Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/3a6655e7c3312ce83849f0c034d3c8dd2b2b1449.roa
File:                     3a6655e7c3312ce83849f0c034d3c8dd2b2b1449.roa (raw, json)
Hash identifier:          dFe8QRSuoHSLIoW+TIxsxiA+8ChaBBFhRCdomOra0ts=
Subject key identifier:   3A:F2:30:B6:03:04:40:6D:8E:3A:FF:77:EC:93:54:B1:CF:23:81:B5
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0D5D72
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/3a6655e7c3312ce83849f0c034d3c8dd2b2b1449.roa
Signing time:             Wed 11 Oct 2023 22:07:35 +0000
ROA not before:           Tue 10 Oct 2023 22:07:35 +0000
ROA not after:            Sat 11 Oct 2025 22:07:35 +0000
asID:                     22884
IP address blocks:        187.188.146.0/24 maxlen: 24
                          187.188.145.0/24 maxlen: 24
                          187.188.143.0/24 maxlen: 24
                          187.188.142.0/24 maxlen: 24
                          187.188.141.0/24 maxlen: 24
                          187.188.78.0/24 maxlen: 24
                          187.188.71.0/24 maxlen: 24
                          187.188.70.0/24 maxlen: 24
                          187.188.61.0/24 maxlen: 24
                          187.188.50.0/24 maxlen: 24
                          187.188.48.0/24 maxlen: 24
                          187.188.47.0/24 maxlen: 24
                          187.188.46.0/24 maxlen: 24
                          187.188.45.0/24 maxlen: 24
                          187.188.44.0/24 maxlen: 24
                          187.188.43.0/24 maxlen: 24
                          187.188.17.0/24 maxlen: 24
                          187.188.5.0/24 maxlen: 24
                          187.188.0.0/24 maxlen: 24
                          186.96.177.0/24 maxlen: 24
                          186.96.176.0/24 maxlen: 24
                          186.96.19.0/24 maxlen: 24
                          186.96.30.0/24 maxlen: 24
                          186.96.59.0/24 maxlen: 24
                          186.96.132.0/24 maxlen: 24
                          186.96.133.0/24 maxlen: 24
                          186.96.141.0/24 maxlen: 24
                          186.96.153.0/24 maxlen: 24
                          186.96.162.0/24 maxlen: 24
                          186.96.168.0/24 maxlen: 24
                          186.96.169.0/24 maxlen: 24
                          186.96.174.0/24 maxlen: 24
                          186.96.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875890 (0xd5d72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 10 22:07:35 2023 GMT
            Not After : Oct 11 22:07:35 2025 GMT
        Subject: CN=3a6655e7c3312ce83849f0c034d3c8dd2b2b1449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d9:1a:68:07:13:7f:a9:5e:18:43:3a:5a:5d:
                    4c:4f:7f:90:ce:bf:12:bb:02:df:8b:fe:c2:7d:5b:
                    01:f6:3d:1e:72:16:87:1c:e2:8b:85:5a:55:b0:e8:
                    00:1b:d3:60:f2:f8:a1:f3:f3:38:e6:ba:6f:fb:e7:
                    2a:99:37:37:66:9a:1b:77:6c:c8:61:0b:12:21:67:
                    4e:67:87:c9:fc:4e:a2:aa:28:c7:dc:26:da:76:f9:
                    fc:39:e8:21:25:b3:c5:73:b8:00:2d:70:6f:6b:3e:
                    33:ef:02:2a:67:af:18:3d:e8:a4:d7:f0:e9:1b:95:
                    f0:3f:4b:ed:bb:f3:31:77:38:37:88:7e:23:66:f8:
                    2c:ec:2e:64:02:7d:ea:3e:7a:6d:da:37:ee:74:5b:
                    02:e8:71:96:82:82:5f:b8:1f:c7:ad:eb:cc:13:d0:
                    89:c5:55:2e:49:b0:24:7f:81:6e:5c:60:b4:f2:18:
                    18:27:ca:93:fc:68:33:0d:be:3c:2a:52:95:73:ec:
                    98:41:bb:2e:e7:fb:16:12:2e:64:df:d1:7f:68:b0:
                    ab:5f:03:2a:e1:e2:85:11:44:95:45:76:53:99:8c:
                    d3:19:d9:17:0d:e5:c0:bc:40:53:75:91:f3:90:96:
                    75:8f:36:97:1d:3a:55:8d:ad:f5:f9:49:f7:f9:e0:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F2:30:B6:03:04:40:6D:8E:3A:FF:77:EC:93:54:B1:CF:23:81:B5
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/3a6655e7c3312ce83849f0c034d3c8dd2b2b1449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.19.0/24
                  186.96.30.0/24
                  186.96.59.0/24
                  186.96.132.0/23
                  186.96.141.0/24
                  186.96.153.0/24
                  186.96.162.0/24
                  186.96.168.0/23
                  186.96.174.0-186.96.177.255
                  187.188.0.0/24
                  187.188.5.0/24
                  187.188.17.0/24
                  187.188.43.0-187.188.48.255
                  187.188.50.0/24
                  187.188.61.0/24
                  187.188.70.0/23
                  187.188.78.0/24
                  187.188.141.0-187.188.143.255
                  187.188.145.0-187.188.146.255

    Signature Algorithm: sha256WithRSAEncryption
         9b:ae:6f:d3:f4:cb:da:97:18:fb:9a:71:44:48:7e:4c:ce:06:
         53:13:82:c5:46:55:bc:8a:f4:c6:58:a1:16:11:d5:66:f2:50:
         a7:11:52:a7:1c:91:7e:62:0a:45:d1:10:2d:85:f3:90:0e:f4:
         94:cf:5b:70:92:29:ba:2a:3c:a8:30:a8:0a:5c:99:00:d9:35:
         41:96:8c:55:18:48:56:16:89:42:df:d7:e9:25:bd:9e:2c:03:
         cf:78:94:6c:f0:85:85:a6:75:0c:a7:4f:89:7f:a5:4b:55:53:
         d7:21:0e:65:fb:ec:bf:bb:d4:0f:80:97:6f:78:45:67:36:89:
         b9:58:59:e3:c1:9d:ab:d7:98:4c:89:82:95:fa:12:35:6d:6d:
         11:05:85:2a:8a:c2:35:31:10:d9:0c:70:de:2f:e8:b1:1b:ea:
         94:0f:c7:d6:f3:a9:f5:ab:f9:a6:4c:97:50:0d:8d:45:92:7c:
         3a:b6:09:d3:6f:84:c4:33:ca:b3:08:62:46:ea:66:1d:65:4b:
         3e:89:2d:aa:2f:b0:d3:e1:f5:b5:85:04:7a:b7:ff:6c:84:a8:
         5a:bc:c7:b7:41:81:12:29:ea:4f:bf:d9:c4:27:7a:2a:64:ff:
         b4:11:bd:d4:4d:19:2b:d0:3b:e8:2e:42:2e:de:f0:90:5b:54:
         2c:1e:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org