Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/62cffaf8399c9569bf63b0de3eca24c3568f81a7.roa
File:                     62cffaf8399c9569bf63b0de3eca24c3568f81a7.roa (raw, json)
Hash identifier:          UZGbwL0UX6itEcQz7B1RlwecBDMvru98OlpZamA0K04=
Subject key identifier:   54:85:A6:2D:D5:21:BF:73:5B:E6:9F:B8:83:F7:83:F1:AA:D4:F3:73
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       237249
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/62cffaf8399c9569bf63b0de3eca24c3568f81a7.roa
Signing time:             Fri 05 May 2023 12:44:07 +0000
ROA not before:           Thu 04 May 2023 12:44:06 +0000
ROA not after:            Mon 05 May 2025 12:44:06 +0000
asID:                     52323
IP address blocks:        181.16.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323017 (0x237249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: May  4 12:44:06 2023 GMT
            Not After : May  5 12:44:06 2025 GMT
        Subject: CN=62cffaf8399c9569bf63b0de3eca24c3568f81a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:e8:b9:f5:cd:92:05:6f:f7:d9:1b:3c:c5:
                    21:bb:27:e6:62:ad:fd:f3:ef:e2:a6:88:5e:20:6b:
                    ea:16:5f:34:54:d8:ef:be:91:f4:64:56:d3:c3:19:
                    24:fe:80:24:f8:df:d7:20:f7:4c:76:b9:27:3a:f1:
                    c3:26:d5:57:c2:50:22:ed:58:8a:ab:6d:9e:01:dc:
                    65:27:e7:43:1e:03:e1:19:36:e5:4f:55:70:df:3a:
                    b7:39:b3:ed:ec:4c:e8:92:69:3b:5f:4d:c2:56:ae:
                    86:df:5d:1f:99:d5:48:b1:c2:0b:80:0e:42:64:0d:
                    93:07:1e:97:2e:54:83:e8:e9:63:e7:83:6e:e6:8e:
                    c3:28:d5:ae:7d:47:6b:22:87:b7:be:38:93:30:91:
                    69:4e:05:89:77:2e:a6:7d:0f:49:2c:89:68:b0:cc:
                    80:8a:0c:ed:e7:4b:9b:33:34:3a:21:d9:d8:ba:1b:
                    03:0e:55:9c:08:5e:ce:da:dc:84:43:27:0e:65:6a:
                    fe:1f:dd:0b:e4:d8:65:3e:72:5a:8e:1b:c7:d8:8f:
                    54:e7:e0:4c:b8:75:b9:36:a2:3f:55:b3:5e:bd:49:
                    85:a1:f4:0f:04:82:b1:9a:64:fe:3f:46:7b:f1:d8:
                    47:9c:d9:98:dd:a9:c1:2b:c8:20:cf:48:7a:be:01:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:85:A6:2D:D5:21:BF:73:5B:E6:9F:B8:83:F7:83:F1:AA:D4:F3:73
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/62cffaf8399c9569bf63b0de3eca24c3568f81a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:88:c9:a4:28:b0:e2:94:9d:e9:18:26:04:bf:00:05:f0:d7:
         93:43:27:df:b2:33:fb:e8:80:02:8c:01:6a:c7:2d:4e:17:87:
         71:4d:aa:a7:93:b4:4f:3b:73:88:65:36:30:56:33:b1:b8:57:
         d5:d1:5a:82:17:67:c1:83:2c:99:fc:d3:82:ca:a9:29:73:7d:
         06:87:24:2c:d7:80:77:6e:77:79:ad:f6:d6:5b:fe:58:34:ba:
         2a:dc:7e:92:94:17:9d:82:96:fc:fb:55:3d:fc:db:41:d7:4d:
         a7:84:ae:8b:49:b8:43:48:96:ad:61:6f:fd:cf:18:96:d0:68:
         b5:52:ea:52:25:e4:1c:99:9f:49:19:c0:dc:8e:a9:45:c7:6d:
         38:b3:d7:64:55:d7:c4:bb:25:73:a4:c8:4a:83:09:f3:ce:ec:
         ee:00:c1:44:bf:86:07:bb:c3:36:cc:62:a8:d7:eb:15:df:ce:
         28:58:80:74:70:87:13:1f:50:98:80:13:f1:13:56:9b:b4:16:
         0e:14:0e:67:5a:1e:73:25:f5:20:9e:fd:60:79:b5:12:1c:6a:
         37:54:9e:7e:e4:eb:f2:5b:c7:2b:10:0b:25:ad:c3:97:24:02:
         22:ab:d5:be:c6:39:be:41:6c:ef:ab:f8:a9:95:f2:83:71:a0:
         7d:87:00:f7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI3JJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjMwNTA0
MTI0NDA2WhcNMjUwNTA1MTI0NDA2WjAzMTEwLwYDVQQDEyg2MmNmZmFmODM5OWM5
NTY5YmY2M2IwZGUzZWNhMjRjMzU2OGY4MWE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz0voufXNkgVv99kbPMUhuyfmYq398+/ipoheIGvqFl80VNjv
vpH0ZFbTwxkk/oAk+N/XIPdMdrknOvHDJtVXwlAi7ViKq22eAdxlJ+dDHgPhGTbl
T1Vw3zq3ObPt7Ezokmk7X03CVq6G310fmdVIscILgA5CZA2TBx6XLlSD6Olj54Nu
5o7DKNWufUdrIoe3vjiTMJFpTgWJdy6mfQ9JLIlosMyAigzt50ubMzQ6IdnYuhsD
DlWcCF7O2tyEQycOZWr+H90L5NhlPnJajhvH2I9U5+BMuHW5NqI/VbNevUmFofQP
BIKxmmT+P0Z78dhHnNmY3anBK8ggz0h6vgGyEQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFSFpi3VIb9zW+afuIP3g/Gq1PNzMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzYyY2ZmYWY4Mzk5Yzk1NjliZjYzYjBkZTNlY2EyNGMzNTY4ZjgxYTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQsjANBgkqhkiG9w0BAQsFAAOCAQEAJIjJpCiw4pSd6Rgm
BL8ABfDXk0Mn37Iz++iAAowBasctTheHcU2qp5O0TztziGU2MFYzsbhX1dFaghdn
wYMsmfzTgsqpKXN9BockLNeAd253ea321lv+WDS6Ktx+kpQXnYKW/PtVPfzbQddN
p4Sui0m4Q0iWrWFv/c8YltBotVLqUiXkHJmfSRnA3I6pRcdtOLPXZFXXxLslc6TI
SoMJ887s7gDBRL+GB7vDNsxiqNfrFd/OKFiAdHCHEx9QmIAT8RNWm7QWDhQOZ1oe
cyX1IJ79YHm1EhxqN1SefuTr8lvHKxALJa3DlyQCIqvVvsY5vkFs76v4qZXyg3Gg
fYcA9w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org