Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a5d89f65955ff2f14519760b0dc072211eeb47bf.roa
File:                     a5d89f65955ff2f14519760b0dc072211eeb47bf.roa (raw, json)
Hash identifier:          xG9Zr0FO28CUQ93sAG71GstQAvMVS+RFalvOTZYRMk4=
Subject key identifier:   0B:14:F9:15:2B:93:DA:51:FD:14:63:C2:C9:84:FF:09:AA:EB:92:1D
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EBAEA
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a5d89f65955ff2f14519760b0dc072211eeb47bf.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965354 (0xebaea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=a5d89f65955ff2f14519760b0dc072211eeb47bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:42:10:16:3a:fb:48:ac:c6:17:39:72:a2:
                    24:15:8a:04:20:17:9c:98:2f:6d:6a:25:92:f8:e0:
                    f8:b2:dc:be:72:6c:aa:d6:16:c0:6d:ea:a4:37:66:
                    39:35:65:9b:39:25:c1:0e:66:b6:fc:fd:3c:1f:ae:
                    27:9e:10:93:8e:df:74:e7:c7:a9:d4:d3:4c:09:0c:
                    7f:e5:e6:63:03:80:80:85:76:a3:d6:89:20:c2:14:
                    e9:32:57:60:a8:b8:f4:2c:b0:c3:09:a4:22:04:50:
                    83:87:c0:cb:6f:76:cf:6d:a3:81:31:4a:11:0e:2c:
                    03:1d:64:ff:0f:8c:51:cd:23:da:bd:e7:f2:9d:4b:
                    3f:10:98:de:2b:9b:9f:d2:10:d0:bb:d8:19:9b:91:
                    1a:00:ee:6c:e0:68:10:80:cd:a5:a5:5c:8b:91:6a:
                    60:c3:42:33:86:2e:d0:df:d0:47:fe:bf:6b:9f:6a:
                    59:6d:b0:c1:f6:69:4c:3f:5f:46:af:63:1c:6c:73:
                    e6:3f:63:50:50:7f:88:c7:49:5f:67:22:7a:c8:26:
                    3b:4f:e1:e8:80:32:a2:3c:19:21:19:ec:bd:24:71:
                    3b:28:28:1c:6b:ea:d2:fc:cf:e1:ef:b1:59:22:f5:
                    b8:68:e8:c3:22:c2:8d:a5:7a:7b:ee:b4:68:cf:b1:
                    eb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:14:F9:15:2B:93:DA:51:FD:14:63:C2:C9:84:FF:09:AA:EB:92:1D
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a5d89f65955ff2f14519760b0dc072211eeb47bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:db:6e:b5:b9:de:f6:52:24:14:9a:5d:8c:7d:9d:88:ab:4e:
         dc:61:75:72:98:a4:68:5e:e2:b5:28:0e:28:4b:e6:93:55:23:
         db:34:29:23:11:e7:68:a5:b1:a0:fe:aa:46:2c:db:27:7f:2b:
         bf:8b:05:2f:c8:84:c6:16:9f:69:1b:df:c7:e0:85:f0:e1:d7:
         99:7e:df:0a:18:46:8d:09:fb:94:4c:5b:58:d7:fd:62:e7:60:
         68:50:9a:f9:ab:00:16:14:6f:30:0c:b4:e5:63:a0:6c:60:33:
         37:0d:97:6a:51:27:d0:a2:12:a9:d2:f7:50:f2:01:f7:4a:1f:
         dc:ce:80:16:4d:9c:1b:bf:30:a0:f7:70:20:0a:06:2e:94:29:
         73:63:0f:0e:eb:aa:68:3a:b6:8a:58:4b:d9:29:8c:ef:8c:5c:
         18:9e:82:7f:9e:20:1e:6e:d7:34:a8:49:21:9b:eb:64:92:0d:
         12:bb:ff:29:88:17:61:02:81:ef:1b:98:d7:ae:79:4e:a6:a3:
         1e:52:f3:b4:67:03:ac:3f:92:40:1b:54:83:55:d5:f2:24:d5:
         7f:31:6d:e9:49:8d:e4:d3:f7:1a:97:45:90:76:18:b2:7a:dc:
         fb:49:07:86:e4:b4:8c:ab:41:69:52:df:61:61:a6:7d:c2:2b:
         f5:49:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org