Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/487618d282ddf346ba88578ecb4398063e668379.roa
File:                     487618d282ddf346ba88578ecb4398063e668379.roa (raw, json)
Hash identifier:          jJ7nITlW+tP30kIy8I8kzOgE2trVFxzz5Ld08t78TTc=
Subject key identifier:   23:97:A9:21:CA:B1:EB:D3:D6:FB:CC:FF:46:00:BF:AA:4D:6C:B6:39
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       23806E
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/487618d282ddf346ba88578ecb4398063e668379.roa
Signing time:             Fri 05 May 2023 13:07:21 +0000
ROA not before:           Thu 04 May 2023 13:07:21 +0000
ROA not after:            Mon 05 May 2025 13:07:21 +0000
asID:                     52323
IP address blocks:        181.16.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326638 (0x23806e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: May  4 13:07:21 2023 GMT
            Not After : May  5 13:07:21 2025 GMT
        Subject: CN=487618d282ddf346ba88578ecb4398063e668379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:0d:fa:5d:e9:e0:f0:72:ac:68:78:26:a9:
                    d8:a7:2b:3b:55:d1:c4:70:45:3b:76:4f:e4:c9:0b:
                    29:75:47:09:35:1a:ad:a3:dd:bb:1a:13:52:87:a1:
                    99:34:c9:b8:a3:db:3d:b0:aa:d2:87:3a:59:77:04:
                    e1:27:01:0f:db:2a:7a:96:63:5f:3f:9e:8a:b4:e5:
                    22:e3:ce:b6:00:6c:f8:e0:9d:1d:39:7a:8e:4f:b5:
                    57:50:ea:ed:35:1d:a0:3f:27:95:2d:c9:98:28:46:
                    3f:5e:47:d9:44:fb:b9:9c:5b:08:fe:f9:98:d8:ca:
                    b8:73:88:b8:50:1a:f7:56:c6:fc:cf:a4:e8:1e:c4:
                    48:2a:96:9e:df:c6:3a:ba:f8:d8:e0:42:c8:94:02:
                    4e:6c:a0:ac:bc:54:b3:3c:e7:72:d6:f1:e5:18:b6:
                    bc:cb:ce:24:31:a7:ce:00:32:96:59:29:f8:d8:32:
                    79:f0:60:fc:d5:74:cf:2f:93:ca:ad:9f:ed:ad:8f:
                    02:0c:54:c6:65:19:6b:27:f3:83:ca:b2:c3:29:4f:
                    f6:45:cc:c4:6b:d8:93:17:d1:c3:63:b6:c8:d1:63:
                    07:a6:f0:80:96:f3:21:21:80:09:4f:d8:f6:3b:92:
                    4c:c2:b8:6a:b5:2a:ae:4a:be:36:cb:0e:f7:59:1c:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:97:A9:21:CA:B1:EB:D3:D6:FB:CC:FF:46:00:BF:AA:4D:6C:B6:39
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/487618d282ddf346ba88578ecb4398063e668379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:4f:5a:00:20:08:ca:ea:78:92:e9:db:d0:91:df:aa:fb:27:
         ec:3b:e6:ff:df:e3:54:ae:22:61:1d:7e:ec:2d:3c:b4:36:c8:
         89:2c:28:f4:0f:b8:0a:c9:61:fb:ef:05:ff:84:20:d8:6d:5f:
         e1:89:25:d1:59:f3:0c:db:50:c9:59:d4:f6:1d:62:43:0e:d8:
         b7:2d:64:25:ea:69:14:01:20:21:9b:a3:8d:bd:50:43:de:85:
         f2:be:f7:55:9b:cd:01:2b:62:f3:dc:59:47:b9:2e:33:6c:f6:
         a8:4e:c8:c5:8b:9c:e4:dc:b7:89:7e:15:d2:0a:d0:1e:ef:67:
         62:dc:f3:05:90:9e:fa:72:fe:ea:96:71:c6:17:dd:11:ff:2a:
         d9:6f:50:d1:4c:1a:1e:4c:58:80:57:0c:f5:99:c3:f4:b1:eb:
         09:a6:0f:9f:0d:2f:15:be:1c:a6:36:da:31:7c:53:de:13:ac:
         ce:d7:6f:5d:84:c8:c1:b6:d4:ca:71:8a:1e:83:d8:2e:c2:32:
         b4:e6:98:1d:13:9c:d7:42:c2:06:15:1b:9b:29:02:50:d8:8b:
         be:52:6b:ed:4c:b1:48:d2:7e:ed:3b:23:ad:e9:84:e5:bf:59:
         ef:22:9d:fa:ea:77:d7:ad:ff:d7:35:e1:15:ec:17:6b:c3:b1:
         89:c8:02:94
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI4BuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjMwNTA0
MTMwNzIxWhcNMjUwNTA1MTMwNzIxWjAzMTEwLwYDVQQDEyg0ODc2MThkMjgyZGRm
MzQ2YmE4ODU3OGVjYjQzOTgwNjNlNjY4Mzc5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq+4N+l3p4PByrGh4JqnYpys7VdHEcEU7dk/kyQspdUcJNRqt
o927GhNSh6GZNMm4o9s9sKrShzpZdwThJwEP2yp6lmNfP56KtOUi4862AGz44J0d
OXqOT7VXUOrtNR2gPyeVLcmYKEY/XkfZRPu5nFsI/vmY2Mq4c4i4UBr3Vsb8z6To
HsRIKpae38Y6uvjY4ELIlAJObKCsvFSzPOdy1vHlGLa8y84kMafOADKWWSn42DJ5
8GD81XTPL5PKrZ/trY8CDFTGZRlrJ/ODyrLDKU/2RczEa9iTF9HDY7bI0WMHpvCA
lvMhIYAJT9j2O5JMwrhqtSquSr42yw73WRzJsQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCOXqSHKsevT1vvM/0YAv6pNbLY5MB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzQ4NzYxOGQyODJkZGYzNDZiYTg4NTc4ZWNiNDM5ODA2M2U2NjgzNzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQ6jANBgkqhkiG9w0BAQsFAAOCAQEAMk9aACAIyup4kunb
0JHfqvsn7Dvm/9/jVK4iYR1+7C08tDbIiSwo9A+4Cslh++8F/4Qg2G1f4Ykl0Vnz
DNtQyVnU9h1iQw7Yty1kJeppFAEgIZujjb1QQ96F8r73VZvNASti89xZR7kuM2z2
qE7IxYuc5Ny3iX4V0grQHu9nYtzzBZCe+nL+6pZxxhfdEf8q2W9Q0UwaHkxYgFcM
9ZnD9LHrCaYPnw0vFb4cpjbaMXxT3hOsztdvXYTIwbbUynGKHoPYLsIytOaYHROc
10LCBhUbmykCUNiLvlJr7UyxSNJ+7TsjremE5b9Z7yKd+up3163/1zXhFewXa8Ox
icgClA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org