Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/57f48be2698c3569f7b6e575f9f26717ae0f10ee.roa
File:                     57f48be2698c3569f7b6e575f9f26717ae0f10ee.roa (raw, json)
Hash identifier:          1brmYtV1g7O4m1u00I9xoaCp9nVJ0k0voetOttPExnY=
Subject key identifier:   25:1A:C9:EB:42:84:12:FA:1B:DE:BE:12:40:28:1E:48:C5:37:73:EF
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       237D4F
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/57f48be2698c3569f7b6e575f9f26717ae0f10ee.roa
Signing time:             Fri 05 May 2023 13:06:32 +0000
ROA not before:           Thu 04 May 2023 13:06:32 +0000
ROA not after:            Mon 05 May 2025 13:06:32 +0000
asID:                     52323
IP address blocks:        181.16.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325839 (0x237d4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: May  4 13:06:32 2023 GMT
            Not After : May  5 13:06:32 2025 GMT
        Subject: CN=57f48be2698c3569f7b6e575f9f26717ae0f10ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:17:b7:15:58:14:6a:9f:a7:1a:d0:d8:e7:
                    04:58:34:9b:cc:38:19:60:9c:35:25:5d:cf:83:b2:
                    ff:7f:1e:b3:75:76:fa:c9:d2:ef:27:12:58:25:cf:
                    0d:f8:f2:06:6d:00:90:b8:38:7d:ca:7e:35:a7:6f:
                    d8:4a:0c:33:0d:20:b5:db:0f:95:11:96:b3:76:c9:
                    fa:20:9c:8e:b8:4e:68:97:37:0b:bd:58:d1:9d:66:
                    7b:41:76:f5:48:e9:39:ab:2d:51:77:46:1a:cc:af:
                    43:ea:9d:b6:18:d1:3f:75:97:9c:e6:05:0a:71:ce:
                    aa:53:ac:8d:dd:03:ae:be:2a:3f:60:5e:13:1a:95:
                    17:83:3d:0f:93:e6:a8:86:63:20:e4:88:6c:7a:d7:
                    1c:dd:da:02:51:23:ae:dd:6f:a3:1a:51:5f:0c:41:
                    58:16:60:69:b3:88:c3:79:17:56:56:73:2f:46:02:
                    71:38:79:28:dc:17:0f:e8:6e:d2:25:12:ad:e3:9c:
                    e2:2d:d6:87:e4:d5:5c:70:ec:70:c7:cb:9c:d1:45:
                    50:c9:02:b2:42:39:a7:56:73:31:1d:2a:04:1c:b7:
                    ec:87:d7:cf:0e:38:ca:9e:1e:90:d6:92:5c:00:75:
                    9e:c1:8f:80:f7:03:cb:ee:1a:cb:79:56:4e:d9:cc:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1A:C9:EB:42:84:12:FA:1B:DE:BE:12:40:28:1E:48:C5:37:73:EF
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/57f48be2698c3569f7b6e575f9f26717ae0f10ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:49:16:74:85:68:a0:a3:18:b3:f6:c6:9d:61:21:ec:8b:
         32:ad:cd:01:6a:88:4d:d8:74:8e:04:00:c3:a8:74:01:29:eb:
         f2:70:5e:3b:b6:53:0f:2b:cf:88:df:9c:0d:97:da:c4:75:6b:
         c4:14:ee:04:8b:4e:49:ea:15:92:41:4b:0f:6f:2d:b3:d0:81:
         51:bd:ae:c8:42:15:b3:1f:7a:e4:e8:96:20:92:1c:06:24:41:
         46:6a:8a:06:8c:f8:26:9c:f3:3f:56:64:a4:62:79:e1:a3:66:
         03:ed:c7:0b:1f:5e:55:a2:6b:14:a1:51:7e:40:03:67:4d:4b:
         65:a1:4d:97:36:dd:ef:ae:76:77:14:24:7c:a9:a1:f8:fa:8f:
         d1:a0:4d:93:69:c5:02:00:a3:ce:3c:cd:4c:71:03:c9:ea:56:
         47:02:f9:e3:4a:8a:34:55:99:cc:12:5e:3e:4f:e3:6b:9e:80:
         62:a1:c9:ee:ac:02:68:e9:11:d4:dd:4e:47:c6:cb:88:9b:3b:
         87:c8:7d:96:54:55:c5:63:a5:0f:9a:17:98:44:a8:88:00:61:
         f5:91:e7:19:3a:e3:94:e6:75:0a:fd:ce:f4:e2:c8:2b:78:55:
         b7:a7:c9:1f:4d:fa:26:b0:a2:a8:a6:50:07:84:5f:03:97:00:
         c0:11:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org