Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8877a38449a2cfd1d153fd3cad11e3fc0a38663b.roa
File:                     8877a38449a2cfd1d153fd3cad11e3fc0a38663b.roa (raw, json)
Hash identifier:          3wouK4OtRj7admc1Tn+2HdeOaUhsXWG5ZywBKVmmnpg=
Subject key identifier:   50:EB:5E:8F:37:EF:8A:2D:8A:FE:B4:5B:30:48:4D:C8:C5:B1:E1:49
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E8265
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8877a38449a2cfd1d153fd3cad11e3fc0a38663b.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950885 (0xe8265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=8877a38449a2cfd1d153fd3cad11e3fc0a38663b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c4:c7:b9:55:82:2c:74:9d:52:a5:4f:78:90:
                    d0:55:e1:77:30:c4:a1:9a:1c:b7:2b:9c:80:2b:88:
                    79:84:d4:7b:8a:bf:28:a3:5b:56:54:1a:2d:9c:f9:
                    a5:63:6a:55:21:44:5e:b6:08:f7:84:90:04:15:ae:
                    b9:cc:f6:f9:35:45:05:18:29:71:50:32:29:1e:0b:
                    27:3e:bc:90:97:48:e6:94:02:68:2d:4c:1b:03:1c:
                    88:6c:89:56:b7:9e:08:52:78:5a:38:4b:3e:8e:17:
                    f7:e6:1d:63:2c:db:84:c1:f3:3a:57:3a:40:8c:f0:
                    02:d0:26:e6:b6:22:7c:32:42:53:ae:a3:41:42:09:
                    a5:e4:0c:76:05:03:ee:80:61:df:64:0c:a0:8c:b0:
                    00:21:60:14:80:b9:0c:83:8c:1b:76:a6:38:07:24:
                    23:6a:84:c6:b8:2a:a9:aa:96:9c:66:c7:6e:cf:05:
                    87:2b:d0:a4:97:4c:39:62:84:8c:f2:eb:66:89:f0:
                    d4:59:45:8d:e1:5e:65:b4:9b:1c:c9:67:f1:9c:19:
                    6a:c2:7d:20:ec:35:36:ac:f3:41:61:93:60:b0:6b:
                    8c:94:5f:92:0b:a0:e4:89:cc:fb:eb:fd:be:d1:02:
                    15:3f:da:63:71:fd:cf:3d:bf:89:89:60:de:65:e2:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EB:5E:8F:37:EF:8A:2D:8A:FE:B4:5B:30:48:4D:C8:C5:B1:E1:49
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8877a38449a2cfd1d153fd3cad11e3fc0a38663b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:5f:5c:37:3e:37:5f:3e:79:1f:b1:d5:c2:8b:34:fa:a1:93:
         79:c2:09:0c:4a:46:1d:94:ae:61:da:6a:00:4a:c7:ef:a2:bb:
         8d:7e:04:86:38:e3:ba:05:37:d7:4d:2f:0b:aa:2c:58:93:d6:
         82:7c:8b:a4:95:c1:06:a9:8b:99:14:01:af:e5:fa:60:e3:97:
         bf:c1:0d:91:8d:63:27:a6:0d:f0:ff:ef:29:b4:c1:66:84:47:
         ec:52:eb:55:cd:e3:c5:33:02:09:ca:7c:fe:04:3c:08:f4:02:
         f8:a7:b1:61:6c:35:ea:29:36:87:c7:61:50:00:0d:90:2f:16:
         d4:89:7b:ae:4d:de:32:91:c6:a9:ba:24:db:81:0f:b3:e8:6c:
         50:3a:53:27:8e:86:e7:4b:49:ce:9f:b7:63:d5:c9:62:21:89:
         ce:9b:d7:74:7e:96:83:73:a1:f2:69:3d:29:cc:77:99:8a:87:
         5a:a1:58:eb:40:7d:c2:ae:00:4b:1b:e5:36:a7:38:c8:f5:3e:
         be:c3:7f:a4:a2:cc:f5:17:69:b9:98:14:59:76:7d:13:33:27:
         64:e3:f9:37:0b:b0:41:9a:30:39:b1:92:48:d4:22:8f:18:57:
         95:81:a9:5a:34:14:a1:eb:8e:d6:91:a4:ab:62:86:42:0d:4d:
         db:29:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org