Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/3424c1e57fa8430464b12b69f2c7d2ca045b3fb7.roa
File:                     3424c1e57fa8430464b12b69f2c7d2ca045b3fb7.roa (raw, json)
Hash identifier:          Xan6D5/JaMxPHHMC377gKmQ/gXBrwy0Y1QnRN2z7pUM=
Subject key identifier:   53:68:7C:55:15:37:34:E0:49:22:9C:6D:1E:1B:BC:69:66:B2:D6:2D
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       257D41
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/3424c1e57fa8430464b12b69f2c7d2ca045b3fb7.roa
Signing time:             Tue 25 Jul 2023 17:39:56 +0000
ROA not before:           Mon 24 Jul 2023 17:39:56 +0000
ROA not after:            Fri 25 Jul 2025 17:39:56 +0000
asID:                     52323
IP address blocks:        181.16.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456897 (0x257d41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 24 17:39:56 2023 GMT
            Not After : Jul 25 17:39:56 2025 GMT
        Subject: CN=3424c1e57fa8430464b12b69f2c7d2ca045b3fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:51:4b:d1:95:34:3b:59:f8:46:22:96:14:
                    f9:59:15:85:e5:7c:1a:89:ce:dd:69:d9:1b:ad:a7:
                    08:a5:23:ff:2b:46:61:bc:3f:70:1b:07:3c:b1:27:
                    f6:7e:9b:32:52:de:25:b8:87:7c:bd:eb:c5:de:49:
                    c9:5e:d7:a5:7d:39:4c:b0:ea:b4:95:b2:94:60:81:
                    f6:a7:a0:82:6f:66:07:cb:0f:c5:39:16:77:f6:91:
                    66:8f:6f:2c:af:17:26:b1:4a:1a:c6:06:e5:3c:3d:
                    83:b3:bf:f9:06:a0:8c:16:ba:30:33:03:92:15:b6:
                    ce:11:14:83:3c:8f:f0:3d:ad:77:b8:bc:65:6d:1b:
                    df:41:8c:f0:22:de:a8:28:b9:a1:92:11:77:1f:81:
                    42:9c:2b:5a:39:90:aa:f4:23:56:b5:24:3e:63:39:
                    22:a0:33:08:12:db:b9:ba:7c:41:a3:bc:40:15:4f:
                    1b:8c:60:63:79:47:23:30:b5:4e:73:fc:ab:d2:b9:
                    15:84:eb:5e:00:bb:2f:cb:f2:ed:8b:8c:61:af:39:
                    cb:fb:94:97:b5:2f:1d:23:82:f7:21:78:6a:92:3a:
                    16:e5:bc:6a:cb:fe:b8:1d:6a:9c:4b:49:2b:82:b1:
                    c9:18:fc:1c:5e:de:8e:fe:01:3e:d5:15:3f:6d:02:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:68:7C:55:15:37:34:E0:49:22:9C:6D:1E:1B:BC:69:66:B2:D6:2D
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/3424c1e57fa8430464b12b69f2c7d2ca045b3fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:4a:04:ba:79:26:3b:88:87:dc:1c:43:9f:96:19:a0:cc:
         21:5f:25:c4:c7:09:c4:1d:28:96:cc:9b:72:08:ee:53:4c:87:
         3a:65:9b:8e:c8:43:24:bd:66:b0:b6:61:4e:57:1f:b2:ba:2e:
         a1:4e:5c:5c:bf:f5:d4:2e:b2:21:8c:4b:eb:37:7b:df:54:44:
         f6:15:28:97:4d:e6:02:38:77:ad:42:18:cf:8c:28:2f:31:6a:
         1a:7c:ce:bf:7e:6b:58:49:a2:b1:50:7e:ad:56:e8:90:f2:0a:
         4c:39:ac:71:b7:46:ea:68:3d:b6:24:cc:e3:77:16:af:2e:5c:
         3c:48:a5:4d:ac:ec:da:10:4a:f0:4e:0b:f8:74:e9:fd:84:c7:
         b5:f9:8d:fd:a5:fc:d3:6b:a5:8a:af:c0:1c:70:d9:fe:c1:12:
         eb:9e:b5:77:dc:c7:3c:00:cc:66:59:dc:4e:92:9d:2e:96:c6:
         72:f3:39:84:47:bf:51:5a:b0:f1:55:d3:c2:01:8e:a9:0c:06:
         fe:28:bc:9e:08:03:63:f5:bc:79:f0:ff:e4:c8:6c:4a:63:11:
         31:2f:e9:5b:a3:86:1d:d9:44:68:52:b5:54:a6:80:6d:cf:84:
         99:03:05:23:ed:d7:b4:ce:c7:8e:12:72:69:b1:92:a4:f9:fc:
         b8:b9:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org