Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6d252345cd285aa5e8f9bc16f3cfd1b89e36e02f.roa
File:                     6d252345cd285aa5e8f9bc16f3cfd1b89e36e02f.roa (raw, json)
Hash identifier:          nWQnuJv0OH8t4thihhK8uq0iKRYex0EcnVQmxNUBWJ4=
Subject key identifier:   6D:BD:70:C5:68:0B:CA:E9:EA:A8:42:AA:1B:DC:E4:A4:E7:DA:34:75
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E7DDF
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6d252345cd285aa5e8f9bc16f3cfd1b89e36e02f.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949727 (0xe7ddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=6d252345cd285aa5e8f9bc16f3cfd1b89e36e02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f2:a6:09:af:7d:fe:f0:c5:0b:e9:05:d0:ea:
                    68:42:dd:8d:52:16:aa:e4:95:5f:ca:00:5c:7f:0b:
                    97:60:64:a5:71:f6:d3:89:ca:ad:bf:de:12:2f:3f:
                    cd:ed:e9:7f:6f:37:e7:23:4b:ac:1b:df:1f:ad:de:
                    44:da:97:06:01:4a:b5:9f:31:be:8a:aa:80:9b:5f:
                    35:91:34:bf:36:2d:8a:8f:8e:21:78:cb:65:1c:19:
                    69:99:eb:23:7a:5f:62:51:c8:c2:29:1a:ce:4b:54:
                    8a:90:0f:cc:85:2e:0f:e1:7d:81:98:6a:85:d5:25:
                    04:ca:f0:d3:fa:c1:b1:e1:bf:10:8f:ed:12:d4:d9:
                    ea:c9:84:73:26:9f:94:80:82:8e:33:a0:b7:8d:c4:
                    10:a1:93:3a:25:f9:a5:06:da:c7:74:a3:a5:b6:cd:
                    0c:00:c5:18:6b:df:fc:30:96:56:68:b5:89:8a:6e:
                    de:a9:a2:9b:54:54:e3:7f:f7:f5:a6:e8:59:6d:e7:
                    c8:97:4e:db:e1:5e:c8:53:e8:0c:59:fa:d2:68:44:
                    52:a2:40:22:40:c7:32:34:b8:c3:1c:7c:ad:2c:10:
                    d2:b7:33:85:5e:a6:b0:54:0c:28:b8:9d:f5:f1:bc:
                    20:2e:f0:36:6b:4e:48:7b:f6:d5:ca:29:72:19:4a:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BD:70:C5:68:0B:CA:E9:EA:A8:42:AA:1B:DC:E4:A4:E7:DA:34:75
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6d252345cd285aa5e8f9bc16f3cfd1b89e36e02f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:1b:db:61:23:86:52:7c:d8:3b:8e:be:a1:90:c7:de:61:47:
         ad:64:dc:c3:65:1e:a4:56:83:57:65:64:41:6b:d3:b1:ce:be:
         a2:e2:91:58:01:3f:17:46:87:c9:5c:46:30:e1:c9:2f:b5:da:
         c0:a0:db:f0:76:0d:06:ef:a0:98:d1:a9:08:30:2e:da:fe:d3:
         da:bf:f7:3c:d1:a8:b2:c1:a3:65:fd:0b:b2:f4:cc:a9:d1:62:
         91:d7:ed:ba:56:98:91:56:61:64:b2:95:13:c6:f6:14:97:b5:
         fd:e1:70:44:22:e9:72:fb:8e:47:1f:58:3e:34:85:5a:e2:61:
         b1:f6:97:c9:34:0c:df:87:03:9a:c3:53:d1:5a:27:e1:5d:4c:
         2b:f7:e3:7d:64:07:86:a0:71:a6:62:14:f4:38:43:da:ef:39:
         b4:70:08:d0:d4:e2:6a:fd:4f:34:9b:2a:7c:33:a1:ab:35:e2:
         00:27:13:3e:32:87:3a:44:29:b1:71:8d:56:22:26:f3:e1:2b:
         4e:5d:4d:a9:47:26:51:2c:ef:cc:6c:8d:c7:a9:fb:ae:96:31:
         3b:6d:c4:b8:50:37:0f:fa:0a:f9:38:eb:4c:99:c5:54:0a:3e:
         a5:d7:61:00:53:6e:d9:b0:44:e7:db:2e:0e:94:84:5c:c4:54:
         73:8b:85:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org