Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ced0bd14d2cf506fac2eb980da2b668bfe01b7cd.roa
File:                     ced0bd14d2cf506fac2eb980da2b668bfe01b7cd.roa (raw, json)
Hash identifier:          hsNe3RdUZeP/bwEx4brIbAagNeYd97Yc/xlFLkNmbeA=
Subject key identifier:   F3:66:46:88:F7:10:24:92:E8:BA:D1:C7:7E:10:BD:90:0E:E2:D6:40
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       2362DE
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ced0bd14d2cf506fac2eb980da2b668bfe01b7cd.roa
Signing time:             Thu 04 May 2023 18:52:51 +0000
ROA not before:           Wed 03 May 2023 18:52:51 +0000
ROA not after:            Sun 04 May 2025 18:52:51 +0000
asID:                     52323
IP address blocks:        181.16.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319070 (0x2362de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: May  3 18:52:51 2023 GMT
            Not After : May  4 18:52:51 2025 GMT
        Subject: CN=ced0bd14d2cf506fac2eb980da2b668bfe01b7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:74:ac:87:94:6f:98:4f:f8:86:c0:cd:b3:
                    f9:e2:7c:09:e2:94:4f:b3:65:44:ed:37:c1:16:1a:
                    f1:e2:76:bf:54:b1:43:16:f1:fb:c4:6d:74:6e:44:
                    5a:75:35:fb:d2:fd:18:58:cb:65:55:a8:0c:69:10:
                    13:6f:1b:af:5f:e1:79:cb:cc:5a:2d:c1:7f:f6:ff:
                    4b:05:09:ff:7b:2c:74:92:dd:b7:42:60:e1:5c:25:
                    da:04:07:86:0a:21:98:76:5a:1d:b6:55:34:3f:a3:
                    16:3a:76:ed:68:1f:92:6f:0a:28:e6:06:42:7f:fa:
                    27:c5:fe:06:7a:56:37:f0:7d:6b:48:08:ba:0f:62:
                    09:69:6f:5c:a3:d1:b4:d3:04:6f:81:c6:aa:e6:92:
                    70:9e:ab:0a:5d:af:98:fc:45:e2:de:a6:e5:e9:91:
                    a7:7e:4d:16:7b:fd:cc:36:a9:62:73:b3:ca:6c:88:
                    5f:30:13:de:5f:3d:f3:20:90:af:3c:40:7d:c5:c5:
                    52:55:09:64:a4:58:52:d3:34:91:1a:e0:0a:9c:79:
                    13:5e:37:d2:38:bb:38:3e:7a:86:92:c4:34:dd:73:
                    6c:fc:5c:71:14:e7:4a:25:14:d9:4f:e0:65:2a:ca:
                    a3:2c:23:d3:ab:f6:c6:5c:99:7e:66:c4:34:a6:7b:
                    4d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:66:46:88:F7:10:24:92:E8:BA:D1:C7:7E:10:BD:90:0E:E2:D6:40
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ced0bd14d2cf506fac2eb980da2b668bfe01b7cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:48:32:62:33:8b:b9:65:e4:c6:ca:ff:be:a0:db:a6:d8:3e:
         e9:20:ea:b2:b6:bf:c5:0d:22:51:10:bb:29:c2:d5:ed:33:2e:
         bd:96:38:6c:59:f5:15:09:85:c0:7b:06:be:e5:3f:df:3d:ce:
         d0:46:2e:d5:f1:00:16:bc:2d:03:b4:85:9c:28:c4:bc:3e:73:
         b0:04:d4:70:f3:03:cf:e5:be:ec:9d:c9:e6:da:8a:d3:f8:79:
         1c:5b:21:bb:56:f0:c2:aa:14:ec:b7:46:65:b5:ae:d8:2e:2d:
         d0:62:94:2c:25:13:0d:a2:8d:a2:6e:97:f4:54:c8:b1:ef:92:
         cf:ad:31:45:0d:bc:4f:ad:aa:91:7a:55:8d:a7:36:60:a8:2d:
         f5:51:18:49:5b:be:a3:46:45:68:8a:53:3f:eb:ec:0e:52:10:
         25:3d:63:0d:72:83:31:c1:86:84:5d:4e:16:81:6d:5a:17:1b:
         3a:0c:fb:be:a1:a4:17:2d:76:08:6c:97:34:a9:dd:f9:79:a3:
         7c:08:c2:ec:12:b9:88:74:9e:ca:e8:6c:dd:26:5f:55:6a:70:
         d9:38:83:e8:76:53:60:6a:32:7e:05:47:0b:59:f0:8d:f4:3c:
         c5:91:c2:c1:b8:10:38:1a:02:20:4e:3d:b7:08:1b:e7:0c:bc:
         df:44:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org