Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ffcde4543f7ea4a08f95457405b0e798cec821b1.roa
File:                     ffcde4543f7ea4a08f95457405b0e798cec821b1.roa (raw, json)
Hash identifier:          YNi8sb1cg42yBOKJAXvh4rx4/bXe1H8h5tOD5yNJ1OE=
Subject key identifier:   07:E9:77:52:81:73:F1:DD:78:8B:07:14:9C:30:82:F3:59:73:2F:CF
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E7D44
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ffcde4543f7ea4a08f95457405b0e798cec821b1.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949572 (0xe7d44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=ffcde4543f7ea4a08f95457405b0e798cec821b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:1b:73:46:2e:9e:7a:9b:a2:0c:f3:81:95:
                    46:9a:97:6c:d6:28:7d:45:7d:13:82:73:92:3d:3a:
                    61:b0:44:d2:fc:0c:93:54:f0:99:c8:d3:5a:36:22:
                    14:ea:00:84:65:a6:c0:a3:e3:f0:3d:ec:5d:c8:fb:
                    2d:a7:39:98:ec:45:99:5c:eb:2d:f7:ce:f2:db:ed:
                    1a:a9:f4:2e:44:9b:b7:90:e1:3b:19:fa:50:d8:4b:
                    4d:49:88:d0:5d:56:6d:50:e7:40:11:d0:4b:2e:80:
                    9a:ea:ce:11:d1:24:33:a7:86:2e:83:05:de:78:e6:
                    10:f1:3f:b0:71:d0:22:e1:86:e1:21:95:80:95:77:
                    d4:b0:53:09:79:0d:5a:62:e4:c5:e0:45:f6:61:b4:
                    44:16:43:73:c7:ab:6f:98:b9:e1:e4:f0:9c:a0:69:
                    de:4d:53:c1:4e:3a:47:e0:b7:b6:84:7e:06:34:df:
                    92:7b:dd:94:da:e7:5a:3e:2c:00:7e:a8:6c:61:ee:
                    91:85:db:b1:c9:f9:e9:03:b8:89:42:a0:c0:c2:f5:
                    41:d9:b3:b8:b5:50:b2:fe:e6:32:4e:20:14:49:ba:
                    dd:3e:62:bd:7a:ed:fa:d4:42:36:6e:73:b6:69:93:
                    cb:8a:bf:ab:ce:65:90:5f:ef:3c:38:50:8e:45:7d:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E9:77:52:81:73:F1:DD:78:8B:07:14:9C:30:82:F3:59:73:2F:CF
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ffcde4543f7ea4a08f95457405b0e798cec821b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:5d:4c:4e:28:b1:bd:f4:69:f4:0c:1a:45:54:24:bc:a1:21:
         53:76:07:06:b6:1c:49:18:61:9a:a2:78:38:43:6f:02:de:c2:
         25:9c:80:c4:8e:c8:57:87:70:5b:9b:2c:e7:20:70:d2:ef:1f:
         10:56:60:b0:73:33:ce:02:9b:81:54:55:74:33:42:62:4f:fc:
         d1:87:e5:bb:47:ad:92:ff:68:99:69:ef:52:34:2e:fe:24:41:
         3a:c0:31:14:2a:f2:c9:89:ac:c7:2d:a2:0c:ff:d0:af:90:a1:
         f2:11:99:05:64:c0:60:4d:92:f5:d3:d8:88:ab:11:dc:8a:19:
         74:00:a5:b4:a3:dc:f0:54:93:11:05:c0:57:e6:1a:ef:80:98:
         4a:64:11:14:02:a2:c2:dc:d1:ab:27:a0:4d:aa:57:84:60:24:
         77:67:4f:50:54:51:7e:e5:a5:e7:7e:80:52:a9:a1:f9:76:cf:
         7f:e1:8b:c0:fb:8d:34:98:3c:f1:a3:f9:e8:eb:d8:53:d2:c7:
         b2:fb:27:76:fd:4f:d0:bc:82:c9:98:ee:8e:b5:4a:44:4f:c8:
         cc:03:fe:fb:a1:da:84:e5:75:87:56:a4:cc:25:36:68:4d:ad:
         fb:f3:b3:93:29:4a:77:a2:a2:cf:93:06:6c:43:5a:0c:a4:e6:
         8e:c3:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org