Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a695b4a1b7f70d8cbcd8243f42e8fe845a933c07.roa
File:                     a695b4a1b7f70d8cbcd8243f42e8fe845a933c07.roa (raw, json)
Hash identifier:          2nAoSI2eMfDKYSofWrQb7bjbVys8BxKQpIhT0CyxqKU=
Subject key identifier:   7E:61:29:09:23:41:75:84:C6:49:8A:78:79:69:7C:B1:8D:32:7D:9B
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       2302F3
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a695b4a1b7f70d8cbcd8243f42e8fe845a933c07.roa
Signing time:             Fri 28 Apr 2023 17:46:35 +0000
ROA not before:           Thu 27 Apr 2023 17:46:35 +0000
ROA not after:            Mon 28 Apr 2025 17:46:35 +0000
asID:                     270021
IP address blocks:        181.16.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294515 (0x2302f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Apr 27 17:46:35 2023 GMT
            Not After : Apr 28 17:46:35 2025 GMT
        Subject: CN=a695b4a1b7f70d8cbcd8243f42e8fe845a933c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6d:4a:10:87:68:c5:07:96:ff:ee:f4:ca:4c:
                    c5:18:59:73:55:0a:ba:21:8d:d6:b0:cd:d2:5d:d9:
                    5a:47:ab:a3:09:e5:f1:99:be:e8:b6:33:ad:66:d0:
                    05:a4:47:0b:41:ae:5f:58:b0:7b:b6:37:b4:6c:01:
                    3a:d3:90:9d:9b:4e:ac:7d:60:a3:dd:82:e4:01:02:
                    b8:0a:9a:6f:3e:d1:e1:9e:9f:c4:bb:dd:ad:e0:d3:
                    4d:90:ab:b0:8c:18:34:28:56:18:6a:17:cb:1a:04:
                    c2:ee:b8:fd:cf:26:40:1a:0f:b1:68:96:ce:7d:dd:
                    c8:f9:f0:b7:ea:e7:28:b1:01:e1:52:16:34:75:49:
                    2d:91:f9:c0:21:a0:90:66:b8:15:04:54:3b:76:1a:
                    f2:50:20:f0:a4:d5:38:86:fb:47:76:50:e4:ce:46:
                    16:f0:ff:4b:d7:dd:15:07:cf:b3:c7:51:c6:df:d7:
                    32:8d:d2:8e:b0:77:76:30:02:29:f4:5b:b3:dc:ae:
                    9e:df:3e:ab:73:a8:8e:b1:ab:48:32:16:2e:bd:46:
                    a3:70:fd:63:5b:4a:69:16:0c:ba:c1:e6:1f:48:a3:
                    d1:3a:9e:19:97:c1:60:59:f5:7c:37:d7:49:d3:3a:
                    21:11:a3:7f:ef:2a:d0:91:d5:b9:7b:fe:6e:3d:92:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:61:29:09:23:41:75:84:C6:49:8A:78:79:69:7C:B1:8D:32:7D:9B
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a695b4a1b7f70d8cbcd8243f42e8fe845a933c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:cd:d6:39:76:fb:0a:39:c6:53:e9:0d:d1:dc:8a:47:c3:4b:
         1f:41:14:7e:7d:48:f4:93:b4:3d:57:46:85:60:d6:ee:e1:fc:
         42:a0:00:15:17:0d:a0:11:fd:1c:d1:ac:b1:d4:58:45:1e:4a:
         11:24:3c:6a:6b:2f:a3:20:d8:fe:6e:be:38:f1:5b:cd:e0:67:
         c2:3f:a7:e8:43:84:0d:2f:5b:8b:25:09:4f:dc:73:79:7f:ea:
         19:c1:3e:35:af:d5:30:c1:44:8e:1e:c2:27:45:cf:d8:85:28:
         2e:c2:a9:62:a2:12:fc:63:b5:a7:1a:2e:2f:f9:81:c4:6c:fe:
         7e:5b:72:d7:65:46:ad:d2:81:5a:23:20:41:7f:fc:2a:10:79:
         64:f5:d8:a5:91:07:08:49:e3:d4:c8:a5:a8:2f:4e:0d:57:39:
         cd:1d:e9:46:09:f9:2c:98:2a:7c:83:48:eb:eb:78:a2:55:7d:
         99:4f:af:8f:c9:e0:50:33:35:8a:57:a6:da:22:09:b9:29:93:
         76:51:6c:27:1f:87:7a:c6:c2:9d:e6:5d:2c:de:c7:6a:6e:42:
         36:19:88:71:17:b8:01:5c:f4:f8:25:d4:2d:46:3b:60:44:bc:
         30:26:4b:48:3f:f9:ef:3e:3a:95:f9:ef:a4:ac:a8:c9:e0:77:
         f8:98:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org