Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/04e2df38fed7624a6c1a071698d093e8126ce5e7.roa
File:                     04e2df38fed7624a6c1a071698d093e8126ce5e7.roa (raw, json)
Hash identifier:          2ByQCzi4TbFa1TrYtWL/UHpvP4SW9fekEhHIjl1qoQI=
Subject key identifier:   67:FD:24:7E:B0:92:0B:1A:F1:CC:2A:47:B8:9C:79:89:79:0B:DE:97
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0B53B8
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/04e2df38fed7624a6c1a071698d093e8126ce5e7.roa
Signing time:             Thu 10 Aug 2023 06:59:39 +0000
ROA not before:           Wed 09 Aug 2023 06:59:38 +0000
ROA not after:            Sun 10 Aug 2025 06:59:38 +0000
asID:                     22884
IP address blocks:        187.190.72.0/24 maxlen: 24
                          187.190.104.0/24 maxlen: 24
                          187.190.123.0/24 maxlen: 24
                          187.190.134.0/23 maxlen: 24
                          187.190.249.0/24 maxlen: 24
                          187.191.10.0/24 maxlen: 24
                          187.191.19.0/24 maxlen: 24
                          187.191.20.0/24 maxlen: 24
                          187.191.47.0/24 maxlen: 24
                          187.191.57.0/24 maxlen: 24
                          187.251.106.0/24 maxlen: 24
                          187.251.107.0/24 maxlen: 24
                          187.251.136.0/24 maxlen: 24
                          187.251.143.0/24 maxlen: 24
                          187.251.144.0/24 maxlen: 24
                          187.251.145.0/24 maxlen: 24
                          187.251.200.0/24 maxlen: 24
                          187.251.208.0/24 maxlen: 24
                          187.251.233.0/24 maxlen: 24
                          187.251.239.0/24 maxlen: 24
                          187.251.250.0/24 maxlen: 24
                          189.203.79.0/24 maxlen: 24
                          189.203.135.0/24 maxlen: 24
                          189.203.136.0/24 maxlen: 24
                          189.203.151.0/24 maxlen: 24
                          189.203.156.0/24 maxlen: 24
                          189.203.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742328 (0xb53b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Aug  9 06:59:38 2023 GMT
            Not After : Aug 10 06:59:38 2025 GMT
        Subject: CN=04e2df38fed7624a6c1a071698d093e8126ce5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:7d:88:8e:4b:b0:e3:54:06:fd:fa:13:21:
                    d6:b8:96:5d:fa:d3:88:d8:f8:d6:7d:c2:16:4c:25:
                    35:8f:f9:45:19:c3:e5:c1:79:55:1f:bf:f1:98:e0:
                    ab:07:e8:15:9f:4e:1b:52:07:69:3d:8c:97:6c:55:
                    44:fe:49:a6:51:b5:4e:3a:d5:50:60:04:eb:d6:c8:
                    07:d2:28:48:19:6a:ac:f0:20:d1:28:0b:8b:d9:ea:
                    50:e5:9a:3f:af:c3:2d:d8:da:04:35:95:48:a1:28:
                    b3:86:f3:44:f7:29:b9:98:c3:da:47:6e:ec:09:7c:
                    0a:93:4b:b9:6d:18:f0:b2:42:29:b3:05:22:71:ec:
                    69:69:a0:78:5d:e4:1b:bb:99:ce:96:b6:0a:68:89:
                    64:97:11:61:42:68:e8:91:f6:2a:de:5f:e6:a6:b0:
                    f7:81:f5:7c:e6:ce:36:ff:af:b1:26:77:be:15:36:
                    43:5d:64:67:7f:f3:c9:25:b5:c2:8c:2e:ee:a0:66:
                    75:df:fc:51:10:f4:46:87:28:2a:a6:71:8d:50:30:
                    7f:4d:39:eb:e8:b5:bc:e3:04:98:fa:0c:e6:da:0d:
                    aa:77:76:f8:ec:6d:2f:e2:91:0a:07:2d:d8:bc:6d:
