Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/457d17ba7e469c594bd3ebd348dae8fad67ef03d.roa
File:                     457d17ba7e469c594bd3ebd348dae8fad67ef03d.roa (raw, json)
Hash identifier:          +C7blt3+f/HxQ7wZq5tIu3xRtfvSK3NYshvB3GrB4Vk=
Subject key identifier:   F7:92:4A:B3:56:9E:2D:F7:63:B5:F6:24:9B:15:DB:9D:0C:76:81:A3
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0D3AE2
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/457d17ba7e469c594bd3ebd348dae8fad67ef03d.roa
Signing time:             Wed 11 Oct 2023 19:12:11 +0000
ROA not before:           Tue 10 Oct 2023 19:12:11 +0000
ROA not after:            Sat 11 Oct 2025 19:12:11 +0000
asID:                     22884
IP address blocks:        187.190.107.0/24 maxlen: 24
                          187.190.105.0/24 maxlen: 24
                          187.190.102.0/24 maxlen: 24
                          187.190.82.0/24 maxlen: 24
                          187.190.81.0/24 maxlen: 24
                          187.190.80.0/24 maxlen: 24
                          186.96.0.0/24 maxlen: 24
                          187.190.74.0/24 maxlen: 24
                          187.190.62.0/24 maxlen: 24
                          187.190.50.0/24 maxlen: 24
                          186.96.10.0/24 maxlen: 24
                          187.189.244.0/24 maxlen: 24
                          187.189.237.0/24 maxlen: 24
                          186.96.16.0/24 maxlen: 24
                          187.189.220.0/24 maxlen: 24
                          187.189.219.0/24 maxlen: 24
                          187.189.218.0/24 maxlen: 24
                          187.189.211.0/24 maxlen: 24
                          187.189.202.0/24 maxlen: 24
                          187.189.183.0/24 maxlen: 24
                          187.189.180.0/24 maxlen: 24
                          187.189.178.0/24 maxlen: 24
                          186.96.27.0/24 maxlen: 24
                          186.96.29.0/24 maxlen: 24
                          187.189.177.0/24 maxlen: 24
                          187.189.170.0/24 maxlen: 24
                          187.189.159.0/24 maxlen: 24
                          187.189.153.0/24 maxlen: 24
                          186.96.38.0/24 maxlen: 24
                          187.189.144.0/24 maxlen: 24
                          187.189.140.0/24 maxlen: 24
                          187.189.134.0/24 maxlen: 24
                          187.189.133.0/24 maxlen: 24
                          187.189.132.0/24 maxlen: 24
                          187.189.131.0/24 maxlen: 24
                          187.189.121.0/24 maxlen: 24
                          187.189.117.0/24 maxlen: 24
                          187.189.100.0/24 maxlen: 24
                          187.189.99.0/24 maxlen: 24
                          187.189.97.0/24 maxlen: 24
                          186.96.54.0/24 maxlen: 24
                          187.189.96.0/24 maxlen: 24
                          186.96.57.0/24 maxlen: 24
                          187.189.94.0/24 maxlen: 24
                          187.189.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867042 (0xd3ae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 10 19:12:11 2023 GMT
            Not After : Oct 11 19:12:11 2025 GMT
        Subject: CN=457d17ba7e469c594bd3ebd348dae8fad67ef03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:f0:05:63:a8:5d:37:22:2e:49:86:59:d8:
                    2b:01:af:c2:fd:d1:bb:b6:5f:de:85:e6:23:2f:d7:
