Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6cc11c5c6d3e70b9a18875062103d1d85a3d04a5.roa
File:                     6cc11c5c6d3e70b9a18875062103d1d85a3d04a5.roa (raw, json)
Hash identifier:          f27NG63QHE8A8P9quhEBnYtMbe3lhvuOC5y2KJo8XEs=
Subject key identifier:   53:C2:53:7E:6B:3A:6D:9A:AF:23:86:1F:24:32:3F:43:17:58:95:44
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       25B13D
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6cc11c5c6d3e70b9a18875062103d1d85a3d04a5.roa
Signing time:             Wed 26 Jul 2023 13:57:36 +0000
ROA not before:           Tue 25 Jul 2023 13:57:36 +0000
ROA not after:            Sat 26 Jul 2025 13:57:36 +0000
asID:                     52323
IP address blocks:        181.16.188.0/23 maxlen: 24
                          181.16.190.0/24 maxlen: 24
                          181.16.200.0/24 maxlen: 24
                          181.16.203.0/24 maxlen: 24
                          181.16.232.0/23 maxlen: 24
                          181.16.235.0/24 maxlen: 24
                          181.16.241.0/24 maxlen: 24
                          181.16.242.0/23 maxlen: 24
                          181.16.244.0/22 maxlen: 24
                          181.16.248.0/22 maxlen: 24
                          181.16.252.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470205 (0x25b13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 25 13:57:36 2023 GMT
            Not After : Jul 26 13:57:36 2025 GMT
        Subject: CN=6cc11c5c6d3e70b9a18875062103d1d85a3d04a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:f5:4b:35:ec:09:a7:a7:fc:fd:a1:c7:21:
                    b1:11:7d:46:8e:b4:2b:64:7e:93:73:aa:28:2c:41:
                    7e:6e:a7:62:06:62:8a:6b:26:5d:25:02:fb:ea:66:
                    b1:53:6d:28:64:38:21:82:ff:73:27:dd:68:8f:c0:
                    0a:28:24:21:a9:79:65:03:8d:76:b9:49:c9:ec:4c:
                    c9:ca:a3:96:b8:2b:6d:fd:72:43:79:8a:13:4e:d9:
                    8b:5b:13:23:08:b6:c4:82:92:cc:4c:ea:a3:c7:95:
                    8a:7b:c6:f8:9e:9f:5a:6e:cc:b5:a8:12:8f:3a:fa:
                    b4:88:d2:40:29:0f:d6:e8:27:a4:bf:70:8f:c1:6e:
                    40:62:0f:e2:fd:9a:2b:fa:90:19:2d:cc:79:49:9d:
                    b5:0f:82:05:f8:4d:7d:31:7c:19:7a:30:5c:e8:31:
                    bb:d2:c3:63:d4:3e:66:0a:f4:1c:ec:1a:2f:67:45:
                    d5:5a:fa:27:75:d3:61:0f:b6:48:6b:f1:d2:ab:95:
                    a0:69:52:27:00:13:58:6a:4e:e1:cd:23:ef:7b:79:
                    e7:85:1a:6a:8c:99:6f:30:4d:b8:9c:54:43:9b:0e:
                    ae:86:9a:8e:ba:46:31:6a:9d:5b:c5:41:ba:73:f0:
                    1d:78:65:b2:da:e2:d3:8a:bc:2f:b5:03:91:22:2b:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C2:53:7E:6B:3A:6D:9A:AF:23:86:1F:24:32:3F:43:17:58:95:44
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6cc11c5c6d3e70b9a18875062103d1d85a3d04a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.188.0-181.16.190.255
                  181.16.200.0/24
                  181.16.203.0/24
                  181.16.232.0/23
                  181.16.235.0/24
                  181.16.241.0-181.16.253.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:dc:9d:5d:7c:54:13:85:94:7b:b6:e6:93:79:ac:bb:a1:85:
         90:82:59:fe:06:78:74:28:9a:35:7d:f6:25:b8:83:f4:16:9c:
         eb:b9:4e:cc:5a:80:7e:8f:28:77:c6:f5:d6:28:d7:67:2f:95:
         84:32:33:29:87:b9:2a:c8:61:13:40:74:67:ca:ba:90:e3:3d:
         5d:87:35:8c:12:0f:a8:e5:b3:bf:05:1a:38:ca:ac:d3:45:62:
         f9:70:d5:c0:19:a4:e3:f6:e9:2b:53:0a:9f:22:d0:85:25:1a:
         d2:2b:91:f2:e9:0c:0f:52:a1:cb:06:c5:e7:f2:a5:4d:26:36:
         94:c7:bb:74:9f:18:7e:64:a7:9c:06:64:41:ef:d2:26:d5:6b:
         04:ac:1b:9f:a8:5f:45:18:d9:60:d4:3a:b6:e9:10:4a:ad:b2:
         c7:e0:d0:1e:35:cb:55:d3:79:34:8e:fd:e7:20:a9:6c:1f:f7:
         0c:bb:37:99:ca:21:20:c1:3f:c8:21:a9:bf:89:c3:25:78:4c:
         67:0b:55:51:77:02:55:be:98:18:58:3e:f9:5a:22:f9:e2:8e:
         7b:f7:d5:48:12:fa:59:41:18:84:80:0a:5c:99:6d:b4:a5:b6:
         ff:dc:33:5e:9d:40:eb:6b:11:dd:8b:2b:14:8d:7f:55:93:3a:
         fb:5c:78:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org