Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/fa05acc2ad181efc0b3be264d4f7170626e09d57.roa
File:                     fa05acc2ad181efc0b3be264d4f7170626e09d57.roa (raw, json)
Hash identifier:          W06Wd3Ph9VxbA+vJhbZux044RO8/cJt+sTEElFerSw8=
Subject key identifier:   B0:EC:5A:61:A1:8E:20:73:09:D3:A4:AF:C3:92:54:92:66:0A:A0:90
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EAEF9
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/fa05acc2ad181efc0b3be264d4f7170626e09d57.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962297 (0xeaef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=fa05acc2ad181efc0b3be264d4f7170626e09d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:14:b3:a9:0b:6c:54:4c:b9:6a:c8:ee:c2:
                    4d:82:3f:ca:26:97:f2:15:b2:6d:f1:18:83:a7:6f:
                    47:08:c8:62:c5:66:bf:cc:55:c2:35:90:b5:33:5d:
                    4d:09:da:80:47:a4:1a:f5:69:e9:da:34:b7:10:5c:
                    cb:dd:0e:40:12:99:c6:d6:9b:e5:d2:82:7b:3c:f0:
                    7a:40:bc:77:49:d7:1c:d2:d9:ea:c3:2b:90:4e:bd:
                    49:11:bc:dd:a4:64:84:79:42:9d:48:4a:93:a9:d6:
                    4f:2c:8f:84:65:04:d3:48:ec:7a:15:32:43:15:3b:
                    d6:cd:6d:c1:e2:e7:07:94:59:da:9c:f0:b6:b9:c4:
                    6c:e3:09:3b:d9:8d:e3:ce:28:17:9a:da:13:c3:cb:
                    58:f8:50:bf:bc:46:57:76:c4:ca:e0:bc:39:c0:c2:
                    df:c1:72:91:e1:8a:e6:ee:8a:18:4b:28:4c:6b:f4:
                    e5:6b:b0:8d:41:7e:5e:31:e6:22:84:a5:03:d4:e9:
                    42:5b:38:43:72:c3:0c:5d:9f:30:15:ef:87:e0:0e:
                    d0:32:3c:c9:87:48:ed:f9:94:b5:b9:cf:ca:56:05:
                    29:71:75:16:c2:8a:e3:d0:e3:9d:77:5d:0f:39:e1:
                    78:f1:69:e7:77:38:27:0a:b7:42:78:2a:32:8c:6c:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:5A:61:A1:8E:20:73:09:D3:A4:AF:C3:92:54:92:66:0A:A0:90
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/fa05acc2ad181efc0b3be264d4f7170626e09d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:8e:a2:bc:86:ca:e5:7f:fd:42:21:50:ba:b5:71:71:c2:3d:
         40:37:20:6a:7d:90:99:ac:62:20:47:9a:7f:e8:2e:48:b5:fe:
         a1:2e:ae:51:49:1e:1b:0c:e5:3e:58:1f:d4:7d:b3:39:23:6f:
         13:40:d9:b4:51:0d:da:ae:83:bb:eb:4c:e0:df:46:0a:24:84:
         02:a5:b1:5a:5d:80:f7:d7:93:ab:f9:4f:39:eb:86:94:61:05:
         43:14:77:2e:a8:fa:a5:10:68:e8:b9:df:b4:0c:ce:2a:d6:11:
         bc:8b:83:f2:c9:f7:f4:dc:14:be:71:31:42:28:cb:b2:8b:75:
         0a:bc:c2:47:3c:29:1d:37:25:7f:41:f2:38:32:3d:1a:77:15:
         6c:e7:5d:23:7f:f9:0b:31:8a:23:7c:dc:f2:c2:da:db:07:13:
         23:2b:1d:55:0d:b1:66:be:a8:2e:87:76:df:be:d6:72:04:bd:
         11:ad:3e:a0:05:3f:52:5d:bd:b5:91:d8:f3:2f:63:ae:bf:58:
         f1:b7:ad:4c:1e:82:51:ad:47:0e:bf:11:06:c6:07:9c:4d:8e:
         19:8a:4d:83:85:5c:92:41:3e:55:f8:c8:1b:c9:10:d8:22:75:
         8b:cc:6e:f2:ba:66:8d:91:7b:e8:03:06:44:bd:9b:36:b0:06:
         2d:d4:55:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org