Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/425d70d9d355af690700c9df3bd38b458fca94dd.roa
File:                     425d70d9d355af690700c9df3bd38b458fca94dd.roa (raw, json)
Hash identifier:          qbwHebCv8lC8mhlMct342rSw/PktwSaaviPRWAaWnXA=
Subject key identifier:   0F:E1:09:37:0F:BC:E9:22:81:EF:38:8D:E2:CF:77:D2:53:05:8D:61
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       259D5D
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/425d70d9d355af690700c9df3bd38b458fca94dd.roa
Signing time:             Tue 25 Jul 2023 18:36:38 +0000
ROA not before:           Mon 24 Jul 2023 18:36:37 +0000
ROA not after:            Fri 25 Jul 2025 18:36:37 +0000
asID:                     52323
IP address blocks:        181.16.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465117 (0x259d5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 24 18:36:37 2023 GMT
            Not After : Jul 25 18:36:37 2025 GMT
        Subject: CN=425d70d9d355af690700c9df3bd38b458fca94dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:84:3b:83:75:0e:0e:79:47:a2:84:76:ff:
                    6c:49:cd:6b:5b:64:d1:aa:fd:6c:1e:42:cc:e5:99:
                    1b:21:d2:24:d9:ab:91:5e:8a:5b:43:2e:d7:58:2c:
                    21:95:d4:2b:a5:ec:8d:e0:a0:dd:47:be:54:32:85:
                    97:28:f1:42:44:ad:1c:c4:17:02:6a:dd:d8:e3:b0:
                    73:51:70:11:7b:44:4e:46:31:4b:92:bf:e3:5f:8e:
                    a8:c7:da:b1:30:8a:5b:02:b1:f8:e5:da:ed:31:b4:
                    f6:86:48:86:73:09:89:e9:da:84:19:3d:3e:f1:ef:
                    38:ea:62:4c:fe:cc:6f:fd:a2:e8:1e:db:69:b1:39:
                    58:f9:bd:f2:ac:35:f5:73:eb:84:72:18:c6:4b:fd:
                    32:27:fc:c1:91:7c:df:0e:38:0d:ba:58:6b:db:1f:
                    19:66:50:21:87:d8:9d:83:b9:1e:04:79:78:64:00:
                    e3:bd:30:50:90:dc:77:34:1a:4d:cc:8f:75:d1:35:
                    08:5a:c1:57:b3:00:d3:f0:cb:9e:65:86:ce:65:7e:
                    1a:ec:a1:89:54:f8:29:c3:d7:06:42:92:cf:19:59:
                    46:25:dd:18:0b:79:75:1b:03:1a:53:79:ba:9d:34:
                    78:9b:63:f3:f6:31:f1:d1:d9:1b:98:17:42:74:0f:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E1:09:37:0F:BC:E9:22:81:EF:38:8D:E2:CF:77:D2:53:05:8D:61
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/425d70d9d355af690700c9df3bd38b458fca94dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:5c:c3:3d:3a:e6:d7:c6:dd:ee:31:5d:13:09:7d:d1:42:eb:
         d2:8c:47:d0:d8:07:68:81:c2:b3:cc:33:f4:ad:08:9f:b1:97:
         73:49:76:60:3b:52:a0:f8:ab:ea:8d:25:7c:7a:c4:e6:82:b2:
         68:bd:08:38:83:9a:cc:0b:f3:b6:c7:36:94:fb:c8:f9:5b:06:
         2c:d0:2d:9d:7a:80:33:86:10:7f:64:ec:42:5d:b2:15:82:55:
         0a:0a:cb:db:28:79:28:0d:a5:ac:00:c6:44:c4:94:79:e9:96:
         9b:a3:8e:00:9e:9b:97:7b:69:b8:91:d7:a4:b0:72:77:45:61:
         0e:71:98:00:22:e2:4b:08:15:e9:17:a5:8a:58:cd:72:c1:c5:
         25:06:3d:fc:1d:08:d2:f8:7a:48:ca:ff:35:d8:b4:23:d0:eb:
         6f:8f:2f:b1:ce:a4:30:a2:3e:4e:df:00:76:3b:6c:f3:96:0e:
         c5:f8:52:46:43:31:da:ca:d6:40:e6:c5:d8:06:ae:3a:6e:c8:
         01:83:dd:c7:e6:8b:e1:4e:95:7b:1f:60:77:7c:8f:ae:4a:2d:
         c3:bc:99:37:58:07:fe:dd:ce:ca:20:be:17:9b:82:f1:57:13:
         5c:ad:ff:d6:4a:23:4e:d7:4f:46:f0:4e:f4:d1:17:d3:81:15:
         0f:77:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org