Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ffac70f8064053de96cb934e8492627540088095.roa
File:                     ffac70f8064053de96cb934e8492627540088095.roa (raw, json)
Hash identifier:          B0I05p0O9SSJnbN0o0/Dcsql5G6Swmfv6PYgeMN9j0g=
Subject key identifier:   AB:B4:10:17:C7:57:4F:28:C1:EB:C2:F8:46:94:D1:75:67:34:94:7C
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       15BAE4
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ffac70f8064053de96cb934e8492627540088095.roa
Signing time:             Wed 29 Dec 2021 17:53:47 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424100 (0x15bae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ffac70f8064053de96cb934e8492627540088095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:7d:73:86:fe:f4:01:a7:71:80:da:db:98:
                    5d:e6:db:a9:65:6b:2c:36:a5:f1:24:96:32:ac:6f:
                    1c:32:4b:1f:6d:90:65:b1:90:cc:3d:ba:b1:00:a8:
                    0a:4c:5f:94:f8:8f:fd:a8:5b:e6:7a:87:35:49:d5:
                    8d:67:b1:c6:9d:2a:51:6d:29:80:ab:60:3c:67:af:
                    6c:0f:7a:d0:fd:f8:5f:f2:4f:89:34:aa:40:9f:1c:
                    51:1c:fb:de:b5:c4:9e:61:54:3e:ab:a1:f7:cd:c8:
                    aa:a7:c5:05:2f:67:59:1a:9f:e8:4a:63:fa:f5:b8:
                    00:99:4d:2a:bc:f1:90:8d:bd:49:2c:a9:f2:c5:d1:
                    3f:c9:b4:6a:d0:0e:65:10:ce:f2:15:a2:32:17:59:
                    74:37:43:c5:b9:1d:ca:24:6e:ac:1d:5b:04:9f:93:
                    56:eb:3a:96:ee:7f:f9:0d:e3:fa:15:01:51:c7:be:
                    54:4f:cf:02:1f:0b:3d:2d:f5:12:c9:73:3a:53:f6:
                    ae:87:dc:0a:9c:89:24:e7:b7:2a:0c:a4:80:69:9c:
                    da:ec:3e:cd:b9:e2:8d:55:15:60:5f:de:9d:a4:35:
                    49:f0:c9:4a:62:59:85:91:1e:57:e1:81:49:33:8f:
                    60:9a:de:46:98:36:7a:f5:3f:5c:fe:92:1f:5e:0f:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B4:10:17:C7:57:4F:28:C1:EB:C2:F8:46:94:D1:75:67:34:94:7C
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ffac70f8064053de96cb934e8492627540088095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:9c:3f:f0:1d:02:d1:3c:4d:8a:28:70:5f:a9:a4:c3:c9:4b:
         bd:0a:d1:93:7f:fc:b2:a0:6e:89:cf:a6:f3:3d:e2:43:c9:af:
         47:83:87:2a:6a:ef:92:af:97:9a:c4:aa:7b:94:b3:73:92:4f:
         cc:79:a7:03:a7:69:8a:27:c8:9d:18:13:d1:45:53:47:4d:33:
         6b:0a:73:ac:f9:b4:fb:25:37:df:c8:30:a5:93:b2:5b:91:b4:
         f5:8a:d8:ad:57:8b:e8:34:5a:f5:07:da:9b:7b:a8:b4:7d:52:
         20:ce:eb:64:df:ca:9f:6f:d0:62:4b:8d:5b:68:86:b6:ce:1d:
         cb:0b:a0:c4:f4:72:2e:3c:7e:ee:1a:d6:1d:9c:31:bc:28:c4:
         5b:2b:0f:c2:78:b0:4a:b9:0a:73:db:df:40:d9:59:c3:dd:03:
         f3:96:4c:e3:ce:4b:21:1d:09:8a:80:f4:33:dc:67:bf:70:67:
         ce:ff:23:ec:4a:09:01:ce:a2:5d:86:44:03:60:48:e5:e5:62:
         23:3a:6e:5a:c8:08:b2:21:dd:3f:db:ed:1b:79:cc:53:af:2b:
         15:4d:07:a6:9b:d4:6f:41:dd:74:2d:e5:d8:fb:f1:93:2f:f6:
         d3:79:ad:db:a0:2d:82:07:d8:17:12:0e:d3:12:01:d2:61:91:
         e1:b0:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org