Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/891f93f0766fd38667dad675f728da9f4beb679c.roa
File:                     891f93f0766fd38667dad675f728da9f4beb679c.roa (raw, json)
Hash identifier:          dB0A/TZnwVNC6pwlnDMoOFbNivwYSPw7uS4ThzvKbQw=
Subject key identifier:   D1:18:BB:3A:93:60:7A:0C:E1:40:23:62:BB:5B:24:41:7C:62:AD:EA
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EACAA
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/891f93f0766fd38667dad675f728da9f4beb679c.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     269752
IP address blocks:        181.16.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961706 (0xeacaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=891f93f0766fd38667dad675f728da9f4beb679c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:40:a2:43:03:65:f5:91:b9:b7:45:02:3d:
                    0a:cd:e5:9c:68:d4:f2:21:48:d7:a3:26:f2:e3:70:
                    65:29:bb:f1:4d:c3:3e:32:aa:58:70:26:89:72:5d:
                    16:0b:fe:47:a6:82:13:44:f4:64:ac:91:cf:33:69:
                    0f:6c:8f:f1:65:18:e7:1a:df:e1:91:a6:75:37:09:
                    bd:4e:a4:a5:2b:67:93:3d:0e:bf:f3:95:80:a7:69:
                    9c:e1:69:2d:9c:86:74:76:9a:41:75:09:d7:33:75:
                    56:ae:26:c4:44:cd:d6:27:f9:6b:b5:9d:92:de:0a:
                    fb:b2:18:6a:c4:7c:f8:b2:c6:da:6c:7c:6c:d4:86:
                    29:fd:29:36:d6:1a:99:7e:c3:69:6c:bf:d6:00:4b:
                    9e:25:91:0c:fe:5c:99:83:b6:ec:6c:10:89:32:c2:
                    08:f0:70:4e:bb:6d:65:43:9e:ba:4d:5c:24:a8:cd:
                    51:c1:18:23:3c:ce:9a:09:0a:5f:ff:d3:79:9b:7c:
                    30:c2:0d:95:1d:c2:76:7a:e0:28:14:01:31:e0:e2:
                    fa:cd:ea:25:4d:41:dc:e2:2b:c2:b9:d0:9f:58:82:
                    fe:6c:72:ac:3a:1f:70:66:ea:52:c0:b2:7e:fe:cb:
                    71:c0:8f:ba:88:7f:8a:03:f3:8f:5f:06:68:be:2e:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:18:BB:3A:93:60:7A:0C:E1:40:23:62:BB:5B:24:41:7C:62:AD:EA
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/891f93f0766fd38667dad675f728da9f4beb679c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:27:9a:35:c2:a2:41:14:0e:16:7c:54:a4:fa:34:14:85:5e:
         9a:4d:ad:9d:97:9a:04:7c:59:45:ef:a3:5a:d4:9b:a9:d8:62:
         7b:39:b2:fc:bc:2e:f8:f0:4f:c6:03:44:e9:de:93:49:1a:cb:
         7b:68:24:4f:86:ba:00:1c:39:fe:5f:26:1e:1c:55:51:22:17:
         8b:fc:e7:87:da:27:73:b5:3c:b4:97:31:47:97:a1:f4:77:ec:
         41:ff:cf:fe:76:a6:f0:e7:d0:74:2a:9e:7b:ac:ce:c6:67:b9:
         78:65:fe:5a:db:e4:04:93:5b:bd:17:83:49:e2:79:e1:ad:42:
         b7:04:fd:e2:89:b0:11:d9:e5:89:1e:de:cc:4c:26:14:84:75:
         fe:d9:34:4b:ab:c3:c2:8a:26:aa:ac:9d:42:0e:64:ee:50:3e:
         d6:71:93:1a:35:b0:ef:13:5d:d4:13:16:9b:ee:ef:a6:11:2b:
         c3:1b:5c:13:74:33:80:1d:21:76:13:0e:43:58:a9:e5:8f:2f:
         54:c6:15:03:b7:29:b8:9a:28:a2:dd:50:40:92:3e:f9:e8:8c:
         25:dc:78:90:c9:20:8c:5e:cc:12:fc:a2:6e:ad:1d:52:b4:fd:
         5e:07:b1:61:e0:4e:e3:0c:d2:59:46:1c:48:ce:b2:43:0a:3b:
         87:1d:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org