Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/553a2f819a229bd14d2e025d88b4bc65611b5c33.roa
File:                     553a2f819a229bd14d2e025d88b4bc65611b5c33.roa (raw, json)
Hash identifier:          vo7/17Kq627vZymPxiep+t5+4HVf1iudz33Zc6wz7g8=
Subject key identifier:   43:6E:3B:8B:03:2B:83:48:83:A9:65:41:F1:34:FD:4C:B3:1A:87:C3
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       235CA8
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/553a2f819a229bd14d2e025d88b4bc65611b5c33.roa
Signing time:             Thu 04 May 2023 18:35:23 +0000
ROA not before:           Wed 03 May 2023 18:35:23 +0000
ROA not after:            Sun 04 May 2025 18:35:23 +0000
asID:                     52323
IP address blocks:        181.16.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317480 (0x235ca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: May  3 18:35:23 2023 GMT
            Not After : May  4 18:35:23 2025 GMT
        Subject: CN=553a2f819a229bd14d2e025d88b4bc65611b5c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:61:ae:41:94:d9:3b:2e:cf:f0:8d:6d:05:
                    f6:d5:8e:4a:f9:07:9b:af:8b:df:92:83:a5:55:41:
                    c9:d4:02:0e:06:a9:d1:32:af:53:a2:05:b4:90:c7:
                    21:77:8b:0a:16:fd:a8:0d:09:fd:ba:24:d9:29:5d:
                    d2:f7:49:e5:e8:4e:66:e0:58:89:d8:fa:c5:55:ad:
                    34:0a:87:4d:ae:3c:a0:b7:7e:ab:a8:f6:b0:22:c3:
                    2d:0c:2e:07:ce:d4:c6:5b:a6:6b:96:2f:cb:a0:69:
                    0a:82:00:43:13:54:59:13:e4:76:a6:7e:67:dd:a1:
                    02:ec:f6:50:78:ac:b4:1a:7e:c6:ec:59:fe:18:89:
                    b5:39:fa:c4:c5:a0:83:26:d0:19:41:80:8b:7f:ff:
                    91:4c:54:27:3b:10:ee:51:54:38:44:18:c5:83:8f:
                    d5:39:1d:62:6a:e7:be:40:26:b0:70:b7:05:75:04:
                    e1:e8:6f:ac:ed:40:89:ce:2f:f3:03:cb:a6:88:27:
                    df:52:fa:8f:90:b9:6c:13:3c:00:2a:53:6f:f1:ae:
                    dd:50:9d:b7:1c:e4:74:d4:6c:51:fb:74:9c:a4:2d:
                    6d:5a:92:9f:0d:f9:58:d2:c4:5f:14:79:14:fd:24:
                    03:a2:70:75:d9:28:d3:31:63:f5:7e:72:6c:02:1b:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6E:3B:8B:03:2B:83:48:83:A9:65:41:F1:34:FD:4C:B3:1A:87:C3
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/553a2f819a229bd14d2e025d88b4bc65611b5c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:06:85:47:55:da:83:08:4a:47:58:8b:26:7c:99:de:22:e0:
         6c:7c:37:96:aa:d3:d4:b6:13:84:bd:01:e8:39:08:4b:75:2a:
         2a:85:6b:25:e9:89:70:c0:54:73:57:53:50:9f:9a:30:a8:6d:
         de:b3:5e:34:8b:9b:f0:7a:5c:e9:d2:1e:03:06:4d:7d:f4:b8:
         e6:7d:be:dc:68:22:7b:cd:7f:5e:d2:7e:8c:54:2f:fe:7e:b6:
         d5:2c:89:2e:c0:91:d0:26:d6:f1:85:db:4e:af:dd:c6:05:12:
         52:62:46:a5:00:23:6d:7d:a1:8a:c3:15:42:37:c7:70:bf:db:
         69:7f:08:1a:12:8f:c9:24:23:c8:e8:aa:88:70:bf:1d:42:09:
         9b:d8:69:08:3e:92:20:09:ff:65:de:a0:25:ec:63:2e:d6:f9:
         0a:d4:5a:e8:be:52:cd:af:d3:19:49:8f:5d:73:db:c1:d8:c5:
         64:94:c3:42:9b:f0:53:12:f8:b2:78:74:9e:e1:03:e5:e0:f4:
         d1:3b:78:3c:e3:8b:00:d2:74:d8:38:c6:a8:cd:ba:9c:b3:a6:
         93:ec:47:8a:3d:f4:c0:87:87:24:fd:57:be:80:8c:e8:59:b1:
         68:00:54:e6:ce:bb:20:89:8a:cd:63:a0:85:74:12:41:be:a2:
         f2:df:19:da
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI1yoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjMwNTAz
MTgzNTIzWhcNMjUwNTA0MTgzNTIzWjAzMTEwLwYDVQQDEyg1NTNhMmY4MTlhMjI5
YmQxNGQyZTAyNWQ4OGI0YmM2NTYxMWI1YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApUlhrkGU2Tsuz/CNbQX21Y5K+Qebr4vfkoOlVUHJ1AIOBqnR
Mq9TogW0kMchd4sKFv2oDQn9uiTZKV3S90nl6E5m4FiJ2PrFVa00CodNrjygt36r
qPawIsMtDC4HztTGW6Zrli/LoGkKggBDE1RZE+R2pn5n3aEC7PZQeKy0Gn7G7Fn+
GIm1OfrExaCDJtAZQYCLf/+RTFQnOxDuUVQ4RBjFg4/VOR1iaue+QCawcLcFdQTh
6G+s7UCJzi/zA8umiCffUvqPkLlsEzwAKlNv8a7dUJ23HOR01GxR+3ScpC1tWpKf
DflY0sRfFHkU/SQDonB12SjTMWP1fnJsAhuZJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFENuO4sDK4NIg6llQfE0/UyzGofDMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzU1M2EyZjgxOWEyMjliZDE0ZDJlMDI1ZDg4YjRiYzY1NjExYjVjMzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQlzANBgkqhkiG9w0BAQsFAAOCAQEAYgaFR1XagwhKR1iL
JnyZ3iLgbHw3lqrT1LYThL0B6DkIS3UqKoVrJemJcMBUc1dTUJ+aMKht3rNeNIub
8Hpc6dIeAwZNffS45n2+3Ggie81/XtJ+jFQv/n621SyJLsCR0CbW8YXbTq/dxgUS
UmJGpQAjbX2hisMVQjfHcL/baX8IGhKPySQjyOiqiHC/HUIJm9hpCD6SIAn/Zd6g
JexjLtb5CtRa6L5Sza/TGUmPXXPbwdjFZJTDQpvwUxL4snh0nuED5eD00Tt4POOL
ANJ02DjGqM26nLOmk+xHij30wIeHJP1XvoCM6FmxaABU5s67IImKzWOghXQSQb6i
8t8Z2g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org