Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/4d86277d7268b27fe0181007fe52b83363972a6b.roa
File:                     4d86277d7268b27fe0181007fe52b83363972a6b.roa (raw, json)
Hash identifier:          4nFf0LVLBy+IE247pwgx1ekYaG/fin8L7OuvhL2s1TU=
Subject key identifier:   DE:E1:64:A7:58:42:A6:CC:6A:24:C0:DF:D6:FC:31:F5:CC:6A:78:74
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EB2E1
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/4d86277d7268b27fe0181007fe52b83363972a6b.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963297 (0xeb2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=4d86277d7268b27fe0181007fe52b83363972a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:6b:9c:33:98:53:47:a4:a5:b7:c7:95:e3:
                    00:9c:e4:e8:ee:99:41:56:6d:da:86:c1:54:5f:32:
                    b5:1f:c7:26:5b:57:cb:72:d8:58:04:91:9b:62:11:
                    54:28:67:ab:cd:a5:69:af:64:c5:56:b7:5a:10:5a:
                    9c:d1:30:4d:37:70:ff:e8:f4:5b:b1:c3:8a:d0:aa:
                    71:bb:b2:48:2b:51:b4:95:42:ad:ee:0e:86:9a:ad:
                    da:c6:c0:d1:17:e5:09:79:ed:c1:be:bc:3b:4e:5e:
                    1c:67:71:bd:f9:7a:27:41:5f:f6:13:42:61:aa:85:
                    80:ae:75:11:f5:e7:cd:06:7c:2f:46:b6:d4:a3:ee:
                    ae:80:0c:b9:d9:65:fd:7d:74:93:73:81:3f:3a:d8:
                    1d:0c:60:c0:0b:82:db:19:1b:2d:1d:02:1b:96:e8:
                    72:73:ea:86:0b:37:47:e0:d9:46:01:18:e9:5c:3b:
                    40:fa:6b:94:de:90:f8:84:48:92:60:5b:86:12:b6:
                    83:3a:61:05:87:97:21:01:3f:1e:00:37:07:03:89:
                    4e:99:19:b7:bf:dc:ef:0f:33:e3:9a:41:91:92:69:
                    7a:1d:17:53:7f:35:38:ae:a1:4a:ef:d0:2f:05:ef:
                    72:cd:15:02:0b:8a:f5:6a:2a:41:2a:db:fb:7a:5f:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E1:64:A7:58:42:A6:CC:6A:24:C0:DF:D6:FC:31:F5:CC:6A:78:74
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/4d86277d7268b27fe0181007fe52b83363972a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a8:40:d6:92:a5:2c:d7:68:f6:88:3f:59:b1:1c:ae:8f:1a:
         b0:29:6b:b4:53:7d:88:31:8c:9b:44:5a:41:86:ae:14:30:9e:
         59:99:2d:c6:16:89:2f:9a:7d:b8:29:33:92:df:3a:1d:8f:29:
         c6:b0:cc:df:02:9e:bc:05:f4:bb:2a:1c:d2:ae:db:28:83:ba:
         12:4d:3b:46:a2:02:ff:1d:bf:76:b1:68:4f:22:43:9e:03:e1:
         29:7f:b8:4e:8c:ea:39:99:0f:05:2f:96:4f:95:b1:a8:0b:5d:
         21:8e:90:15:b8:cf:df:b0:a2:84:e1:c8:40:4b:9e:b3:fd:35:
         5c:4b:a9:1f:95:58:78:6b:c2:a1:6e:d7:62:c2:4e:60:00:5b:
         e3:e9:64:8e:02:16:1e:3c:77:51:90:1e:8a:04:38:2f:7f:48:
         73:65:7b:eb:5c:bb:fc:4a:10:84:59:ec:29:3b:91:f7:d0:d5:
         fd:ff:10:bd:d9:99:63:5f:1a:1d:50:bb:fe:a9:5b:58:10:60:
         51:36:fc:81:ad:db:4c:17:03:6a:96:92:2c:8b:7f:3b:23:46:
         fb:52:9c:a5:2f:7f:6e:5e:eb:8e:a3:46:a8:6a:b2:cd:7c:3a:
         1c:18:fd:ef:67:ae:dc:bd:d1:b7:3a:32:e2:1f:3d:ab:97:89:
         c8:fa:18:34
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDrLhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyg0ZDg2Mjc3ZDcyNjhi
MjdmZTAxODEwMDdmZTUyYjgzMzYzOTcyYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj3ZrnDOYU0ekpbfHleMAnOTo7plBVm3ahsFUXzK1H8cmW1fL
cthYBJGbYhFUKGerzaVpr2TFVrdaEFqc0TBNN3D/6PRbscOK0Kpxu7JIK1G0lUKt
7g6Gmq3axsDRF+UJee3Bvrw7Tl4cZ3G9+XonQV/2E0JhqoWArnUR9efNBnwvRrbU
o+6ugAy52WX9fXSTc4E/OtgdDGDAC4LbGRstHQIbluhyc+qGCzdH4NlGARjpXDtA
+muU3pD4hEiSYFuGEraDOmEFh5chAT8eADcHA4lOmRm3v9zvDzPjmkGRkml6HRdT
fzU4rqFK79AvBe9yzRUCC4r1aipBKtv7el+cGwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN7hZKdYQqbMaiTA39b8MfXManh0MB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzRkODYyNzdkNzI2OGIyN2ZlMDE4MTAwN2ZlNTJiODMzNjM5NzJhNmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQlzANBgkqhkiG9w0BAQsFAAOCAQEAaKhA1pKlLNdo9og/
WbEcro8asClrtFN9iDGMm0RaQYauFDCeWZktxhaJL5p9uCkzkt86HY8pxrDM3wKe
vAX0uyoc0q7bKIO6Ek07RqIC/x2/drFoTyJDngPhKX+4TozqOZkPBS+WT5WxqAtd
IY6QFbjP37CihOHIQEues/01XEupH5VYeGvCoW7XYsJOYABb4+lkjgIWHjx3UZAe
igQ4L39Ic2V761y7/EoQhFnsKTuR99DV/f8QvdmZY18aHVC7/qlbWBBgUTb8ga3b
TBcDapaSLIt/OyNG+1KcpS9/bl7rjqNGqGqyzXw6HBj972eu3L3Rtzoy4h89q5eJ
yPoYNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org