Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7edaaa7db3a956339cd1864f170b73bb0b29f6e2.roa
File:                     7edaaa7db3a956339cd1864f170b73bb0b29f6e2.roa (raw, json)
Hash identifier:          ppbs3xe/83HFG/6KzEcglojf/NCvFmSxRRmle7OB4uY=
Subject key identifier:   E9:47:CD:7D:F9:F3:E6:C9:FD:57:8F:1B:9A:4D:AE:FD:22:4C:D0:C8
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       2473B8
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7edaaa7db3a956339cd1864f170b73bb0b29f6e2.roa
Signing time:             Tue 13 Jun 2023 19:19:23 +0000
ROA not before:           Mon 12 Jun 2023 19:19:23 +0000
ROA not after:            Fri 13 Jun 2025 19:19:23 +0000
asID:                     52323
IP address blocks:        181.16.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388920 (0x2473b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jun 12 19:19:23 2023 GMT
            Not After : Jun 13 19:19:23 2025 GMT
        Subject: CN=7edaaa7db3a956339cd1864f170b73bb0b29f6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:e5:ce:8b:0e:b1:90:f9:76:60:48:ee:f5:
                    55:40:1e:8f:ec:8a:6d:02:82:c9:6a:eb:ef:53:30:
                    61:aa:39:4f:71:64:ca:55:f5:b9:3a:c3:77:6f:4c:
                    c6:be:69:37:80:b0:89:70:3a:7b:1e:17:81:52:26:
                    40:c7:33:09:60:f3:99:e2:e4:88:3a:47:9f:ec:2c:
                    e0:4f:32:67:9e:cd:a4:92:58:71:a9:65:e5:91:63:
                    55:57:ea:60:d5:75:f8:81:17:38:60:98:f6:1e:71:
                    fb:6c:5b:d1:2a:30:df:38:ea:4f:87:42:15:6c:d5:
                    82:53:5c:3d:ec:c1:aa:9e:50:50:56:36:7a:1b:01:
                    02:a9:66:ca:16:0f:2b:48:71:e1:63:75:7f:70:08:
                    8e:a3:35:01:0a:49:d1:9a:6a:ec:e9:33:a1:96:79:
                    22:d0:57:f3:06:92:a9:7e:5f:ea:59:68:30:5a:ee:
                    b7:25:6f:a4:11:e1:d2:80:dc:a7:0c:6b:6a:d1:b5:
                    92:b2:18:11:8f:df:e3:44:1f:dd:21:cc:b4:e8:8e:
                    2a:d2:ff:52:ee:89:a4:79:60:e7:3e:8a:90:a9:0a:
                    47:3e:e1:5e:e5:3e:ae:8f:5f:d2:5e:fc:32:2e:46:
                    a4:23:63:33:92:b0:48:80:13:4b:30:86:1f:67:9a:
                    3f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:47:CD:7D:F9:F3:E6:C9:FD:57:8F:1B:9A:4D:AE:FD:22:4C:D0:C8
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7edaaa7db3a956339cd1864f170b73bb0b29f6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:f9:fe:21:2b:64:08:68:f7:b0:88:00:81:07:cb:ae:e8:
         e5:35:01:22:58:0e:e3:5e:f7:e8:8a:49:7b:43:77:49:72:a6:
         bf:1a:c5:1e:de:32:e1:c1:de:d4:43:9e:67:59:75:14:da:1f:
         d7:3c:15:f2:bf:67:37:20:51:57:22:e8:8a:1d:57:a7:ea:23:
         72:04:6e:c7:44:66:8f:cc:7f:07:08:a9:97:12:c5:10:e3:2c:
         36:19:66:cf:79:5e:b5:9c:c7:4c:76:d4:10:c9:e1:25:f4:63:
         47:2b:fd:78:9f:75:85:22:15:34:d0:b8:ec:6f:1b:52:c4:d9:
         40:31:5b:80:3e:d0:65:7b:6a:e2:4a:71:db:b4:1a:4a:55:c3:
         71:8d:cc:0a:c1:e5:80:f4:2b:61:c3:9b:c4:4b:93:41:f7:00:
         c5:e6:a2:5f:36:d2:43:00:61:28:1d:a3:82:c8:99:c7:99:e1:
         c7:ed:da:cb:61:16:a3:72:9b:4f:4c:66:28:0a:6d:10:4a:13:
         ff:2c:f5:89:40:89:6d:d6:c5:ec:ab:1d:ef:50:a2:61:26:3c:
         25:4d:c5:5f:29:b1:08:9d:0a:63:01:2b:1b:57:96:32:41:1b:
         dd:14:35:47:c6:a5:0b:ee:e9:c3:40:75:df:16:e0:f1:17:86:
         6d:ef:55:b6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJHO4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjMwNjEy
MTkxOTIzWhcNMjUwNjEzMTkxOTIzWjAzMTEwLwYDVQQDEyg3ZWRhYWE3ZGIzYTk1
NjMzOWNkMTg2NGYxNzBiNzNiYjBiMjlmNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn/vlzosOsZD5dmBI7vVVQB6P7IptAoLJauvvUzBhqjlPcWTK
VfW5OsN3b0zGvmk3gLCJcDp7HheBUiZAxzMJYPOZ4uSIOkef7CzgTzJnns2kklhx
qWXlkWNVV+pg1XX4gRc4YJj2HnH7bFvRKjDfOOpPh0IVbNWCU1w97MGqnlBQVjZ6
GwECqWbKFg8rSHHhY3V/cAiOozUBCknRmmrs6TOhlnki0FfzBpKpfl/qWWgwWu63
JW+kEeHSgNynDGtq0bWSshgRj9/jRB/dIcy06I4q0v9S7omkeWDnPoqQqQpHPuFe
5T6uj1/SXvwyLkakI2MzkrBIgBNLMIYfZ5o/JwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOlHzX358+bJ/VePG5pNrv0iTNDIMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzdlZGFhYTdkYjNhOTU2MzM5Y2QxODY0ZjE3MGI3M2JiMGIyOWY2ZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQqjANBgkqhkiG9w0BAQsFAAOCAQEACnz5/iErZAho97CI
AIEHy67o5TUBIlgO41736IpJe0N3SXKmvxrFHt4y4cHe1EOeZ1l1FNof1zwV8r9n
NyBRVyLoih1Xp+ojcgRux0Rmj8x/BwiplxLFEOMsNhlmz3letZzHTHbUEMnhJfRj
Ryv9eJ91hSIVNNC47G8bUsTZQDFbgD7QZXtq4kpx27QaSlXDcY3MCsHlgPQrYcOb
xEuTQfcAxeaiXzbSQwBhKB2jgsiZx5nhx+3ay2EWo3KbT0xmKAptEEoT/yz1iUCJ
bdbF7Ksd71CiYSY8JU3FXymxCJ0KYwErG1eWMkEb3RQ1R8alC+7pw0B13xbg8ReG
be9Vtg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org