Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/1e40fd89cad7284cbaff8712923007d48acaed48.roa
File:                     1e40fd89cad7284cbaff8712923007d48acaed48.roa (raw, json)
Hash identifier:          4ab42ICFoY+qk2w2aEDNExoYeLoBwzipcIwyysyKOyE=
Subject key identifier:   95:AE:AB:8A:BF:13:6F:2B:E1:45:9D:70:37:73:BD:AA:14:37:DD:C3
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0D8A1E
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/1e40fd89cad7284cbaff8712923007d48acaed48.roa
Signing time:             Wed 18 Oct 2023 17:59:09 +0000
ROA not before:           Tue 17 Oct 2023 17:59:09 +0000
ROA not after:            Sat 18 Oct 2025 17:59:09 +0000
asID:                     22884
IP address blocks:        187.251.124.0/24 maxlen: 24
                          187.251.127.0/24 maxlen: 24
                          187.251.207.0/24 maxlen: 24
                          187.251.213.0/24 maxlen: 24
                          187.251.215.0/24 maxlen: 24
                          187.251.216.0/24 maxlen: 24
                          187.251.236.0/24 maxlen: 24
                          187.251.241.0/24 maxlen: 24
                          187.251.242.0/24 maxlen: 24
                          189.203.11.0/24 maxlen: 24
                          189.203.24.0/24 maxlen: 24
                          189.203.67.0/24 maxlen: 24
                          189.203.68.0/24 maxlen: 24
                          189.203.166.0/24 maxlen: 24
                          189.203.167.0/24 maxlen: 24
                          189.203.169.0/24 maxlen: 24
                          189.203.170.0/24 maxlen: 24
                          189.203.173.0/24 maxlen: 24
                          189.203.181.0/24 maxlen: 24
                          189.203.199.0/24 maxlen: 24
                          189.203.200.0/24 maxlen: 24
                          189.203.219.0/24 maxlen: 24
                          189.203.222.0/24 maxlen: 24
                          189.203.223.0/24 maxlen: 24
                          189.203.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887326 (0xd8a1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 17 17:59:09 2023 GMT
            Not After : Oct 18 17:59:09 2025 GMT
        Subject: CN=1e40fd89cad7284cbaff8712923007d48acaed48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:08:73:bb:74:64:92:78:6a:ac:3f:18:9c:aa:
                    a5:c6:b5:d5:3c:a0:b6:6e:e4:91:b3:db:a9:18:e1:
                    20:27:06:3d:d4:03:0f:d2:41:e1:5f:2d:9d:bb:1d:
                    0f:c9:e6:c0:bc:d3:cb:b5:95:59:10:de:a1:f7:31:
                    e4:1b:48:19:d5:00:a8:b9:03:83:bb:3d:0c:9d:75:
                    25:33:36:ea:a9:5b:01:55:c8:12:72:7a:f2:d5:6e:
                    f3:0c:6e:6a:a4:4b:4f:48:d4:ee:7e:c4:66:6e:8d:
                    5a:93:85:88:c2:04:9b:55:1b:d9:92:64:99:9e:b4:
                    e4:bb:aa:96:2d:a7:8e:67:24:36:38:b3:f5:f3:80:
                    e3:77:2b:80:f4:56:34:08:5c:43:d3:c8:92:d6:63:
                    9e:de:4c:c1:20:0f:94:c5:ac:5a:e4:58:98:57:72:
                    4e:85:a4:4b:09:38:02:e5:36:18:d2:d8:f1:a0:71:
                    b0:f6:b9:fb:10:9f:22:b1:e0:16:cc:47:cf:a9:73:
                    bd:b4:a9:23:48:24:b4:77:e2:ae:3a:8e:a3:05:7a:
                    7d:3b:75:68:5a:05:df:9a:16:5e:b7:11:0c:40:e5:
                    b6:19:3a:b2:a1:86:d6:9a:66:14:14:28:fe:7b:0d:
                    e5:9d:fd:f6:2e:85:d8:53:64:0a:ef:65:12:09:87:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:AB:8A:BF:13:6F:2B:E1:45:9D:70:37:73:BD:AA:14:37:DD:C3
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/1e40fd89cad7284cbaff8712923007d48acaed48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.124.0/24
                  187.251.127.0/24
                  187.251.207.0/24
                  187.251.213.0/24
                  187.251.215.0-187.251.216.255
                  187.251.236.0/24
                  187.251.241.0-187.251.242.255
                  189.203.11.0/24
                  189.203.24.0/24
                  189.203.67.0-189.203.68.255
                  189.203.166.0/23
                  189.203.169.0-189.203.170.255
                  189.203.173.0/24
                  189.203.181.0/24
                  189.203.199.0-189.203.200.255
                  189.203.219.0/24
                  189.203.222.0/23
                  189.203.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:2d:d8:f9:f7:a9:0f:d2:8b:b6:24:13:59:7f:97:58:01:
         fd:70:fe:11:a1:71:6d:e4:20:22:e0:24:f4:16:cd:fb:89:be:
         f6:0a:4e:ee:7d:87:2c:ac:aa:9a:4d:b3:b4:e2:a7:8b:e2:4b:
         00:90:c9:c7:5d:d5:47:12:8b:7c:cf:a4:b4:5b:96:96:52:d2:
         01:6e:5a:60:88:2f:67:ea:92:e2:bc:06:18:40:01:50:f3:8d:
         97:26:bd:8c:95:ca:6c:9a:22:89:09:7e:5f:2e:0c:9a:ad:56:
         bb:39:9f:5b:ef:2c:3e:e0:62:8c:39:b7:e8:51:3f:58:6f:77:
         93:08:76:91:4c:61:cb:8a:8b:6d:0b:ed:d4:9b:70:44:eb:cf:
         06:62:f1:28:e2:78:70:22:20:c5:9c:7e:4a:2b:35:ba:49:cb:
         e1:29:7b:4a:26:8c:b5:1b:30:5c:43:53:33:96:3b:bb:e8:4f:
         7f:41:bb:42:e1:06:79:62:37:50:0d:f0:54:87:9f:d7:87:ba:
         27:54:54:61:44:88:f2:1d:f4:c8:67:58:37:43:83:97:cf:46:
         8c:99:2c:4b:cc:7f:57:b8:c7:bc:ce:42:19:e0:3d:12:a1:a8:
         2e:7d:3b:6b:93:c3:af:8c:b4:d4:1b:24:30:90:a9:1d:f2:75:
         9f:64:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org