Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/81089ae93c0ef79a5cfc0c88936c1211d3a42bda.roa
File:                     81089ae93c0ef79a5cfc0c88936c1211d3a42bda.roa (raw, json)
Hash identifier:          aPXKRpLUhSBnDEftV/zPKxuz5qbwJVPYEqHPKuF8z6Y=
Subject key identifier:   A1:03:F8:F4:BC:4C:45:D8:C0:8F:FF:93:9D:13:FC:17:FC:92:32:FB
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       2379E9
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/81089ae93c0ef79a5cfc0c88936c1211d3a42bda.roa
Signing time:             Fri 05 May 2023 13:06:08 +0000
ROA not before:           Thu 04 May 2023 13:06:08 +0000
ROA not after:            Mon 05 May 2025 13:06:08 +0000
asID:                     52323
IP address blocks:        181.16.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324969 (0x2379e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: May  4 13:06:08 2023 GMT
            Not After : May  5 13:06:08 2025 GMT
        Subject: CN=81089ae93c0ef79a5cfc0c88936c1211d3a42bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:19:85:90:4d:f4:3c:a8:44:56:6b:70:b8:
                    bd:84:b7:09:fe:8a:97:a5:82:ac:b7:79:ce:74:64:
                    1b:5f:72:68:1b:7f:23:17:85:b9:08:49:24:7b:93:
                    ed:1d:5c:83:4c:11:24:0d:4a:db:bd:63:e3:03:d5:
                    e6:3a:fc:5e:74:a9:68:80:c8:ae:c2:e4:c4:1b:3f:
                    2e:14:78:ef:af:90:3b:37:c9:21:64:b4:f8:8f:71:
                    8c:ae:fe:e7:c4:4a:da:cb:4e:60:7c:29:fd:af:4c:
                    37:46:44:8f:4d:21:c5:ae:1d:48:cb:31:6c:b3:e1:
                    de:f6:13:e8:5d:10:f4:e1:4f:00:29:cb:76:e5:bd:
                    f5:be:f4:43:13:86:ef:30:37:95:00:03:a4:f8:3c:
                    61:aa:6a:15:6b:87:4c:1d:c8:36:84:e8:00:e0:e3:
                    5f:71:1b:87:04:7f:de:5e:9e:ca:e8:88:10:11:e3:
                    5c:e3:b8:46:ae:e2:69:23:24:06:64:c0:ca:bb:6d:
                    f3:46:58:e3:8a:08:0b:df:a8:b6:ef:b8:18:29:fd:
                    10:f6:f5:aa:f4:dd:19:8d:59:0c:fd:74:2c:a7:40:
                    f3:38:df:ea:d9:0b:d9:7c:bc:23:dc:94:d0:78:ab:
                    45:b5:71:e7:41:30:fe:31:2a:47:d6:b1:a3:0b:43:
                    d5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:03:F8:F4:BC:4C:45:D8:C0:8F:FF:93:9D:13:FC:17:FC:92:32:FB
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/81089ae93c0ef79a5cfc0c88936c1211d3a42bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:08:f0:b1:56:b0:97:f3:ce:4a:2a:1a:52:a8:4e:e6:08:08:
         2d:8f:77:ed:f8:0a:17:4b:97:f7:f2:f0:08:fa:97:1d:d2:41:
         a5:cf:d2:7b:90:57:32:68:0b:7e:a7:05:8b:37:da:94:32:6c:
         66:79:2e:23:7e:0e:b1:62:1d:f6:78:d0:49:70:3b:1b:52:71:
         b3:75:7c:ee:b2:3b:d9:ec:58:37:5b:5f:6e:1a:24:c6:8b:29:
         78:91:61:17:2a:d1:b6:27:48:ef:6f:29:14:38:60:42:45:16:
         24:f7:df:b7:f8:01:44:40:22:df:f1:e8:4a:cb:71:cf:bf:b0:
         13:2b:c5:05:72:f0:1e:54:f5:e2:fe:fb:a3:2a:44:9d:99:7a:
         00:5a:73:4e:80:58:0a:bf:fc:4e:c7:78:8f:cd:14:53:f8:75:
         67:27:5a:14:43:fa:98:46:7c:f4:32:c8:f6:8a:3e:37:52:bf:
         f0:cc:78:1e:0c:22:13:87:f6:38:4c:f4:ed:60:36:ea:1f:47:
         6b:fa:34:62:06:d0:31:1f:02:8b:31:5f:55:26:bd:ee:ad:a3:
         1a:a9:40:29:a7:3a:a7:f0:12:c5:ef:9f:26:a4:fe:6e:aa:5a:
         09:61:e0:54:71:d1:82:32:48:7d:8b:85:3a:99:e4:43:83:a6:
         2e:08:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org