Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8e259d005fc9fee6060b51bb8ecafc2702005ee7.roa
File:                     8e259d005fc9fee6060b51bb8ecafc2702005ee7.roa (raw, json)
Hash identifier:          VjZW2TvyCSeQMDg2tthchV9+R+dSj86HOyhCfIBR6h0=
Subject key identifier:   5F:87:02:EE:8F:35:41:85:72:10:EE:BE:96:A4:BE:D4:8B:62:DF:97
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       258AC7
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8e259d005fc9fee6060b51bb8ecafc2702005ee7.roa
Signing time:             Tue 25 Jul 2023 18:03:47 +0000
ROA not before:           Mon 24 Jul 2023 18:03:47 +0000
ROA not after:            Fri 25 Jul 2025 18:03:47 +0000
asID:                     52323
IP address blocks:        181.16.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2460359 (0x258ac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 24 18:03:47 2023 GMT
            Not After : Jul 25 18:03:47 2025 GMT
        Subject: CN=8e259d005fc9fee6060b51bb8ecafc2702005ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c3:91:3a:95:b0:be:e9:19:64:68:83:f9:95:
                    ba:bf:e2:98:b4:b6:8c:70:07:44:a5:d3:fb:45:57:
                    ef:82:c3:ce:87:32:7f:d9:a3:46:1a:e6:bd:85:19:
                    90:a5:e6:72:ee:1a:52:60:2d:a1:ba:d8:15:65:a3:
                    d1:2c:6d:16:f9:89:28:29:b2:1f:cd:4f:ac:27:3f:
                    42:d2:fb:b9:87:71:2b:58:41:fd:23:8b:c0:e7:50:
                    39:10:c1:94:6f:c8:6c:77:b4:21:14:a2:14:11:d7:
                    21:49:f7:8d:25:60:6e:1c:8a:24:f3:e1:7f:b3:f4:
                    9f:5d:90:0c:2e:4d:5b:93:0f:d8:a9:cf:44:ce:05:
                    aa:eb:99:5f:3d:0c:8a:94:e9:8c:71:05:3e:57:4f:
                    af:67:00:6e:2d:81:43:ab:ed:77:b4:47:64:ae:2f:
                    10:1b:c6:f7:3b:e4:f0:30:16:ae:a7:9e:ef:0a:f3:
                    cf:f6:dd:cf:67:5e:f1:2c:5e:7f:31:c0:ed:67:20:
                    02:b7:00:68:d4:f9:e2:b4:7f:6b:fb:1a:c1:fc:be:
                    af:2a:cb:86:66:c3:69:f6:35:d9:1b:ac:1a:c9:dc:
                    59:56:4a:91:1f:17:b5:9b:19:43:b7:1e:62:12:76:
                    e0:2b:61:c5:c0:a6:8e:b7:66:93:51:10:62:e6:88:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:87:02:EE:8F:35:41:85:72:10:EE:BE:96:A4:BE:D4:8B:62:DF:97
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/8e259d005fc9fee6060b51bb8ecafc2702005ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:52:b2:e7:0a:4d:e8:bf:be:f9:dc:ff:bd:1b:bf:b2:55:ca:
         a0:6c:0d:c3:05:26:5a:f4:2c:33:c2:b9:d4:e8:a8:ce:7d:30:
         5d:a6:a4:b1:28:7b:02:3f:20:f5:f3:00:25:48:e7:cb:99:0b:
         56:e7:3c:41:bd:05:28:b7:38:84:b2:17:5e:a3:fa:ad:26:76:
         26:27:13:83:ff:59:a6:ee:34:b4:d9:51:0b:bf:80:60:24:5f:
         fc:76:50:06:d1:3e:3a:09:50:93:9a:30:64:1c:61:fd:12:25:
         b6:03:42:ef:c3:fd:fc:a8:87:32:26:0d:19:59:b9:b1:2f:70:
         ba:2a:77:94:f7:16:d1:b9:fe:00:e7:c2:11:33:5a:70:08:7c:
         9e:d4:96:27:95:51:24:58:29:83:e7:07:b9:3e:1c:b3:32:c1:
         3a:f4:5f:f5:87:b0:a3:32:ef:0e:c2:a4:9f:25:bb:41:d6:d5:
         0a:b0:78:24:e5:46:51:54:a4:0f:28:4d:8d:37:78:00:9b:26:
         fb:ee:83:de:74:02:be:35:d3:f6:c0:ac:1b:ed:c0:a7:ac:b0:
         5a:3d:d9:d7:7a:23:4d:a6:e8:dc:54:bf:18:51:2b:ae:9b:18:
         3b:34:18:c1:4c:55:e2:72:bd:d0:36:72:78:79:b2:bd:77:3c:
         08:ef:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org