Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7e6389f1ed97fa27eabb25b977f31c6f9a36f483.roa
File:                     7e6389f1ed97fa27eabb25b977f31c6f9a36f483.roa (raw, json)
Hash identifier:          7l42Im7LLCbwdWGcyhYJK7kwD7j9gwaxvjzR1u8v0MA=
Subject key identifier:   40:C0:67:3B:06:DA:28:1C:23:23:83:BB:43:27:FD:8F:C2:4B:D3:A4
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       259BB2
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7e6389f1ed97fa27eabb25b977f31c6f9a36f483.roa
Signing time:             Tue 25 Jul 2023 18:20:34 +0000
ROA not before:           Mon 24 Jul 2023 18:20:33 +0000
ROA not after:            Fri 25 Jul 2025 18:20:33 +0000
asID:                     52323
IP address blocks:        181.16.168.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464690 (0x259bb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 24 18:20:33 2023 GMT
            Not After : Jul 25 18:20:33 2025 GMT
        Subject: CN=7e6389f1ed97fa27eabb25b977f31c6f9a36f483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:54:7c:84:1f:98:72:53:fa:d5:91:bb:9f:
                    12:7b:93:14:fa:3f:4c:a6:5e:5a:34:f9:d0:d7:82:
                    90:22:cf:89:69:79:e6:11:a8:1c:4e:0b:bb:65:bd:
                    ba:b8:71:28:6f:5f:23:7d:65:c0:9d:12:f1:c6:10:
                    90:c2:d4:e7:dc:e8:41:11:d3:23:57:5c:eb:c9:82:
                    a1:41:22:8a:55:94:03:94:25:f7:a3:46:51:c1:ea:
                    31:f0:18:50:73:93:d0:b9:e5:0a:b6:62:7d:30:5a:
                    b0:e9:ed:b9:7c:92:bc:b4:e1:d3:a3:50:0f:fb:26:
                    a6:c5:32:6b:0f:08:41:0f:f8:7b:83:6b:1b:fe:bc:
                    61:9d:3c:b3:28:85:54:1f:0f:68:fd:fe:7b:06:68:
                    f7:8a:5c:d8:f5:ea:d2:6d:58:1f:e8:7c:5f:c1:5b:
                    03:10:fd:4c:33:54:d8:c5:f1:d3:96:cd:dd:b7:a9:
                    ea:bd:ea:f2:1a:fc:1b:bb:3d:31:b4:cf:48:ac:99:
                    dd:78:35:79:d2:4f:34:4a:1e:1f:e0:9f:f4:1c:9a:
                    5e:3f:e7:76:c6:aa:61:0c:0c:bb:cf:a2:1e:db:b0:
                    32:5a:7b:3e:e3:3a:68:81:00:56:2a:7d:c9:54:d5:
                    4b:ad:32:e1:51:14:e2:92:80:c9:c0:10:a6:0c:46:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C0:67:3B:06:DA:28:1C:23:23:83:BB:43:27:FD:8F:C2:4B:D3:A4
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7e6389f1ed97fa27eabb25b977f31c6f9a36f483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:48:c3:9b:91:d5:d7:f6:dc:0c:9f:da:08:2c:aa:8c:8a:9d:
         22:0c:90:41:e2:25:4b:ca:58:cc:7c:53:af:8c:ef:e9:d6:ff:
         34:4d:d1:b8:01:fb:01:bc:29:fa:5c:3b:5f:17:92:40:b3:24:
         a6:d8:e6:94:03:52:4e:ee:d9:ed:34:66:9b:5d:98:77:9b:76:
         e7:71:15:cf:00:94:91:db:2f:45:8c:02:ef:67:ad:f6:3a:72:
         c0:a7:1e:de:2e:4d:44:da:ad:42:d3:6b:4e:31:d5:a6:0b:f2:
         ac:ce:7f:cd:34:65:de:db:46:0b:f5:35:82:93:3c:18:76:3e:
         d8:18:60:1b:4f:ba:fa:27:ed:52:85:10:28:ac:95:da:b9:31:
         6e:19:ee:18:72:30:fe:92:2b:aa:b8:f4:0e:53:19:31:7a:bd:
         37:a6:87:ac:86:ea:41:29:6e:5f:a2:f3:ce:8b:a1:19:b8:2f:
         27:ff:75:9d:2e:e8:a5:3b:51:d6:f3:c4:7e:d6:98:0f:b6:e5:
         3a:20:9e:67:53:67:e5:58:0c:da:98:3c:01:b4:2d:94:24:8a:
         79:e7:7f:21:21:09:6b:de:67:07:c3:cc:63:37:53:59:38:58:
         ca:09:fb:0d:87:3d:89:64:b3:e7:5c:1f:f9:27:8c:4d:7d:3b:
         ab:68:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org