Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/809d784a2fda3ee7ec5bb58839263c355e757bc3.roa
File:                     809d784a2fda3ee7ec5bb58839263c355e757bc3.roa (raw, json)
Hash identifier:          JCmtTK0FRoOdusLHuXjYmgbukLSzWg1ed2S0aUu6HvE=
Subject key identifier:   01:28:B8:2A:2C:00:73:E0:63:BE:9D:9E:1F:7C:BC:CB:9D:35:DF:59
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       230CA5
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/809d784a2fda3ee7ec5bb58839263c355e757bc3.roa
Signing time:             Fri 28 Apr 2023 17:46:37 +0000
ROA not before:           Thu 27 Apr 2023 17:46:35 +0000
ROA not after:            Mon 28 Apr 2025 17:46:35 +0000
asID:                     28023
IP address blocks:        181.16.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296997 (0x230ca5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Apr 27 17:46:35 2023 GMT
            Not After : Apr 28 17:46:35 2025 GMT
        Subject: CN=809d784a2fda3ee7ec5bb58839263c355e757bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:1c:20:12:12:f1:84:79:60:d6:12:95:08:
                    54:20:0c:bb:ed:62:98:5f:19:e5:b0:a6:0d:4d:fb:
                    98:17:b0:73:b6:19:b0:de:c5:8e:ba:06:d3:64:4b:
                    4d:c9:f9:7e:8b:71:f3:24:dd:a7:72:98:e0:0c:e9:
                    f3:3e:b7:5f:75:14:e6:e4:18:bb:18:46:e3:77:ac:
                    69:54:a7:f0:86:c7:a8:34:b6:38:a3:26:cd:83:0c:
                    83:50:52:b4:08:29:72:b9:ef:42:a4:2b:90:6d:a8:
                    17:d2:2f:2e:cb:4d:8e:df:8c:cd:b7:76:c5:2c:c8:
                    d8:20:2d:fb:5c:5a:7a:1d:e5:6c:7d:50:2f:ce:63:
                    75:52:6d:80:f8:ce:26:03:be:e8:14:84:fa:fc:72:
                    78:6e:8c:77:2b:49:9a:96:a3:a1:d0:02:ea:40:f8:
                    a8:43:2c:04:0c:10:31:17:7c:9d:9d:03:17:0f:b2:
                    f4:6f:31:c6:c9:cb:9f:8b:c9:1a:cc:5a:68:27:59:
                    84:fd:7a:4f:21:fc:44:1d:90:c0:72:36:fd:b4:14:
                    75:79:69:00:ff:90:56:02:69:d3:cf:f7:6b:bb:5f:
                    cb:d6:4e:8b:25:65:ba:ee:d1:ff:e8:3a:5d:19:d6:
                    4e:9c:96:74:d9:6a:ad:c0:c9:75:00:46:fa:4b:20:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:28:B8:2A:2C:00:73:E0:63:BE:9D:9E:1F:7C:BC:CB:9D:35:DF:59
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/809d784a2fda3ee7ec5bb58839263c355e757bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:62:f5:8e:00:24:50:bb:22:8a:21:b8:d6:32:8c:f2:14:c7:
         13:71:17:bc:58:57:6c:85:3e:d3:18:35:7e:62:00:19:14:ae:
         c4:f2:46:a0:ac:34:41:bf:ef:eb:eb:9a:db:06:7e:6a:1e:3e:
         32:25:5a:00:0d:17:2d:2e:de:e7:d5:37:a3:62:ab:60:90:01:
         f9:8b:a2:fc:db:c0:a1:7c:7c:6b:b6:fc:5c:e6:d5:f2:a8:c9:
         8f:bc:50:c5:5d:14:1c:50:d9:dc:82:7c:d0:19:50:f6:6f:6b:
         a3:ed:00:b4:2e:72:27:2c:75:c7:00:0a:00:bb:24:bb:a0:59:
         28:ca:a2:58:a7:e9:b4:0d:fe:58:b3:a9:81:ec:1f:bb:47:8f:
         22:22:70:b1:80:a1:fb:e6:48:52:d7:9b:ad:16:17:50:e3:3f:
         3c:00:eb:9e:5a:af:b5:b5:d8:17:e3:a8:49:d3:2c:5e:a1:2a:
         ac:32:41:dc:cf:69:6d:6d:90:dc:60:b7:a2:6c:52:e2:7f:06:
         ed:a0:6d:01:dc:86:34:c3:8e:d0:d5:b8:40:68:17:54:d0:1b:
         db:45:31:e0:fb:c5:c7:c6:b1:b2:a1:b8:03:99:53:d6:d0:83:
         62:47:f7:4d:3d:77:66:2d:a9:d9:98:9f:ba:61:ce:7a:a8:53:
         cf:ee:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org