Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2d556e0bc3c19dd70a8157474ce7bf62797b201b.roa
File:                     2d556e0bc3c19dd70a8157474ce7bf62797b201b.roa (raw, json)
Hash identifier:          Zajj2RtMjGg1+nZjoALRTxNSuyCmGZNP8BBj0gciwF4=
Subject key identifier:   25:6A:32:89:5E:79:A3:18:93:DF:74:D8:B0:DE:2B:05:87:9D:47:65
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E74F9
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2d556e0bc3c19dd70a8157474ce7bf62797b201b.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947449 (0xe74f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=2d556e0bc3c19dd70a8157474ce7bf62797b201b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f6:f8:ff:e7:f0:7c:1a:f4:a5:bd:07:e9:c4:
                    c1:a4:6d:f1:47:c3:3d:d4:69:a5:0c:6a:1f:a2:9a:
                    6f:ae:1b:e1:23:fb:2b:e2:17:77:6f:1d:e5:55:31:
                    36:9b:cd:1c:42:b7:84:89:51:97:4c:51:0c:c5:d2:
                    2d:a4:9a:c9:15:32:f1:1c:f4:2d:52:f9:7a:ad:ee:
                    b3:36:36:bf:f9:67:aa:78:58:e0:9f:fc:92:9d:44:
                    28:fe:87:00:0d:db:55:44:0a:7a:3d:0a:84:95:c5:
                    a4:05:50:1c:0d:ed:80:3b:c3:4a:a4:a0:74:aa:77:
                    b9:24:88:68:c6:69:df:ce:36:1b:a9:63:3d:63:7b:
                    58:00:6d:bc:80:9a:7a:55:3e:62:82:9e:ec:ad:3f:
                    89:fd:06:9d:99:1d:2f:51:5e:29:5f:4d:b5:ee:8c:
                    b0:64:96:46:05:ca:38:94:f6:06:70:3c:ee:bd:f4:
                    df:5f:25:b3:6e:81:25:32:9b:57:c9:21:44:ee:17:
                    aa:20:99:2c:02:05:be:81:82:ac:75:11:38:28:b1:
                    ef:da:ea:65:00:32:17:b9:71:de:3e:4b:48:e5:be:
                    6c:f7:39:ef:a8:01:56:66:9a:18:f8:d3:29:0f:e2:
                    d0:56:eb:3d:2f:3f:de:5c:91:eb:42:0e:f7:06:b8:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6A:32:89:5E:79:A3:18:93:DF:74:D8:B0:DE:2B:05:87:9D:47:65
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2d556e0bc3c19dd70a8157474ce7bf62797b201b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:7d:21:75:8c:df:c0:25:9a:5d:de:c2:35:15:54:b7:70:
         60:d6:83:63:10:28:4d:ab:95:fc:77:60:4d:97:a4:35:ea:bd:
         1f:66:93:e9:a2:18:3d:e4:84:5d:65:d2:01:27:43:1c:d8:64:
         5b:53:bb:a1:52:cd:cd:ad:56:31:a0:88:1d:71:fd:02:fb:9e:
         ea:79:a2:ee:d5:93:eb:5d:ff:b5:37:84:58:7d:89:bd:95:1d:
         4d:dc:10:b0:b1:ec:5c:23:75:be:32:bf:fb:71:6a:7d:59:b8:
         bc:3e:57:13:98:d1:49:dc:4e:68:83:af:49:a2:a7:66:d9:22:
         7d:d2:22:65:d9:7e:6a:ae:ad:10:0d:c1:90:77:e2:08:06:5c:
         ee:50:21:7f:04:bb:48:93:4a:77:70:7f:29:55:9d:e4:20:7b:
         26:9f:82:df:54:ad:18:53:ff:5e:52:f5:6f:b5:d4:65:48:c3:
         7b:1c:25:d7:04:aa:d7:57:0d:71:11:95:02:c6:7e:19:e4:3e:
         d0:b3:86:9b:ab:c7:ac:43:4a:7c:fd:96:05:9f:7a:89:8d:ae:
         20:a7:02:f5:34:2f:7d:6a:6c:c2:d1:f0:0f:30:e2:2c:87:63:
         c4:b8:5f:14:55:d0:cc:bf:76:0b:e7:dc:08:2f:b7:03:fd:d1:
         61:56:19:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org