Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/87532cc5b28d3265ae0f09ec366230b4e6caa5ed.roa
File:                     87532cc5b28d3265ae0f09ec366230b4e6caa5ed.roa (raw, json)
Hash identifier:          toQ9UWdMUtakwIe5G1BCQZsFFZ8/TRxzmEBCqpp40rc=
Subject key identifier:   00:64:A7:64:D2:5D:02:F5:57:48:69:18:E7:A5:4D:28:84:63:61:6E
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EEEC5
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/87532cc5b28d3265ae0f09ec366230b4e6caa5ed.roa
Signing time:             Wed 24 Mar 2021 14:29:32 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978629 (0xeeec5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=87532cc5b28d3265ae0f09ec366230b4e6caa5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:5d:56:fb:60:e9:1d:52:26:c1:44:91:83:
                    e4:bf:25:54:63:e5:d0:83:54:e9:a7:82:ee:2e:cb:
                    98:cf:f9:bc:cf:13:8e:04:b0:08:ac:81:55:0f:af:
                    7a:f1:58:21:8f:6b:8b:1c:0d:8f:0c:43:8f:ed:e8:
                    7b:7b:46:f7:7a:f3:9b:dc:44:2a:10:fd:3d:98:84:
                    d0:c8:9c:4f:c8:ef:3e:62:7b:08:41:2e:2b:97:af:
                    63:b1:57:b7:73:3c:1a:2b:d3:16:98:04:67:56:58:
                    49:16:a2:a8:44:22:0e:78:99:61:91:e6:70:cd:2b:
                    38:8e:01:35:7b:2b:c3:7d:33:6c:b3:51:56:5b:82:
                    4d:a8:69:a3:d1:b1:8b:06:6b:17:23:44:61:21:53:
                    92:79:98:a2:29:ca:f9:01:dd:58:91:73:cf:07:a9:
                    82:75:2c:97:d1:c0:83:ae:55:5a:23:1a:14:50:5c:
                    34:5b:e3:f5:c5:71:0f:68:f3:ba:b9:d4:f8:b3:12:
                    04:d8:19:d6:7f:69:bb:39:d8:ea:fd:e6:40:1d:e7:
                    8a:e3:5c:7d:fd:14:59:74:a2:78:99:e6:a5:eb:9f:
                    d3:a4:a9:6d:27:0a:3e:2c:78:cd:a8:27:cf:ef:5f:
                    bd:8b:f4:00:7b:dc:f8:1d:34:8b:6e:5e:e0:fb:50:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:64:A7:64:D2:5D:02:F5:57:48:69:18:E7:A5:4D:28:84:63:61:6E
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/87532cc5b28d3265ae0f09ec366230b4e6caa5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:f4:9b:2f:46:35:c4:fe:89:c4:3d:30:76:11:d9:02:51:31:
         20:30:f6:62:16:59:bf:1b:d4:d6:69:8d:78:71:f8:68:7a:d9:
         93:6d:61:cf:de:de:5b:3f:25:e5:10:b9:dc:53:61:60:1a:63:
         c1:28:92:60:a5:da:3a:1d:e8:2d:bb:df:19:0b:95:09:3b:b2:
         29:c9:41:1f:0b:f7:65:5d:4e:ac:c5:c0:c0:7b:85:cd:b2:9e:
         9c:d7:c1:fb:f3:c2:bd:1d:f3:20:a5:b1:32:81:93:5b:03:2a:
         35:78:31:7e:00:ad:b5:e6:c1:ca:c4:40:f9:71:dc:b6:33:b0:
         5b:8a:48:62:a5:6a:dc:17:8c:31:fa:e7:3b:3e:e8:e3:f9:b4:
         34:47:bc:3b:d9:ef:bc:95:e8:89:bb:02:b5:ab:53:e7:4e:c4:
         a2:ac:a3:49:f0:57:f3:6b:e2:7a:54:07:5d:71:59:33:60:38:
         25:ea:5c:21:a2:6d:58:83:e7:a1:af:cc:0f:14:a9:8b:91:66:
         c1:03:4f:94:a9:02:15:0b:12:19:fd:5b:69:09:49:7a:eb:e3:
         37:82:bc:c7:41:fd:e8:7d:a4:06:3a:87:02:a2:56:ea:14:9e:
         b0:a7:20:6d:50:e5:3d:f8:0a:75:97:fb:ed:30:17:01:1c:41:
         f3:df:a2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org