                    41:05:e8:77:d7:ea:2b:13:e8:ea:f8:e9:a4:81:c1:
                    25:86:6e:69:f3:3d:86:58:f6:6d:42:ee:db:da:7f:
                    50:3b:86:3b:0f:02:d8:bf:82:00:0f:28:76:be:13:
                    2c:22:6d:1c:f2:4d:36:1b:e0:f8:13:27:2f:63:e3:
                    9d:83:94:f1:85:39:4f:9c:f4:19:c4:ab:8a:76:bf:
                    8f:36:51:d8:db:36:1d:22:1e:2b:81:09:8f:1c:cd:
                    91:49:21:29:c5:11:dc:c7:a5:9e:74:f2:2d:b5:9f:
                    4d:d0:0a:37:22:68:7d:62:b7:7a:1b:4c:99:21:1f:
                    ae:32:d2:25:e4:67:3e:d0:a2:f7:6a:04:4d:bc:a9:
                    42:ff:fc:da:97:40:5f:c9:06:15:da:49:03:6f:4e:
                    9a:a2:75:58:f6:55:08:58:cb:2b:50:e7:1a:e5:fb:
                    20:4b:00:ae:dc:69:ba:f1:ee:29:07:34:12:47:bd:
                    69:43:7f:61:2c:8f:be:fd:3a:ad:41:c0:1a:b5:61:
                    a3:67:88:45:08:66:ff:90:d0:31:97:39:96:81:d3:
                    18:5a:7b:0f:22:10:38:2a:8a:b4:df:9c:d5:1f:06:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:92:4A:B3:56:9E:2D:F7:63:B5:F6:24:9B:15:DB:9D:0C:76:81:A3
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/457d17ba7e469c594bd3ebd348dae8fad67ef03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.0.0/24
                  186.96.10.0/24
                  186.96.16.0/24
                  186.96.27.0/24
                  186.96.29.0/24
                  186.96.38.0/24
                  186.96.54.0/24
                  186.96.57.0/24
                  187.189.86.0/24
                  187.189.94.0/24
                  187.189.96.0/23
                  187.189.99.0-187.189.100.255
                  187.189.117.0/24
                  187.189.121.0/24
                  187.189.131.0-187.189.134.255
                  187.189.140.0/24
                  187.189.144.0/24
                  187.189.153.0/24
                  187.189.159.0/24
                  187.189.170.0/24
                  187.189.177.0-187.189.178.255
                  187.189.180.0/24
                  187.189.183.0/24
                  187.189.202.0/24
                  187.189.211.0/24
                  187.189.218.0-187.189.220.255
                  187.189.237.0/24
                  187.189.244.0/24
                  187.190.50.0/24
                  187.190.62.0/24
                  187.190.74.0/24
                  187.190.80.0-187.190.82.255
                  187.190.102.0/24
                  187.190.105.0/24
                  187.190.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:4a:75:e9:db:f1:cd:df:b0:cc:9a:29:69:20:a7:ec:ae:64:
         a1:b6:d6:04:8b:23:68:1d:df:60:4c:bc:14:f4:f1:47:17:24:
         8f:a0:2c:8d:d1:7d:98:12:25:9a:33:45:21:f3:8b:2a:f6:40:
         7c:48:31:8e:48:b4:66:36:f8:98:3e:8c:01:5d:ed:e0:80:e9:
         2f:6f:c0:79:10:38:06:c3:5b:b9:52:05:bd:b5:9c:f4:9d:67:
         f7:e8:96:d3:51:af:ea:10:b4:f9:1c:ab:03:fd:db:b0:4b:1a:
         4f:60:b2:ff:08:a6:7b:7e:28:59:9e:57:8e:64:ef:c1:e7:d2:
         3a:df:98:c0:06:81:5e:83:87:6b:ab:0c:44:b3:bf:0c:7e:65:
         08:64:13:6d:30:98:a4:97:5d:6c:81:9b:72:c1:a3:47:32:d9:
         d5:32:f1:c2:4e:29:d7:41:a0:56:46:df:ad:eb:45:f8:f3:5e:
         40:da:7d:d6:ac:0a:6c:6b:a7:bc:3f:9c:67:a4:ff:58:0a:2c:
         f7:a2:36:64:74:af:89:54:97:a1:f3:1a:c2:67:34:37:03:08:
         eb:df:23:4d:83:e8:4b:67:dc:cd:f1:3d:3a:bb:3d:92:96:4d:
         c5:38:cc:d9:3f:2e:a4:f0:3a:8b:2d:00:3f:69:80:e0:ef:d8:
         e2:ab:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org