Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/348529ec3389ee421187ced65f9d75a618a0d6d2.roa
File:                     348529ec3389ee421187ced65f9d75a618a0d6d2.roa (raw, json)
Hash identifier:          pTF7LPX+Hx5CPkBGzw32EaeKDnbFKTqu/eSAEuIL4N4=
Subject key identifier:   02:8B:83:57:F4:D9:5E:29:B5:CC:2A:86:0A:10:73:32:9B:DE:D6:E7
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0ED582
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/348529ec3389ee421187ced65f9d75a618a0d6d2.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972162 (0xed582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=348529ec3389ee421187ced65f9d75a618a0d6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:36:c7:7e:82:6e:1d:73:05:ca:0c:a3:86:
                    09:cf:b1:68:39:dc:45:9d:bf:58:bb:4a:69:84:d5:
                    a9:0d:e1:e7:7d:6b:14:b5:65:61:71:19:ba:70:cc:
                    45:3a:fe:b8:18:d2:da:21:9c:43:c8:28:15:93:74:
                    4e:7d:b9:b4:c6:6c:54:27:2c:65:f0:07:ce:56:ba:
                    d8:24:47:ce:d6:95:be:4e:c3:17:67:01:17:db:67:
                    34:ab:aa:96:b5:f5:1a:8a:02:ca:47:06:cd:18:ee:
                    0d:d6:96:c1:87:79:8a:82:04:14:50:9d:50:4b:3e:
                    53:9e:38:28:02:e2:51:87:3f:de:d7:f5:0f:d8:48:
                    17:e3:7f:91:b7:b6:7b:8f:0c:cb:e6:03:d4:41:0c:
                    01:08:e4:4d:2a:05:f4:06:4d:b1:75:1f:8f:a7:f5:
                    8f:88:bd:b0:b0:f2:39:41:7d:61:85:da:97:50:5b:
                    9c:ac:3e:04:da:f5:6f:fd:0a:c2:be:a0:3e:f3:bd:
                    0f:35:3b:29:66:e9:a8:91:47:45:b0:c2:f9:2d:34:
                    11:62:05:0d:67:48:07:ac:8f:57:d6:6d:47:ca:06:
                    a4:75:48:ee:9b:41:2f:6d:46:8c:35:e5:8d:33:f5:
                    c1:f2:69:dc:dd:db:66:cb:31:ea:a0:67:a6:e3:26:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8B:83:57:F4:D9:5E:29:B5:CC:2A:86:0A:10:73:32:9B:DE:D6:E7
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/348529ec3389ee421187ced65f9d75a618a0d6d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:a4:60:43:5d:d6:50:40:9c:8f:8e:23:ae:4d:43:88:bb:9d:
         46:2b:6e:82:28:22:e7:c9:fd:3a:90:32:3f:7b:ec:15:90:0c:
         01:3b:53:94:b8:cc:61:99:b8:be:4c:79:cb:08:7d:88:05:22:
         09:8c:a5:c6:a3:37:dc:1b:e8:83:34:ef:e2:eb:0f:1f:ec:70:
         e1:67:7f:94:dd:a0:ae:5d:e6:55:80:b1:7f:76:e8:7c:e7:e7:
         85:c0:2d:c6:8c:ce:17:de:56:50:98:c7:c3:23:60:fc:97:30:
         c2:00:35:88:c0:0d:95:d2:99:e9:e4:91:3d:31:ef:95:92:ed:
         6b:16:92:8a:7d:1c:b6:10:c0:33:2c:dc:d0:0d:00:82:97:d2:
         52:00:c8:97:c2:e8:e1:0c:7c:b2:1f:ef:07:d9:e6:17:68:4a:
         1d:77:e4:6e:da:68:16:48:97:3b:08:b4:17:aa:d6:c2:bc:db:
         75:d3:96:91:63:ff:da:16:5c:7d:4f:f8:69:90:82:30:45:70:
         6b:5c:bf:44:2c:e5:4c:f6:37:75:0a:89:e0:1e:bc:75:13:53:
         f6:28:fd:cc:85:87:63:7e:87:7b:4d:51:40:85:54:2e:20:bd:
         50:97:2c:c3:40:78:6a:49:f9:97:cf:03:63:46:03:5c:b3:49:
         b1:96:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org