Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5498a1bd4c238a682497ca2c346fc9bd54b93747.roa
File:                     5498a1bd4c238a682497ca2c346fc9bd54b93747.roa (raw, json)
Hash identifier:          Fbm8rka84et/JwwpjisPH6Udxk3Kj94RnYqhJCYvC9s=
Subject key identifier:   17:13:FF:94:4F:66:B1:A3:C8:DE:27:D8:5C:A9:ED:F9:60:C6:FB:18
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       257FB1
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5498a1bd4c238a682497ca2c346fc9bd54b93747.roa
Signing time:             Tue 25 Jul 2023 17:47:02 +0000
ROA not before:           Mon 24 Jul 2023 17:47:02 +0000
ROA not after:            Fri 25 Jul 2025 17:47:02 +0000
asID:                     52323
IP address blocks:        181.16.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457521 (0x257fb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 24 17:47:02 2023 GMT
            Not After : Jul 25 17:47:02 2025 GMT
        Subject: CN=5498a1bd4c238a682497ca2c346fc9bd54b93747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:fa:01:e0:d5:67:99:1c:37:a8:c0:38:86:
                    6e:43:02:4c:f7:cb:61:de:81:65:b1:a3:90:e5:0f:
                    b0:cb:57:5f:98:5e:d2:40:83:92:06:c5:75:cc:42:
                    66:ee:dd:11:f0:bb:43:6c:ad:f2:05:a8:c8:ef:6f:
                    e7:3a:71:90:13:5d:a2:f1:a9:e4:63:0f:cb:cd:15:
                    1e:61:a2:69:52:42:5a:9b:b5:9f:04:e1:cb:ac:e4:
                    a5:95:60:cd:0c:1e:f6:78:64:f1:17:3b:29:2b:49:
                    07:e0:ae:4d:72:9c:77:98:56:7b:f6:7d:a4:ee:fa:
                    e7:0b:58:43:63:0d:16:20:b5:d7:3e:93:c0:33:9c:
                    5a:0c:37:5b:4b:69:d9:96:8a:8a:64:02:8e:29:33:
                    5a:45:d4:90:0f:d9:d9:20:10:a6:b9:21:ab:06:a5:
                    98:09:07:32:7c:bc:58:90:b5:c0:63:40:65:ef:a6:
                    36:2a:f4:d0:54:0b:5f:2e:61:83:0b:ef:59:ba:ac:
                    45:05:5f:ce:70:e6:ee:50:ea:fe:78:4e:b6:47:fd:
                    f9:84:c9:65:87:04:7d:5d:9b:a8:80:f0:ad:26:e3:
                    1a:18:cc:c0:e8:1f:8e:83:1c:72:6f:83:4a:22:91:
                    b5:01:05:b1:d9:87:23:eb:b0:ac:74:91:eb:e9:7b:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:13:FF:94:4F:66:B1:A3:C8:DE:27:D8:5C:A9:ED:F9:60:C6:FB:18
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5498a1bd4c238a682497ca2c346fc9bd54b93747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:99:c9:bc:ff:2f:ad:ba:96:97:e3:70:f0:00:f1:bb:35:
         95:12:78:29:9c:c3:71:c6:26:d0:66:d1:28:a9:9e:8f:96:e3:
         86:4e:7d:65:51:ae:af:de:07:12:44:3b:19:9c:b5:c3:ab:57:
         9c:2c:74:9c:58:9a:a7:9e:ce:20:dc:8a:ea:e0:d2:9f:20:d8:
         13:ff:83:03:57:26:ec:2c:3f:cc:c7:63:cb:28:c9:32:36:c5:
         5a:f7:72:3d:05:c4:cc:99:c9:98:58:e1:06:35:34:2f:8c:b0:
         cb:a2:ea:07:86:9f:40:d8:01:87:d5:41:40:c4:a9:91:4e:78:
         22:c6:77:65:86:f9:fd:be:87:b1:d8:0f:b0:19:ed:d1:07:5b:
         03:97:60:26:d1:08:c8:3d:7f:4a:f4:37:b5:d0:08:b0:a3:5a:
         84:63:0e:ff:df:58:27:c4:4a:af:21:24:9a:cc:de:36:16:3e:
         39:66:77:03:e0:24:46:b9:43:68:d7:5b:6b:27:10:67:79:b7:
         bc:9b:e3:2c:6a:05:91:70:cb:13:94:51:ee:f6:03:7e:ff:70:
         d7:45:f3:85:c3:35:00:c9:36:6a:6a:d4:10:c5:d7:87:13:96:
         97:9d:48:08:37:4d:f7:35:d4:21:d5:16:b9:ca:65:8a:ed:75:
         12:3a:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org