Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/e04f360ec02e1c642b2e78d891380d05e047e898.roa
File:                     e04f360ec02e1c642b2e78d891380d05e047e898.roa (raw, json)
Hash identifier:          gKXxppv65ADAp9hTJHVgrb8QUmWLeX/GYb6yKzK8hsc=
Subject key identifier:   A5:EE:3B:AE:E8:26:F5:34:79:19:2A:4F:27:CB:82:2A:92:67:DE:C7
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0ED8F7
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/e04f360ec02e1c642b2e78d891380d05e047e898.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973047 (0xed8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=e04f360ec02e1c642b2e78d891380d05e047e898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:34:eb:ae:9d:2d:eb:63:fa:8c:e0:50:48:
                    43:e5:aa:5c:5d:2a:d8:ac:0f:aa:99:cd:df:78:d8:
                    e9:c0:9d:75:17:43:02:80:82:21:f1:2f:ef:a1:26:
                    c7:c2:69:03:f3:a0:c7:f1:12:3a:5b:07:b1:10:d3:
                    f5:a0:d2:a5:9c:1b:c9:08:cd:6c:3b:72:4a:63:09:
                    cd:a5:17:96:be:7a:70:2d:7a:ae:4a:fd:f8:84:49:
                    77:56:6c:a3:e0:f0:cf:02:a2:8f:7f:94:bf:62:da:
                    51:88:e9:31:b8:73:b8:e1:05:51:77:52:d3:98:a5:
                    03:fc:d7:2e:36:e6:72:ab:ce:b7:c5:50:5c:6d:70:
                    fd:bb:f9:72:29:03:1c:d3:c0:4f:27:05:2c:2d:e5:
                    d3:1c:12:c8:77:5d:ae:53:c3:01:98:6d:8e:bf:24:
                    0a:f2:76:8e:6e:08:4b:30:b9:92:9d:f7:a9:f4:07:
                    76:70:d9:cc:64:10:a9:27:56:6d:f5:71:f6:23:55:
                    2d:a9:36:41:31:b1:e4:f8:88:49:3e:9c:4c:bd:f4:
                    dc:39:f7:d7:ca:fc:93:3b:e6:e6:86:05:ec:eb:b6:
                    35:60:69:e8:95:2b:c9:94:28:8d:fd:11:3a:94:72:
                    c9:14:17:ed:62:8a:1f:c6:b3:c6:a9:73:08:8e:00:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EE:3B:AE:E8:26:F5:34:79:19:2A:4F:27:CB:82:2A:92:67:DE:C7
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/e04f360ec02e1c642b2e78d891380d05e047e898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2d:5a:bf:b1:f6:b1:96:77:13:13:22:51:7c:0d:a3:4c:69:
         9f:57:a0:af:a8:03:bd:06:5e:c0:f5:ac:01:80:cc:e9:05:d4:
         81:77:1d:1f:be:d8:dc:39:6e:d1:a0:95:46:e3:dc:f7:ee:a5:
         83:ee:d7:ea:c0:71:3f:fd:ce:3b:c5:45:2d:21:ab:f2:8e:18:
         a4:3c:b0:ad:40:b2:94:c2:cb:40:bd:1d:f7:8e:3c:2b:22:85:
         ca:7a:64:04:17:4a:89:60:1a:59:f1:6d:b8:35:e5:61:1b:2d:
         11:d8:98:38:d2:4c:b4:b2:ab:5d:8c:da:32:79:4d:1f:60:5c:
         83:90:22:25:03:04:bf:ed:e6:4b:8c:d3:e4:fe:43:1e:33:4c:
         4e:7f:be:d4:a2:91:a7:17:be:81:23:c3:30:84:9c:c7:35:08:
         fd:e1:63:f1:00:03:aa:9b:c1:27:ed:d2:30:a4:af:6d:ce:66:
         fd:8f:b7:db:6e:c7:c3:12:b0:b7:9e:62:19:fc:4e:f1:3e:87:
         08:41:49:3f:9e:39:6f:8c:e8:d5:c3:be:bf:f4:a1:21:06:5a:
         91:1d:64:80:50:b2:06:6b:bd:15:e6:5c:67:49:8b:1d:41:99:
         de:fb:3b:1c:62:bb:29:fb:fe:f4:c8:39:a0:0c:2a:86:2d:44:
         26:d1:55:91
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDtj3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyhlMDRmMzYwZWMwMmUx
YzY0MmIyZTc4ZDg5MTM4MGQwNWUwNDdlODk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjjc0666dLetj+ozgUEhD5apcXSrYrA+qmc3feNjpwJ11F0MC
gIIh8S/voSbHwmkD86DH8RI6WwexENP1oNKlnBvJCM1sO3JKYwnNpReWvnpwLXqu
Sv34hEl3Vmyj4PDPAqKPf5S/YtpRiOkxuHO44QVRd1LTmKUD/NcuNuZyq863xVBc
bXD9u/lyKQMc08BPJwUsLeXTHBLId12uU8MBmG2OvyQK8naObghLMLmSnfep9Ad2
cNnMZBCpJ1Zt9XH2I1UtqTZBMbHk+IhJPpxMvfTcOffXyvyTO+bmhgXs67Y1YGno
lSvJlCiN/RE6lHLJFBftYoofxrPGqXMIjgBSQwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKXuO67oJvU0eRkqTyfLgiqSZ97HMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3L2UwNGYzNjBlYzAyZTFjNjQyYjJlNzhkODkxMzgwZDA1ZTA0N2U4OTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQpTANBgkqhkiG9w0BAQsFAAOCAQEALC1av7H2sZZ3ExMi
UXwNo0xpn1egr6gDvQZewPWsAYDM6QXUgXcdH77Y3Dlu0aCVRuPc9+6lg+7X6sBx
P/3OO8VFLSGr8o4YpDywrUCylMLLQL0d9448KyKFynpkBBdKiWAaWfFtuDXlYRst
EdiYONJMtLKrXYzaMnlNH2Bcg5AiJQMEv+3mS4zT5P5DHjNMTn++1KKRpxe+gSPD
MIScxzUI/eFj8QADqpvBJ+3SMKSvbc5m/Y+3227HwxKwt55iGfxO8T6HCEFJP545
b4zo1cO+v/ShIQZakR1kgFCyBmu9FeZcZ0mLHUGZ3vs7HGK7Kfv+9Mg5oAwqhi1E
JtFVkQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org