Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/330a140ede94c16e9d0bf5640130356e280b4210.roa
File:                     330a140ede94c16e9d0bf5640130356e280b4210.roa (raw, json)
Hash identifier:          FWfqvAFPCngXnUQpg5O45s3Cwhfifyu7jveHGgeEkfA=
Subject key identifier:   64:31:BF:C7:6E:EA:0E:CC:B5:1E:38:D0:CC:01:67:B7:44:05:C4:0D
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       2368B4
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/330a140ede94c16e9d0bf5640130356e280b4210.roa
Signing time:             Thu 04 May 2023 18:56:13 +0000
ROA not before:           Wed 03 May 2023 18:56:12 +0000
ROA not after:            Sun 04 May 2025 18:56:12 +0000
asID:                     52323
IP address blocks:        181.16.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320564 (0x2368b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: May  3 18:56:12 2023 GMT
            Not After : May  4 18:56:12 2025 GMT
        Subject: CN=330a140ede94c16e9d0bf5640130356e280b4210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:33:47:56:3b:b1:6e:6e:bf:7a:29:11:bf:eb:
                    6a:a6:9f:28:cf:65:9b:7b:d6:48:8f:4a:0f:b7:15:
                    88:84:df:4a:cc:d4:55:01:97:d8:27:bb:1d:1e:7b:
                    09:f8:11:ac:af:d3:a5:d4:7a:51:79:78:19:05:db:
                    95:2d:e8:55:a9:00:5c:b3:19:d1:90:9b:77:01:3d:
                    46:2c:c8:52:e7:2f:3a:55:08:a0:26:15:b0:df:7a:
                    a3:3b:d5:03:0d:6f:e8:99:7c:aa:60:6b:92:b9:de:
                    57:4e:32:cf:37:9d:10:aa:db:f2:20:b4:70:c3:33:
                    bd:c0:20:b3:b8:37:aa:87:7a:96:e4:49:ca:5a:24:
                    1b:4b:41:87:19:97:9a:1e:ad:41:56:19:1c:fa:3c:
                    76:16:66:96:f0:64:bd:69:54:a2:5e:93:9b:6f:ac:
                    b5:51:d1:7d:b7:0b:14:a8:c3:5f:42:c9:44:04:cf:
                    d7:17:1e:93:76:4a:ea:94:e0:d9:51:34:d1:b8:a6:
                    1c:e6:4c:cb:2f:26:33:92:7c:2b:93:0f:10:d5:59:
                    ff:c1:02:60:99:15:3b:69:b2:ad:d7:7e:10:a7:b7:
                    e2:82:d5:e7:a7:15:9c:07:a7:b6:69:da:1b:6c:8c:
                    ae:f3:ae:f6:2a:e6:53:ae:db:70:f0:3a:33:31:53:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:31:BF:C7:6E:EA:0E:CC:B5:1E:38:D0:CC:01:67:B7:44:05:C4:0D
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/330a140ede94c16e9d0bf5640130356e280b4210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:23:c4:d7:71:ef:bc:dd:86:b9:00:2d:a5:40:aa:f5:75:5f:
         5c:3c:53:c2:ec:6a:58:ea:19:38:dc:4b:62:01:17:17:c7:69:
         bf:62:dd:da:9d:86:e3:fe:fb:85:5f:f0:b2:fb:d4:d6:1b:32:
         0b:a2:36:a5:c8:f7:8c:5c:6d:c7:d5:ec:82:a6:ca:53:1b:7c:
         51:e3:cd:3b:59:d9:c6:99:34:00:1e:38:a1:f8:6a:90:3d:dc:
         0a:aa:af:77:69:da:c2:73:86:b9:7c:6a:8e:1a:4a:e0:89:ce:
         70:a5:47:34:cc:dd:3b:1c:95:5e:4e:ec:62:cf:70:a6:e5:f5:
         33:69:ed:22:1e:2d:2a:db:b2:d1:3c:99:ef:9e:02:b0:0d:2a:
         c0:83:25:e4:2c:85:9d:36:52:d3:32:b8:11:8b:e9:d6:89:d6:
         39:ab:3d:13:69:26:39:2a:c4:2b:81:c6:66:af:bb:5a:e7:81:
         0d:f4:11:ad:a3:ed:34:6f:93:d5:67:b2:a4:2c:b2:ab:d1:cc:
         a5:ee:87:a6:a9:7c:ed:38:ab:cf:7c:6c:a8:0c:3f:e0:20:01:
         1a:24:eb:90:e4:a0:97:0d:d3:34:fc:46:58:3f:3c:48:60:4b:
         5d:ad:cb:92:1f:80:22:34:47:4d:29:01:1e:27:3a:27:c1:05:
         6c:86:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org