Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/72a3bc64a9ed73d7ae0e5d23ebbd1aa632415577.roa
File:                     72a3bc64a9ed73d7ae0e5d23ebbd1aa632415577.roa (raw, json)
Hash identifier:          fTho4oMLqi5N2wIyyQ3xxhdhylnW98SLniMHySXfv8I=
Subject key identifier:   3A:83:17:16:28:A1:71:DA:B6:71:AB:5C:3B:D4:2C:62:09:BF:35:D0
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EB6DA
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/72a3bc64a9ed73d7ae0e5d23ebbd1aa632415577.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964314 (0xeb6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=72a3bc64a9ed73d7ae0e5d23ebbd1aa632415577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:6c:69:ed:f3:5e:e7:4d:3e:a0:cc:c9:fc:
                    f8:ab:87:cf:93:47:a9:7c:8a:87:b4:7d:4f:1e:64:
                    27:8f:3b:86:0d:3a:b9:80:29:f0:67:e5:a4:07:ae:
                    5b:e9:38:bd:13:e2:4a:71:be:60:48:b1:0b:e4:84:
                    52:c4:01:be:df:58:c3:dd:cc:6c:d5:27:ac:4e:87:
                    03:64:d5:58:5f:54:d5:32:82:dc:ac:2b:c4:7b:04:
                    eb:f2:8b:14:87:40:53:fd:81:c2:3b:0a:ee:25:37:
                    69:f4:5d:27:f4:5e:7d:66:ab:fa:28:83:4b:27:b4:
                    f8:a1:f2:ad:56:70:d9:3b:d2:de:0b:70:dc:40:ea:
                    ee:98:59:1c:98:e5:b4:9b:5a:d8:20:69:eb:53:bc:
                    61:10:d6:da:e3:b4:42:ab:34:5c:ea:e1:6d:9a:bc:
                    17:a1:79:fc:f5:10:5d:1f:be:7e:57:70:c2:dc:5b:
                    c7:a3:f9:e7:31:20:6d:ad:ea:fc:33:89:c6:fc:88:
                    ea:9f:be:b9:35:d5:7b:f2:cc:0b:0f:f8:d6:0f:ce:
                    c7:72:d9:09:e3:47:92:03:55:31:01:65:fa:c5:10:
                    24:37:0b:4a:b8:5b:13:86:a1:24:1e:a5:10:96:ae:
                    71:99:47:9e:00:91:fe:45:8a:e5:2b:96:78:7b:c0:
                    c6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:83:17:16:28:A1:71:DA:B6:71:AB:5C:3B:D4:2C:62:09:BF:35:D0
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/72a3bc64a9ed73d7ae0e5d23ebbd1aa632415577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:13:e6:3b:2a:ba:87:62:a5:88:54:16:b0:dc:5a:b0:db:03:
         e5:fa:19:1d:5e:09:54:3c:74:0c:bb:c6:e4:00:00:4d:1e:77:
         05:a8:4f:f5:b6:c7:42:de:ca:5e:f6:48:04:02:1f:0c:0e:00:
         24:6d:69:a5:25:cf:87:e4:c6:2d:5b:30:96:f6:5d:58:79:d0:
         d1:73:ce:d1:c6:a2:81:b8:25:0e:65:94:61:1d:fb:e9:71:1d:
         aa:49:ef:52:78:cd:87:f8:3a:95:a9:3a:ba:e7:08:31:f7:67:
         b6:84:62:33:41:67:62:24:a9:20:ae:10:ef:6c:b6:9d:03:dc:
         1c:21:b0:01:f2:70:72:a6:53:54:b0:b1:1c:7e:88:5a:17:15:
         da:09:8c:67:8c:82:68:df:31:77:78:43:dd:b2:6b:5a:1d:38:
         ac:14:0f:59:05:25:0f:e7:58:a4:a0:46:45:80:13:19:82:4e:
         1a:ab:51:4f:16:23:09:3d:81:ce:c2:97:3a:ab:bf:71:d6:35:
         85:6c:f2:6d:30:d2:ea:64:02:7d:24:95:f6:3b:f7:69:b0:b9:
         78:9c:01:f6:c0:26:b1:92:04:dc:5f:c7:d3:3e:c2:4c:c9:5b:
         a6:00:c4:32:a2:51:d1:dc:6d:24:a6:90:80:d1:c0:8d:ee:e0:
         de:a6:1e:b1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDrbaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyg3MmEzYmM2NGE5ZWQ3
M2Q3YWUwZTVkMjNlYmJkMWFhNjMyNDE1NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqCBsae3zXudNPqDMyfz4q4fPk0epfIqHtH1PHmQnjzuGDTq5
gCnwZ+WkB65b6Ti9E+JKcb5gSLEL5IRSxAG+31jD3cxs1SesTocDZNVYX1TVMoLc
rCvEewTr8osUh0BT/YHCOwruJTdp9F0n9F59Zqv6KINLJ7T4ofKtVnDZO9LeC3Dc
QOrumFkcmOW0m1rYIGnrU7xhENba47RCqzRc6uFtmrwXoXn89RBdH75+V3DC3FvH
o/nnMSBtrer8M4nG/Ijqn765NdV78swLD/jWD87HctkJ40eSA1UxAWX6xRAkNwtK
uFsThqEkHqUQlq5xmUeeAJH+RYrlK5Z4e8DGwQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDqDFxYooXHatnGrXDvULGIJvzXQMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzcyYTNiYzY0YTllZDczZDdhZTBlNWQyM2ViYmQxYWE2MzI0MTU1Nzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQtTANBgkqhkiG9w0BAQsFAAOCAQEAUxPmOyq6h2KliFQW
sNxasNsD5foZHV4JVDx0DLvG5AAATR53BahP9bbHQt7KXvZIBAIfDA4AJG1ppSXP
h+TGLVswlvZdWHnQ0XPO0caigbglDmWUYR376XEdqknvUnjNh/g6lak6uucIMfdn
toRiM0FnYiSpIK4Q72y2nQPcHCGwAfJwcqZTVLCxHH6IWhcV2gmMZ4yCaN8xd3hD
3bJrWh04rBQPWQUlD+dYpKBGRYATGYJOGqtRTxYjCT2BzsKXOqu/cdY1hWzybTDS
6mQCfSSV9jv3abC5eJwB9sAmsZIE3F/H0z7CTMlbpgDEMqJR0dxtJKaQgNHAje7g
3qYesQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org