Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/60d91a4cde7bdaaefd5a515fd66f8c1c91624062.roa
File:                     60d91a4cde7bdaaefd5a515fd66f8c1c91624062.roa (raw, json)
Hash identifier:          FhosYUoIvoA1pRv4LwHGjHdOxcPz9I6QXA4jg0mpSH8=
Subject key identifier:   8A:BF:46:7A:D9:8D:EE:69:4B:54:B5:D5:E7:A6:25:A5:E3:D2:29:B1
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       25A9B7
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/60d91a4cde7bdaaefd5a515fd66f8c1c91624062.roa
Signing time:             Wed 26 Jul 2023 11:54:37 +0000
ROA not before:           Tue 25 Jul 2023 11:54:37 +0000
ROA not after:            Sat 26 Jul 2025 11:54:37 +0000
asID:                     52323
IP address blocks:        181.16.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2468279 (0x25a9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 25 11:54:37 2023 GMT
            Not After : Jul 26 11:54:37 2025 GMT
        Subject: CN=60d91a4cde7bdaaefd5a515fd66f8c1c91624062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:74:f9:22:ff:0e:13:e9:6c:f0:cb:78:12:
                    a9:18:9e:6c:25:28:54:3e:83:2c:81:1f:c5:c5:c4:
                    24:32:20:6a:3b:88:14:6b:94:66:d7:db:0d:99:4c:
                    52:cb:83:98:20:0b:fc:6c:8c:6c:84:e9:0b:f0:90:
                    57:97:0f:57:63:4b:ab:c6:df:5f:36:7d:92:1d:ca:
                    9c:7c:b6:43:56:21:bf:3f:b8:a6:30:c3:0f:b2:9b:
                    c0:40:00:a5:3d:77:02:53:98:16:ae:37:13:44:83:
                    a7:3d:9f:c4:cd:ce:d3:67:75:21:a5:b9:90:d4:85:
                    92:44:3f:43:5a:f1:09:a6:fe:1b:c6:4c:ed:a3:46:
                    1e:61:d5:ac:6a:57:dc:a6:80:1c:a0:16:5f:63:2f:
                    ca:58:ee:7e:c2:97:3f:e6:1c:3f:1f:a6:b4:14:43:
                    45:1e:5a:c0:6f:a1:72:92:63:61:5a:3c:da:66:64:
                    6c:7d:5b:16:1d:1d:ef:bc:22:58:9c:0f:28:a3:ca:
                    17:13:07:ca:ad:61:37:64:d0:f1:ca:9f:e9:f3:88:
                    f7:d4:c1:aa:37:b6:46:79:28:f8:95:0a:bf:e4:a6:
                    71:ed:6a:d9:bf:48:66:5d:b9:17:4d:4c:d2:44:47:
                    9d:86:24:59:8f:5c:f1:07:26:d1:d8:52:7e:ab:8e:
                    d9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BF:46:7A:D9:8D:EE:69:4B:54:B5:D5:E7:A6:25:A5:E3:D2:29:B1
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/60d91a4cde7bdaaefd5a515fd66f8c1c91624062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:01:fa:6a:78:73:a9:e0:30:86:aa:bb:f1:3d:9d:a9:a8:
         13:49:b1:38:86:b1:6a:c1:8b:de:6f:04:d6:ff:07:81:54:88:
         3a:f2:c1:3e:de:c7:b5:28:25:89:66:23:42:63:d3:60:b1:b8:
         51:c3:84:ab:06:ce:49:55:61:47:70:7a:3e:10:1d:e9:50:e5:
         17:77:77:2a:41:8d:f0:fa:9d:53:24:25:0c:a0:50:0b:9b:b2:
         8d:bc:a4:b4:d8:04:af:ad:cb:e3:12:37:29:f2:25:7b:0a:4a:
         37:2b:79:27:80:e0:29:ab:03:10:ce:da:88:b2:be:f7:4e:5b:
         b4:3a:da:32:73:6b:c1:2c:c7:c4:f5:be:da:14:03:42:ac:55:
         d3:40:fe:f3:4b:5d:9d:35:9d:bf:b9:8c:e6:d5:c6:79:ca:8a:
         2e:d8:b3:4a:13:27:44:92:b7:90:e9:96:06:ad:9a:28:65:6e:
         1f:46:57:cc:d2:d7:c4:53:c3:cd:83:9a:56:ff:8c:46:d5:3c:
         25:b8:c4:8e:4e:f6:9b:c2:ab:e4:1c:28:51:6b:aa:41:ad:55:
         eb:ae:b7:56:eb:dc:da:55:39:f9:2d:21:d0:42:44:d2:fc:35:
         87:a8:19:c9:31:27:4e:c9:e4:58:47:49:83:49:66:82:4f:92:
         ac:c0:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org