Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f1f6a6c92275a0510e8ce0523f36d277e3a38476.roa
File:                     f1f6a6c92275a0510e8ce0523f36d277e3a38476.roa (raw, json)
Hash identifier:          rB7DnpIYfR1H5KaCQLL9le5XmFEKuqlxlmviVktetUw=
Subject key identifier:   37:AB:37:80:98:CE:FE:A0:32:89:EB:17:4D:A3:19:99:A0:33:7F:C5
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       1AFCF1
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f1f6a6c92275a0510e8ce0523f36d277e3a38476.roa
Signing time:             Mon 01 Aug 2022 16:29:20 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768689 (0x1afcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f1f6a6c92275a0510e8ce0523f36d277e3a38476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:51:d9:fd:af:ab:b1:41:f8:47:99:ca:1c:
                    9c:df:c8:99:1b:f8:3c:b2:95:57:1c:a2:56:8e:e4:
                    56:56:56:5f:ae:8f:e2:61:2d:98:ea:a7:f7:97:29:
                    4b:80:b0:d7:16:0b:b3:a8:25:4d:b1:82:52:15:25:
                    d9:79:ca:7a:e1:f0:11:4a:da:eb:90:8e:0c:5f:5d:
                    54:6f:24:47:52:da:57:b6:04:78:63:22:00:b0:0d:
                    07:af:99:da:10:f0:aa:97:6f:59:cb:cb:14:df:01:
                    7b:36:ed:bf:ec:c0:26:66:e6:54:54:24:ba:a1:2b:
                    86:5d:77:4d:0c:53:c3:82:0b:40:95:ed:f9:fd:fd:
                    5f:25:9e:ac:da:6c:24:64:3a:95:2e:38:02:6b:3e:
                    e1:49:6d:81:fa:09:93:9b:ae:5c:9a:b3:15:c2:97:
                    31:20:6b:b8:93:24:1c:26:90:e7:f3:4a:6e:e3:8e:
                    41:01:f5:f6:28:68:45:69:ba:7e:c5:3e:e7:95:8f:
                    71:d5:61:e5:02:a7:91:6b:9d:c1:f5:4f:94:72:fe:
                    11:77:7c:63:24:f0:b2:84:bf:df:8b:5c:98:e5:3c:
                    af:a2:6e:3f:dd:8f:85:7b:31:24:a7:be:ca:3c:08:
                    6e:1c:fa:0f:b5:61:ea:d7:6b:03:41:c6:0b:e4:54:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AB:37:80:98:CE:FE:A0:32:89:EB:17:4D:A3:19:99:A0:33:7F:C5
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f1f6a6c92275a0510e8ce0523f36d277e3a38476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:e8:47:50:ae:8f:db:61:b1:f9:c8:b4:fa:f2:be:a0:46:df:
         84:a0:0b:49:47:0e:eb:49:32:89:e6:03:fa:78:6e:5e:9d:70:
         d4:fd:75:e2:03:85:f9:ad:1e:6d:69:bc:96:61:f6:27:e1:13:
         40:db:a3:a8:dc:54:a6:3c:2a:f9:b0:f4:0b:a9:1b:09:ca:e3:
         7b:cb:d8:d4:21:be:b3:b8:63:23:3b:45:15:bc:19:64:82:2d:
         ad:5f:50:11:72:e6:2d:fa:40:2b:9f:8b:37:76:86:18:b5:5a:
         62:ef:af:9f:9b:1f:5b:5b:dc:40:ae:f9:9e:db:40:6f:c2:74:
         a3:6c:16:91:48:f0:10:0c:b5:b7:51:a0:e1:83:32:0c:c8:05:
         31:43:bc:7d:65:6b:53:a0:9f:2c:e5:e1:b7:77:a6:8f:0b:d3:
         e5:89:57:e4:bd:ab:00:f5:fd:87:75:de:d2:76:a5:cf:4e:91:
         0c:fa:4a:2b:97:2f:2e:a8:5e:61:37:11:74:f1:ce:f1:36:7c:
         a2:b4:90:26:b8:e4:cf:68:28:a8:df:1b:66:bf:e7:98:68:e9:
         bc:b9:59:c4:ca:d7:41:d1:1d:10:8b:6d:e7:ab:c9:16:91:ee:
         94:71:ea:87:c7:ab:73:ec:73:fd:80:76:5e:0b:a7:43:30:da:
         67:8e:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org