Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/b184a7316b2a5c7c37ed0573ee8b5503b5ad0654.roa
File:                     b184a7316b2a5c7c37ed0573ee8b5503b5ad0654.roa (raw, json)
Hash identifier:          GwLFh9xruVRjukdamKyZh2KUY+fi5f/s39NGp51MJL0=
Subject key identifier:   C7:BF:2D:48:AC:04:58:F0:0E:5C:8F:C1:7C:5F:6B:C4:20:A6:79:05
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EC958
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/b184a7316b2a5c7c37ed0573ee8b5503b5ad0654.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969048 (0xec958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=b184a7316b2a5c7c37ed0573ee8b5503b5ad0654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:f8:73:87:33:47:43:6f:74:a0:3c:95:2d:
                    60:20:1b:cf:99:0b:66:8f:ec:57:41:70:30:c8:5f:
                    5a:62:94:6b:5c:5e:02:d9:33:d4:87:a4:2f:8e:7e:
                    39:a1:3c:2f:5f:2b:be:95:13:94:c9:5b:ed:53:4c:
                    a8:21:82:bf:58:c5:a5:06:1f:6a:f8:c2:48:3f:38:
                    97:70:80:22:78:c8:fa:09:75:b4:80:8e:c2:9e:c4:
                    0f:d6:6c:52:52:b9:12:56:d8:db:2c:4b:3f:77:85:
                    30:a8:d1:50:2a:93:a1:a8:79:a7:3e:04:30:b8:0c:
                    79:c9:f6:6a:40:31:6a:7d:1c:35:ee:e8:c0:d6:fb:
                    7a:72:5b:c0:73:18:ab:bd:0e:63:fd:c2:01:98:43:
                    15:ba:5c:7e:88:b2:98:73:b3:5a:28:76:1d:34:b9:
                    7e:79:af:fd:4d:7c:cc:2a:d2:1d:04:42:d4:a3:a3:
                    ee:13:c7:84:73:5d:91:a1:22:ca:0e:79:3c:fe:08:
                    fa:49:25:ab:5f:36:e7:ec:aa:af:f4:85:51:fb:43:
                    9a:26:28:9f:48:4f:68:6d:9d:44:37:d7:f1:fc:00:
                    08:b6:6a:14:b7:e7:ff:c7:50:0a:9f:10:3a:88:c3:
                    e9:c9:6c:75:c1:36:0a:04:a0:6d:57:3b:3a:eb:f9:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BF:2D:48:AC:04:58:F0:0E:5C:8F:C1:7C:5F:6B:C4:20:A6:79:05
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/b184a7316b2a5c7c37ed0573ee8b5503b5ad0654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:a6:6e:0a:f0:dd:7e:e9:da:01:6c:de:05:6e:a9:d8:dc:76:
         f1:d3:9f:04:e1:59:39:7d:27:ad:88:9a:f3:71:7d:dd:bf:ab:
         9f:c7:63:45:75:ab:d7:c8:43:47:5d:ad:d8:6e:a7:17:69:d1:
         38:26:9c:c7:de:05:92:f4:b6:b9:8a:54:33:cc:2c:ec:0b:97:
         a9:b3:8f:20:6b:64:5c:95:db:02:6a:c4:64:37:a5:d7:e5:e1:
         81:03:5c:26:30:f7:07:eb:be:e1:7e:33:c2:27:8b:ff:12:5b:
         9e:18:be:23:47:36:5f:37:09:81:d9:d6:b5:b5:72:66:97:b3:
         cf:fb:21:f6:6c:e4:74:37:ab:34:de:0d:ff:14:12:83:60:a1:
         be:81:ed:11:03:9c:7f:27:9c:4f:72:f5:6a:d1:e5:51:98:d0:
         28:2e:7e:f6:9f:de:2b:1a:7b:43:56:37:f2:49:d9:25:26:f9:
         3f:2f:dc:67:91:1b:7a:a1:93:e4:5e:59:be:8a:56:c0:75:f3:
         a9:80:79:aa:31:b8:9a:4f:29:20:b1:d3:14:80:fa:5f:ac:34:
         55:b3:5c:58:0f:3b:03:e0:b7:8a:d2:44:82:4e:7e:13:ff:6c:
         7e:3c:c6:a0:98:ef:49:b0:51:3f:35:31:3a:d5:9a:bd:92:04:
         2e:19:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----