Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/3a6cc3a68231cf2aa3894a0eb0386ff278161e30.roa
File:                     3a6cc3a68231cf2aa3894a0eb0386ff278161e30.roa (raw, json)
Hash identifier:          Sx8p3hyzb1TVpHbVt1rEeoACACrXhIAqaCjs+1gV4BA=
Subject key identifier:   C6:0F:5B:45:43:D1:23:85:21:2D:57:23:09:17:6D:AB:D2:8F:BE:99
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       236B48
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/3a6cc3a68231cf2aa3894a0eb0386ff278161e30.roa
Signing time:             Thu 04 May 2023 18:59:11 +0000
ROA not before:           Wed 03 May 2023 18:59:11 +0000
ROA not after:            Sun 04 May 2025 18:59:11 +0000
asID:                     52323
IP address blocks:        181.16.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321224 (0x236b48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: May  3 18:59:11 2023 GMT
            Not After : May  4 18:59:11 2025 GMT
        Subject: CN=3a6cc3a68231cf2aa3894a0eb0386ff278161e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:38:95:03:76:fc:be:15:23:dc:3f:95:d8:
                    07:ae:30:b2:07:90:47:88:a5:98:2d:11:56:eb:2c:
                    89:f6:57:b5:5e:39:cd:3d:94:bf:85:b3:a6:dd:32:
                    c1:f2:da:26:8d:29:35:17:40:51:be:03:60:01:a3:
                    81:71:cb:1f:7c:8f:e4:b1:b2:e3:59:bb:29:0f:98:
                    d6:db:40:30:52:94:68:51:68:1b:a7:22:0a:87:88:
                    47:15:77:6b:8f:a3:c3:c1:ed:61:98:28:1e:3b:25:
                    5a:aa:64:b4:56:ce:31:af:96:53:7f:4e:a6:d5:fe:
                    f5:40:a6:4b:57:a3:27:a3:03:3b:1e:e5:d1:8a:45:
                    ac:79:f7:6e:e2:b3:7a:37:fe:44:f6:56:49:9f:91:
                    4e:24:5c:8c:92:40:53:8e:88:c9:3c:f1:a8:20:07:
                    c9:4f:7b:ab:c5:49:1c:93:4b:46:25:26:57:ec:d4:
                    42:c2:54:69:72:37:ce:bb:02:92:a3:8c:7d:ce:0d:
                    c0:7f:0e:79:bf:9b:85:7b:0d:94:1a:2e:22:ee:df:
                    e8:f0:00:39:3e:85:c7:d7:e8:a9:c3:8d:72:53:76:
                    28:81:3a:fa:a6:f6:db:f0:13:a2:d9:ef:8d:a3:b4:
                    a0:31:86:15:c9:42:d3:2b:41:66:d8:ae:6a:63:f2:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0F:5B:45:43:D1:23:85:21:2D:57:23:09:17:6D:AB:D2:8F:BE:99
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/3a6cc3a68231cf2aa3894a0eb0386ff278161e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:82:7c:e6:13:02:f5:ad:1f:bf:a2:09:22:ce:b3:4b:cd:
         27:71:64:bc:04:44:76:de:81:e9:83:06:d4:33:ac:61:20:a1:
         39:48:fc:e0:98:c5:ec:3c:14:0e:41:7b:83:00:15:7a:85:b0:
         67:c7:52:0c:c4:62:2e:66:ae:15:91:d8:16:7b:c7:77:f1:c8:
         b6:9f:82:fa:b6:ae:46:51:7e:35:d3:04:15:da:7f:76:f1:05:
         8a:8c:38:93:40:bc:07:72:79:98:26:48:55:8d:c0:92:76:2d:
         b5:12:79:c4:98:bf:09:8e:33:95:4f:dc:41:87:0a:40:8c:eb:
         25:97:da:b3:e0:f3:9e:e8:aa:8e:87:ff:6a:9e:50:2e:f2:00:
         bf:56:e0:44:55:b6:41:3f:3f:1c:13:d2:b3:e0:6c:b9:5f:87:
         dd:8b:59:e8:47:90:4f:b6:ee:f8:6c:39:44:68:af:17:4d:63:
         93:fd:f7:23:a9:42:b7:ff:e1:6b:16:b3:56:ec:bd:d3:8d:41:
         2d:10:cb:b0:64:d7:4e:a4:a1:44:6a:d8:81:79:bf:6e:2a:e3:
         29:fc:12:58:e5:98:90:1f:94:e4:17:da:72:c4:d9:eb:63:6e:
         91:6b:75:a0:d3:4a:df:5d:a5:cd:7b:7a:4e:d8:44:a0:1e:d1:
         5c:91:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org