Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/eb4cc7a0dd44b177d5bc163174019f72b681d885.roa
File:                     eb4cc7a0dd44b177d5bc163174019f72b681d885.roa (raw, json)
Hash identifier:          b5kGm3WXxgk60QPXob8lDWHejx2lMrP22t84EnoBdqw=
Subject key identifier:   DB:17:59:69:0D:21:86:BD:86:15:F2:C3:2A:2E:B2:BE:1E:60:3D:08
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       22306A
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/eb4cc7a0dd44b177d5bc163174019f72b681d885.roa
Signing time:             Thu 27 Apr 2023 15:55:49 +0000
ROA not before:           Wed 26 Apr 2023 15:55:49 +0000
ROA not after:            Sun 27 Apr 2025 15:55:49 +0000
asID:                     270021
IP address blocks:        181.16.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240618 (0x22306a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Apr 26 15:55:49 2023 GMT
            Not After : Apr 27 15:55:49 2025 GMT
        Subject: CN=eb4cc7a0dd44b177d5bc163174019f72b681d885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:5d:8c:72:ba:62:94:7b:e0:3d:fc:10:cb:
                    7b:fe:30:74:ac:1b:34:d0:7b:6c:89:8b:e9:89:66:
                    6e:69:bd:f9:63:15:e5:d6:ae:24:88:c3:5a:17:dd:
                    fd:14:a6:88:e4:d5:10:2a:b2:bf:15:97:8d:a2:20:
                    5d:7c:d5:82:e3:e2:71:2b:3b:d1:b4:14:5c:0d:ef:
                    94:a4:61:e0:31:29:e8:d4:98:15:6c:28:30:e9:36:
                    43:3a:4a:e6:73:6b:08:96:19:ff:c2:02:7d:b5:03:
                    0f:20:5f:cd:bf:a3:95:37:e8:12:14:08:e8:ee:1d:
                    cd:04:53:27:ac:ce:ef:a9:78:06:05:ad:54:06:da:
                    0e:4c:5a:fc:d2:83:83:fb:6f:64:4e:ca:60:12:00:
                    3e:ec:17:19:9b:9c:71:e7:d9:ad:64:d0:d0:96:57:
                    75:b5:c3:1a:86:89:22:18:98:e0:ca:05:24:ce:4b:
                    eb:ae:f8:0e:eb:61:a9:3d:e0:d4:23:cc:ca:86:e0:
                    6f:22:c9:52:13:72:a7:f7:49:ae:e1:13:b9:36:54:
                    14:07:3d:26:c3:b8:e8:87:96:f8:d3:24:b5:cb:70:
                    9c:03:f9:2a:1e:bc:89:7a:68:0b:92:4b:b0:f0:ed:
                    38:9b:ec:0a:e6:c6:56:29:50:40:f5:a4:d5:d3:35:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:17:59:69:0D:21:86:BD:86:15:F2:C3:2A:2E:B2:BE:1E:60:3D:08
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/eb4cc7a0dd44b177d5bc163174019f72b681d885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:41:dc:9a:19:fd:c2:01:28:32:82:c5:5c:78:69:e5:40:
         07:8c:fb:ff:b6:a7:90:f1:3f:39:23:55:9e:77:3e:e7:5c:c2:
         79:83:23:3e:8d:4d:85:43:37:0a:d7:7c:9e:d2:34:d6:e1:61:
         ea:85:4a:6e:5c:02:7c:47:bc:d9:83:c1:19:27:f5:7d:0c:ca:
         d4:d5:5f:d6:99:50:5c:4b:33:bb:fb:3d:8a:86:45:c1:5a:07:
         dc:6f:cb:b0:c6:de:a7:3d:93:2f:87:da:67:1d:84:27:c8:28:
         e9:46:9a:7f:26:f7:ac:71:1e:7d:b4:ed:70:e5:43:b4:16:45:
         d6:18:e7:f4:14:b9:5f:9b:ac:bd:10:0e:27:bb:88:a9:85:24:
         02:a8:10:1f:ca:b5:f6:9f:d3:cf:6a:9f:31:a4:93:06:7f:0b:
         f6:2e:97:7b:ec:a6:92:90:27:c7:c7:5c:e6:e5:ad:25:ae:7c:
         a0:3e:13:ea:34:a7:6e:0e:38:cd:2b:83:df:71:ec:f8:23:40:
         f7:0f:74:4c:ae:e5:e8:49:f2:41:0c:55:b4:00:52:d9:c3:b1:
         08:a3:b8:06:86:b4:ce:99:0a:30:88:d9:9f:53:7b:47:03:bb:
         32:27:65:6e:db:51:0b:cc:9b:06:91:e9:74:4a:d1:06:15:3c:
         e6:18:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org