                    27:4b:66:c9:3d:b4:8e:78:53:85:dc:bc:54:19:f2:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FD:24:7E:B0:92:0B:1A:F1:CC:2A:47:B8:9C:79:89:79:0B:DE:97
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/04e2df38fed7624a6c1a071698d093e8126ce5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.190.72.0/24
                  187.190.104.0/24
                  187.190.123.0/24
                  187.190.134.0/23
                  187.190.249.0/24
                  187.191.10.0/24
                  187.191.19.0-187.191.20.255
                  187.191.47.0/24
                  187.191.57.0/24
                  187.251.106.0/23
                  187.251.136.0/24
                  187.251.143.0-187.251.145.255
                  187.251.200.0/24
                  187.251.208.0/24
                  187.251.233.0/24
                  187.251.239.0/24
                  187.251.250.0/24
                  189.203.79.0/24
                  189.203.135.0-189.203.136.255
                  189.203.151.0/24
                  189.203.156.0/24
                  189.203.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:a7:03:48:f4:0a:37:e0:e2:8c:26:fd:07:ab:2f:08:80:
         44:64:76:01:10:95:0f:1f:1a:b4:5e:60:5a:21:b3:29:7b:f4:
         b9:a2:65:da:16:26:bf:4e:c2:9b:b5:0e:96:b8:4a:47:ec:70:
         d0:bf:5e:61:fc:bd:d0:67:50:22:a2:b4:e5:69:a7:e1:12:df:
         8a:28:9d:ab:7c:45:7c:1d:5b:68:49:5d:2f:c9:4c:9b:73:1c:
         1f:9a:ec:a1:ca:4b:ec:88:ba:ea:ba:e5:56:e7:3a:eb:94:16:
         9d:d8:57:6e:ed:ab:f4:f7:f2:97:19:fb:cc:e7:61:2c:cf:61:
         5f:4d:a8:6d:9a:8c:13:f4:88:8f:81:62:29:5e:a4:83:4d:a4:
         a8:1c:cc:57:3d:4c:6a:95:4b:78:5f:7d:84:da:ed:05:3f:21:
         bc:a0:32:3a:22:1f:08:e7:24:f2:0d:ff:9f:d4:67:1b:da:29:
         9e:f2:7d:78:e9:24:36:60:7a:de:a3:4c:4c:36:c2:ea:ab:83:
         7c:6a:e6:56:d9:c4:9a:b7:f5:f2:25:5b:03:2b:50:a5:80:85:
         a9:3e:9a:2d:85:3a:42:b2:97:60:cc:82:f2:68:92:17:c3:0c:
         58:b3:2c:e5:c8:7b:7f:aa:85:69:46:d9:63:89:ba:ad:aa:01:
         36:6b:03:e7
-----BEGIN CERTIFICATE-----
MIIF2zCCBMOgAwIBAgIDC1O4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMwODA5
MDY1OTM4WhcNMjUwODEwMDY1OTM4WjAzMTEwLwYDVQQDEygwNGUyZGYzOGZlZDc2
MjRhNmMxYTA3MTY5OGQwOTNlODEyNmNlNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi6J9iI5LsONUBv36EyHWuJZd+tOI2PjWfcIWTCU1j/lFGcPl
wXlVH7/xmOCrB+gVn04bUgdpPYyXbFVE/kmmUbVOOtVQYATr1sgH0ihIGWqs8CDR
KAuL2epQ5Zo/r8Mt2NoENZVIoSizhvNE9ym5mMPaR27sCXwKk0u5bRjwskIpswUi
cexpaaB4XeQbu5nOlrYKaIlklxFhQmjokfYq3l/mprD3gfV85s42/6+xJne+FTZD
XWRnf/PJJbXCjC7uoGZ13/xREPRGhygqpnGNUDB/TTnr6LW84wSY+gzm2g2qd3b4
7G0v4pEKBy3YvG0nS2bJPbSOeFOF3LxUGfJiLQIDAQABo4IC9jCCAvIwHQYDVR0O
BBYEFGf9JH6wkgsa8cwqR7iceYl5C96XMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzA0ZTJkZjM4ZmVkNzYyNGE2YzFhMDcxNjk4ZDA5M2U4MTI2Y2U1ZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBuQYIKwYBBQUHAQcBAf8E
gakwgaYwgaMEAgABMIGcAwQAu75IAwQAu75oAwQAu757AwQBu76GAwQAu775AwQA
u78KMAwDBAC7vxMDBAC7vxQDBAC7vy8DBAC7vzkDBAG7+2oDBAC7+4gwDAMEALv7
jwMEAbv7kAMEALv7yAMEALv70AMEALv76QMEALv77wMEALv7+gMEAL3LTzAMAwQA
vcuHAwQAvcuIAwQAvcuXAwQAvcucAwQAvcv5MA0GCSqGSIb3DQEBCwUAA4IBAQCf
FacDSPQKN+DijCb9B6svCIBEZHYBEJUPHxq0XmBaIbMpe/S5omXaFia/TsKbtQ6W
uEpH7HDQv15h/L3QZ1AiorTlaafhEt+KKJ2rfEV8HVtoSV0vyUybcxwfmuyhykvs
iLrquuVW5zrrlBad2Fdu7av09/KXGfvM52Esz2FfTahtmowT9IiPgWIpXqSDTaSo
HMxXPUxqlUt4X32E2u0FPyG8oDI6Ih8I5yTyDf+f1Gcb2ime8n146SQ2YHreo0xM
NsLqq4N8auZW2cSat/XyJVsDK1ClgIWpPpothTpCspdgzILyaJIXwwxYsyzlyHt/
qoVpRtljibqtqgE2awPn
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org