Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/e1b68f9a0ac64cdb08302f4d7a9b0c10df1ff22f.roa
File:                     e1b68f9a0ac64cdb08302f4d7a9b0c10df1ff22f.roa (raw, json)
Hash identifier:          FTiGfgJsy5d057huS80toQCPycmm21Ocd5XI+ImtFaY=
Subject key identifier:   C2:F5:18:6F:55:5D:8F:DA:B7:91:A0:D4:C1:D7:17:DB:A2:A7:7B:56
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       22B4CC
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/e1b68f9a0ac64cdb08302f4d7a9b0c10df1ff22f.roa
Signing time:             Fri 28 Apr 2023 17:34:48 +0000
ROA not before:           Thu 27 Apr 2023 17:34:45 +0000
ROA not after:            Mon 28 Apr 2025 17:34:45 +0000
asID:                     52271
IP address blocks:        181.16.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274508 (0x22b4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Apr 27 17:34:45 2023 GMT
            Not After : Apr 28 17:34:45 2025 GMT
        Subject: CN=e1b68f9a0ac64cdb08302f4d7a9b0c10df1ff22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:e2:54:80:f3:1a:25:b9:44:79:1b:64:35:
                    41:45:53:cb:33:ef:fe:23:54:3e:9b:83:8e:57:62:
                    9a:d3:66:c3:05:76:86:d6:d2:db:32:44:37:4b:38:
                    3b:65:6b:68:86:4d:8e:f9:9b:6c:e2:13:1b:f7:4c:
                    96:40:92:30:e8:16:d5:bd:6d:ab:70:21:f9:b4:6b:
                    de:34:65:9e:b7:51:9f:fa:e5:be:4a:c9:f3:12:5e:
                    f8:16:87:15:7e:18:5f:26:f1:51:2a:d3:cb:24:8d:
                    48:29:58:22:e4:45:1e:c6:82:9a:01:2b:d8:d8:b7:
                    89:27:8b:58:18:db:a8:05:4e:e2:4d:7e:b2:7b:6d:
                    dc:7c:22:d1:7c:1e:6c:01:46:89:fd:e1:12:c1:1d:
                    c8:f2:23:5c:3c:dc:22:d8:2d:e7:fc:79:1e:e8:69:
                    d7:3d:73:d2:47:13:b6:e8:a4:14:3d:9c:95:ea:3f:
                    76:3e:3d:4c:66:ed:ec:56:ac:b2:e6:28:03:29:6f:
                    32:85:c3:7d:78:20:b9:52:d8:cb:7c:36:5d:cd:af:
                    17:af:74:93:7a:10:54:a8:18:ba:52:7d:05:3f:00:
                    8b:40:2a:52:62:07:3e:54:4c:1b:8c:9e:e0:6c:ed:
                    73:00:d5:d6:de:97:c4:f5:d8:5e:c5:65:66:67:78:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F5:18:6F:55:5D:8F:DA:B7:91:A0:D4:C1:D7:17:DB:A2:A7:7B:56
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/e1b68f9a0ac64cdb08302f4d7a9b0c10df1ff22f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:8d:ba:d1:5f:ac:6f:06:b8:32:0c:24:85:bc:43:e7:28:
         3a:32:28:61:ae:ce:52:03:aa:eb:50:50:dd:11:6f:c4:f5:7e:
         1b:c4:8c:d1:44:52:36:d2:33:dc:ea:11:17:5d:35:f2:68:f1:
         eb:3e:e2:35:7f:8e:a9:e0:8c:12:2d:b2:c3:f4:4b:d2:bd:59:
         78:fa:59:83:f5:1d:a2:d4:64:d8:93:2d:69:dc:9b:1a:4d:6d:
         3e:44:72:d8:5d:f2:5f:8e:8c:d7:40:fc:86:92:53:6d:b0:2f:
         ca:13:95:91:71:6c:d3:3d:65:38:fc:75:c6:27:78:ff:65:e1:
         6f:14:05:dd:6f:f7:96:22:91:66:d3:98:3c:ab:cf:23:a8:2b:
         b1:72:e6:0a:b5:aa:10:12:12:f7:37:42:f9:e2:49:05:5d:50:
         86:e1:db:db:4f:67:47:0f:ab:c4:69:f0:75:a2:70:38:ff:e0:
         08:19:03:8a:0b:f9:9e:73:d0:7b:49:c5:9d:48:d7:2d:96:df:
         fc:89:51:2e:b5:10:22:96:87:4f:78:5f:47:31:c8:c9:0d:05:
         a1:f2:2c:e8:36:6a:07:98:0d:e5:18:97:63:f4:8f:e4:1a:14:
         78:bb:1a:12:cb:fa:f9:c5:be:cc:30:69:e1:c1:77:5c:ad:a1:
         ec:5c:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:31:37 2025 by rpki-client