd4379a560cec285076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:4c:89:55:a4:e1:26:05:14:c8:99:05:e7:38:50:cc:c8:
         c3:75:62:44:0f:44:0c:db:9c:b0:9e:f1:c1:42:05:14:06:f5:
         05:18:79:55:35:3c:cf:d0:56:a5:7f:2c:c4:c2:76:5f:89:46:
         75:89:b4:d8:23:a1:4f:5b:75:3d:65:cf:2b:b5:c1:c2:4d:a7:
         45:e8:28:6a:14:1c:d8:5c:2b:17:4d:f5:a5:78:f4:3d:9e:cc:
         42:32:65:e2:45:07:93:e3:72:64:7a:5a:8d:e7:d1:ed:ec:d0:
         f1:39:59:b1:2d:51:ba:df:12:40:f4:5f:9a:32:31:b5:aa:ea:
         0b:bf:8f:94:16:6d:28:6c:43:9b:b6:e5:af:b0:86:e1:37:69:
         68:35:2a:ce:6b:b7:60:2c:73:f5:4c:76:6f:25:b3:a4:7d:50:
         dc:96:a9:aa:09:18:5e:9c:64:6a:44:97:05:54:fd:3a:40:20:
         f6:92:30:fb:d6:97:54:91:ae:04:f6:c4:f3:9f:60:ef:ae:67:
         40:d4:b8:64:b6:17:15:55:1f:46:68:04:c2:91:26:19:e1:3f:
         a6:47:a4:83:91:69:1a:fd:43:4e:5e:ae:f2:78:96:20:f3:c3:
         3d:f1:6d:a3:c9:d4:4a:5f:f1:ab:91:ee:88:da:4d:b4:aa:c5:
         6e:11:3a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org