Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ac8b3ab99e13fc39b354cb924c9843613257748f.roa
File:                     ac8b3ab99e13fc39b354cb924c9843613257748f.roa (raw, json)
Hash identifier:          YT9mRW5KbLXSfcHywV/Tehqb1UW2GI8IA+V1fcCLhYY=
Subject key identifier:   7E:10:38:6A:E1:F1:51:64:1F:8A:1E:E7:D3:C6:45:C0:71:75:C0:23
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EFD1E
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ac8b3ab99e13fc39b354cb924c9843613257748f.roa
Signing time:             Wed 24 Mar 2021 14:29:32 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     269752
IP address blocks:        181.16.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982302 (0xefd1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=ac8b3ab99e13fc39b354cb924c9843613257748f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:24:5a:0e:5c:4c:6b:8b:d8:ab:b9:d4:84:
                    32:15:91:f1:1a:92:a9:25:8a:8b:db:2b:ca:d4:51:
                    cd:37:66:39:5f:9e:43:22:b0:e3:1f:01:e2:18:62:
                    54:c3:03:cb:1e:f0:33:0c:47:43:46:5d:e2:91:39:
                    f2:9f:7b:ac:f0:a2:5b:88:3b:3e:05:7c:db:52:69:
                    ff:de:04:0e:a3:a2:e4:95:d4:f1:9c:fa:28:97:5a:
                    45:40:7e:34:96:11:d6:40:ee:3b:6d:c3:9d:17:f3:
                    e6:76:58:8b:c9:83:0c:01:5c:08:69:42:17:da:23:
                    34:e7:c7:2f:a3:8d:0e:38:27:01:01:87:87:10:81:
                    c4:d1:2d:3e:27:29:98:1f:6d:81:3f:2e:dd:f8:7b:
                    f5:62:5a:cf:91:f5:18:43:e8:24:9f:1f:39:67:20:
                    d7:33:38:49:1a:36:b9:ef:6f:14:5d:31:c1:d2:06:
                    bd:37:86:fe:01:d2:52:77:de:de:ce:09:3a:8f:c1:
                    b8:54:31:1d:14:75:a4:ff:65:9f:6d:d4:3c:95:d6:
                    23:1d:0e:3c:a6:4e:1f:47:a9:5e:06:2b:e1:f0:d1:
                    0d:b7:f7:32:a3:07:8c:5e:c2:ea:fb:80:78:f8:8f:
                    ef:57:5f:23:b4:75:ae:d7:73:af:f1:c1:9f:e0:c6:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:10:38:6A:E1:F1:51:64:1F:8A:1E:E7:D3:C6:45:C0:71:75:C0:23
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ac8b3ab99e13fc39b354cb924c9843613257748f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:24:eb:e9:ba:a6:e2:7f:4e:e4:82:49:1f:cf:93:a6:34:ef:
         1e:2a:5b:08:68:bd:1b:a3:b0:06:64:87:7c:4c:7d:b5:3e:95:
         b2:fa:d6:d2:4c:d5:a4:58:32:2c:ed:17:3b:a6:8e:42:d6:a9:
         96:ba:59:aa:57:6a:1f:7f:3d:75:84:f2:01:5b:34:78:2a:13:
         15:bf:05:4b:94:ab:bd:fe:28:98:69:de:ea:c7:72:60:6c:85:
         d5:c3:dd:26:fa:72:3c:58:87:ad:8b:69:e7:0d:8e:8a:8c:89:
         13:5a:ca:04:1f:64:c4:9e:fb:af:bd:40:5a:13:4b:c6:cd:8c:
         d1:c2:84:5b:9d:36:a4:1b:36:c4:80:ec:f6:9c:6a:45:97:00:
         b6:29:e3:5a:89:7e:d7:c2:7d:7d:85:64:fc:6f:58:2f:70:a6:
         d6:c8:16:61:ff:52:dd:8a:49:d0:09:af:7e:67:29:09:83:a1:
         47:31:75:11:5e:cc:1c:da:a2:21:ed:82:24:03:18:5e:b5:ad:
         9c:8e:af:6c:69:a9:d0:4a:30:76:c1:83:07:d5:93:55:e6:4f:
         3c:83:6c:96:3d:3c:74:a4:30:43:45:d6:7a:65:90:0a:e0:5b:
         0a:d8:7e:fb:9d:84:25:5d:68:eb:eb:9b:b6:ce:18:bf:9c:cd:
         21:dd:7e:80
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDv0eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyhhYzhiM2FiOTllMTNm
YzM5YjM1NGNiOTI0Yzk4NDM2MTMyNTc3NDhmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmsMkWg5cTGuL2Ku51IQyFZHxGpKpJYqL2yvK1FHNN2Y5X55D
IrDjHwHiGGJUwwPLHvAzDEdDRl3ikTnyn3us8KJbiDs+BXzbUmn/3gQOo6LkldTx
nPool1pFQH40lhHWQO47bcOdF/PmdliLyYMMAVwIaUIX2iM058cvo40OOCcBAYeH
EIHE0S0+JymYH22BPy7d+Hv1YlrPkfUYQ+gknx85ZyDXMzhJGja5728UXTHB0ga9
N4b+AdJSd97ezgk6j8G4VDEdFHWk/2WfbdQ8ldYjHQ48pk4fR6leBivh8NENt/cy
oweMXsLq+4B4+I/vV18jtHWu13Ov8cGf4Mbj5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH4QOGrh8VFkH4oe59PGRcBxdcAjMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3L2FjOGIzYWI5OWUxM2ZjMzliMzU0Y2I5MjRjOTg0MzYxMzI1Nzc0OGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQyDANBgkqhkiG9w0BAQsFAAOCAQEAPCTr6bqm4n9O5IJJ
H8+TpjTvHipbCGi9G6OwBmSHfEx9tT6VsvrW0kzVpFgyLO0XO6aOQtaplrpZqldq
H389dYTyAVs0eCoTFb8FS5Srvf4omGne6sdyYGyF1cPdJvpyPFiHrYtp5w2OioyJ
E1rKBB9kxJ77r71AWhNLxs2M0cKEW502pBs2xIDs9pxqRZcAtinjWol+18J9fYVk
/G9YL3Cm1sgWYf9S3YpJ0AmvfmcpCYOhRzF1EV7MHNqiIe2CJAMYXrWtnI6vbGmp
0EowdsGDB9WTVeZPPINslj08dKQwQ0XWemWQCuBbCth++52EJV1o6+ubts4Yv5zN
Id1+gA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org