Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9373a637184c3a9eb5bddb2bfd432b7d8bd5259e.roa
File:                     9373a637184c3a9eb5bddb2bfd432b7d8bd5259e.roa (raw, json)
Hash identifier:          oAjVjVo2Se8K+ZVxMybSx2JZXC5V6kY7dDGGh850K18=
Subject key identifier:   0C:77:A1:85:26:42:BA:25:5B:2D:DA:E4:3E:1A:8D:E3:D2:52:3E:83
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EFAE7
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9373a637184c3a9eb5bddb2bfd432b7d8bd5259e.roa
Signing time:             Wed 24 Mar 2021 14:29:32 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981735 (0xefae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=9373a637184c3a9eb5bddb2bfd432b7d8bd5259e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:6a:a0:06:b6:16:7a:04:3b:35:67:89:00:
                    df:3a:f0:d0:d2:9c:7c:a7:74:53:b2:e4:d3:da:ec:
                    38:ea:6d:38:23:cc:d2:f1:65:20:69:f7:4a:6f:2f:
                    6c:40:5f:bd:11:26:09:02:9b:27:32:d6:63:9c:f1:
                    18:d1:38:8d:73:8e:82:1a:5f:43:46:b7:7b:98:a5:
                    97:ea:6a:97:56:f5:ca:d0:80:47:0b:9c:27:8b:58:
                    26:80:a2:60:08:a0:fa:1b:81:6c:7c:4f:20:9a:92:
                    ec:2b:9e:af:8c:4a:ee:19:8f:2c:9a:3a:63:6a:da:
                    c4:ce:b9:56:4a:c1:88:b9:0c:aa:52:2b:2d:9e:2d:
                    0c:1c:bf:1e:b9:51:16:fb:55:21:4f:fc:bc:5f:b1:
                    cd:03:23:b3:9d:61:35:e9:f6:e4:d7:94:61:ca:52:
                    15:78:97:b6:fd:30:ba:21:82:f1:ca:7c:b8:c6:9c:
                    94:38:f1:b0:54:f6:a1:d6:9f:d3:ae:63:98:05:24:
                    11:72:40:1d:ce:f0:09:f9:15:0f:31:ea:31:f3:06:
                    9b:23:4e:47:8c:b1:08:d9:ba:bc:6d:eb:22:65:35:
                    94:4f:0e:8b:46:7d:5d:23:f3:02:32:b4:34:f3:65:
                    b1:39:81:0d:27:b2:d9:39:f3:52:70:3e:9f:32:65:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:77:A1:85:26:42:BA:25:5B:2D:DA:E4:3E:1A:8D:E3:D2:52:3E:83
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9373a637184c3a9eb5bddb2bfd432b7d8bd5259e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:59:58:a9:96:62:6f:c5:69:34:11:6c:92:02:3f:6d:7d:41:
         87:d7:b9:5a:6f:59:c2:ce:a6:fc:a2:e0:c8:bc:fe:dd:0c:00:
         36:5e:64:df:0c:b3:45:38:e3:78:27:6b:6d:7e:e4:6a:b4:0b:
         69:47:be:b5:56:ec:8d:50:5e:1d:8f:4f:74:1c:18:c0:0b:7d:
         32:45:f9:65:da:bd:39:2c:c9:00:e0:8f:83:8a:7b:89:5b:1b:
         17:77:80:92:38:02:23:b9:d0:c3:e9:af:9f:7f:a6:e5:fb:07:
         6e:4e:1d:f7:2b:d8:16:3c:36:2f:c9:f2:94:14:f7:98:a0:69:
         c6:6a:82:62:26:2b:1b:52:82:b4:e9:2e:8c:e8:3c:ab:d1:d1:
         4d:90:1d:7b:b0:bb:e9:b0:de:a6:0c:9b:59:d5:71:bc:73:e4:
         e6:f7:dd:d7:0b:10:47:96:ec:75:b5:70:02:5c:8d:f3:e1:a3:
         f9:3f:99:8b:f9:a4:7f:43:63:03:8f:48:f1:71:e4:ee:06:b5:
         63:b2:eb:96:aa:ee:e9:b3:ca:d3:4b:e5:c4:76:1e:8f:ed:9c:
         21:0d:85:74:f4:80:90:11:68:f8:19:98:c8:ac:be:5c:74:67:
         cc:0d:cf:54:c6:81:b3:f0:b9:db:16:96:07:59:88:20:3f:14:
         d2:72:86:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org