Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/835499279d986615ff5183376a48a08be0825ef8.roa
File:                     835499279d986615ff5183376a48a08be0825ef8.roa (raw, json)
Hash identifier:          051KgAsR5W/k8KRh63+/NQZNs9rLqlFImVJQx2XnmpQ=
Subject key identifier:   FD:8B:5A:73:D0:21:C8:00:20:03:49:3A:98:D7:B1:68:D1:E8:57:D6
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       2599F6
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/835499279d986615ff5183376a48a08be0825ef8.roa
Signing time:             Tue 25 Jul 2023 18:20:29 +0000
ROA not before:           Mon 24 Jul 2023 18:20:29 +0000
ROA not after:            Fri 25 Jul 2025 18:20:29 +0000
asID:                     52323
IP address blocks:        181.16.236.0/22 maxlen: 24
                          181.16.240.0/24 maxlen: 24
                          181.16.254.0/23 maxlen: 24
                          181.16.160.0/23 maxlen: 24
                          181.16.175.0/24 maxlen: 24
                          181.16.176.0/23 maxlen: 24
                          181.16.180.0/23 maxlen: 24
                          181.16.184.0/22 maxlen: 24
                          181.16.192.0/22 maxlen: 24
                          181.16.196.0/23 maxlen: 24
                          181.16.204.0/22 maxlen: 24
                          181.16.208.0/21 maxlen: 24
                          181.16.130.0/23 maxlen: 24
                          181.16.136.0/21 maxlen: 24
                          181.16.145.0/24 maxlen: 24
                          181.16.146.0/24 maxlen: 24
                          2800:600::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464246 (0x2599f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 24 18:20:29 2023 GMT
            Not After : Jul 25 18:20:29 2025 GMT
        Subject: CN=835499279d986615ff5183376a48a08be0825ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:b2:5e:3c:6a:aa:27:50:ce:96:61:5a:29:
                    f0:13:44:ec:a9:75:97:c6:77:3d:89:86:d8:38:e6:
                    ae:10:e8:b6:63:ce:0e:cf:74:78:f8:e8:91:29:ad:
                    15:1a:78:22:8f:ec:df:a0:ee:a8:bd:09:7b:e5:70:
                    31:7f:a4:4b:6c:21:9c:a2:e5:b5:df:df:ad:85:80:
                    e7:8c:f7:e9:6b:75:af:43:f8:11:c0:a9:99:39:4f:
                    eb:b3:f6:27:cd:69:5a:05:49:3f:8c:71:a0:9e:05:
                    1b:ce:3f:c0:51:a0:c5:3f:21:35:74:d1:ba:bc:d9:
                    c2:b5:d2:2a:47:64:cf:ab:fb:73:03:18:a6:12:0d:
                    61:29:90:3a:97:60:c7:54:78:23:32:82:90:58:59:
                    9f:ba:5c:44:0e:01:fc:3e:63:d0:b3:40:5c:7b:a6:
                    5f:1e:31:e8:ee:06:bc:76:b7:5e:6b:55:7b:02:b1:
                    29:d2:1c:c4:ea:0f:8c:3f:66:08:3a:f9:a8:89:f7:
                    f2:d5:19:27:99:6d:3d:43:16:72:fd:cd:58:63:72:
                    7e:62:05:ca:3d:05:32:72:d9:0d:da:56:f6:95:c9:
                    d9:52:e0:88:2f:84:6a:a3:85:76:ef:67:84:9d:5b:
                    2d:9e:64:56:7f:1d:6c:de:ca:4b:44:dc:61:0d:a0:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8B:5A:73:D0:21:C8:00:20:03:49:3A:98:D7:B1:68:D1:E8:57:D6
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/835499279d986615ff5183376a48a08be0825ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.130.0/23
                  181.16.136.0/21
                  181.16.145.0-181.16.146.255
                  181.16.160.0/23
                  181.16.175.0-181.16.177.255
                  181.16.180.0/23
                  181.16.184.0/22
                  181.16.192.0-181.16.197.255
                  181.16.204.0-181.16.215.255
                  181.16.236.0-181.16.240.255
                  181.16.254.0/23
                IPv6:
                  2800:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:c0:64:61:fb:92:22:53:9a:c0:d0:fc:68:d8:ff:60:53:33:
         12:8c:fd:dc:02:6a:9d:5d:9d:1a:19:94:1c:60:21:ed:71:ed:
         da:aa:5b:e4:87:04:a4:f4:97:3e:94:36:db:6e:4e:61:50:55:
         f8:6f:05:88:d4:c8:40:64:bc:3b:e7:ce:4a:b9:f7:43:02:6f:
         55:83:cb:0f:ad:f3:79:ad:18:e6:62:8b:0c:23:64:b9:e1:b2:
         a4:c9:b3:d6:0c:a1:c9:d2:9b:09:a3:29:ee:5b:33:a7:19:39:
         da:70:76:06:e7:89:23:ac:a4:e8:9e:ac:59:ca:2e:9a:f6:08:
         dc:64:80:43:e2:77:f5:5b:62:0f:1d:63:38:80:d9:8c:e1:4c:
         f4:10:d6:e9:1e:9b:42:b5:1e:c3:17:4c:33:0b:ee:51:4d:a4:
         b2:a8:53:df:d9:fd:4a:a3:e7:21:85:13:87:cf:a8:dd:ed:36:
         f3:3c:e5:06:a7:bb:8e:a7:6b:f7:f8:33:dc:d3:58:94:45:4f:
         14:55:8e:3d:8e:9b:8e:f0:09:2d:7e:f8:f1:f3:0b:94:23:82:
         8a:5e:cd:78:32:67:81:05:19:06:a3:cc:d8:c4:b4:2a:59:33:
         01:03:cb:83:25:ff:11:34:fb:fc:08:6f:cb:97:5d:10:b3:e3:
         7d:90:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org