Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/549709c1eae03ec94e496abae1191301ef5ea6b0.roa
File:                     549709c1eae03ec94e496abae1191301ef5ea6b0.roa (raw, json)
Hash identifier:          gkX/ETeD/nZBquX2GIwXSKZUU5fGAfET5HDUkEHxM+8=
Subject key identifier:   D8:E5:46:D7:E9:4F:01:D6:C2:DF:D1:6C:40:5A:3D:FD:C2:58:FF:5D
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       08019A
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/549709c1eae03ec94e496abae1191301ef5ea6b0.roa
Signing time:             Wed 12 Apr 2023 19:24:22 +0000
ROA not before:           Tue 11 Apr 2023 19:13:34 +0000
ROA not after:            Sat 12 Apr 2025 19:13:34 +0000
asID:                     17072
IP address blocks:        187.190.141.0/24 maxlen: 24
                          187.190.224.0/24 maxlen: 24
                          187.188.36.0/24 maxlen: 24
                          187.188.37.0/24 maxlen: 24
                          187.188.49.0/24 maxlen: 24
                          187.188.65.0/24 maxlen: 24
                          187.189.57.0/24 maxlen: 24
                          187.190.29.0/24 maxlen: 24
                          187.190.95.0/24 maxlen: 24
                          187.190.142.0/24 maxlen: 24
                          187.190.183.0/24 maxlen: 24
                          189.203.84.0/24 maxlen: 24
                          189.203.93.0/24 maxlen: 24
                          189.203.94.0/24 maxlen: 24
                          189.203.95.0/24 maxlen: 24
                          187.188.243.0/24 maxlen: 24
                          187.189.17.0/24 maxlen: 24
                          187.189.20.0/24 maxlen: 24
                          187.189.58.0/24 maxlen: 24
                          187.190.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524698 (0x8019a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Apr 11 19:13:34 2023 GMT
            Not After : Apr 12 19:13:34 2025 GMT
        Subject: CN=549709c1eae03ec94e496abae1191301ef5ea6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:68:44:1b:36:ce:fe:80:e7:90:af:5b:54:
                    a6:08:a7:85:40:0b:0d:94:cd:f9:81:b6:d7:78:99:
                    35:37:72:a6:0f:a0:c7:e5:15:87:bf:3e:6f:aa:a9:
                    72:4b:83:12:a2:8c:fc:af:d0:61:e0:9e:4a:98:3a:
                    3a:71:71:03:76:27:6e:8c:45:fb:4b:86:88:2b:5c:
                    1b:8c:62:a2:1c:55:ab:a1:65:31:ef:fe:73:d3:bb:
                    53:27:f1:03:a5:be:b8:fe:12:88:09:77:ea:5b:61:
                    c0:9e:eb:73:66:c8:2b:00:b9:a5:22:a3:ac:6c:5d:
                    68:44:d9:95:59:95:a2:60:ff:c5:f3:8a:bf:87:2d:
                    7b:06:8b:0c:64:89:eb:87:0a:f2:d6:bc:64:3b:65:
                    58:52:44:9c:89:6b:f7:58:50:d1:4e:92:4c:bb:61:
                    b9:6c:53:71:a7:8a:5e:2e:8d:3c:ce:c5:5a:98:2f:
                    09:51:23:0f:2b:87:92:fa:9c:bf:56:28:eb:8c:59:
                    cf:c9:8a:17:99:de:f8:b1:cb:c5:42:bd:74:4c:c2:
                    30:9d:9b:78:d9:73:e4:57:64:12:78:c9:d1:ae:bc:
                    cc:0a:42:e1:26:a5:df:a7:9f:13:de:ca:39:13:88:
                    9d:3a:f9:9d:b7:ba:2a:64:14:42:8b:d5:46:92:36:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E5:46:D7:E9:4F:01:D6:C2:DF:D1:6C:40:5A:3D:FD:C2:58:FF:5D
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/549709c1eae03ec94e496abae1191301ef5ea6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.188.36.0/23
                  187.188.49.0/24
                  187.188.65.0/24
                  187.188.243.0/24
                  187.189.17.0/24
                  187.189.20.0/24
                  187.189.57.0-187.189.58.255
                  187.190.29.0/24
                  187.190.95.0/24
                  187.190.141.0-187.190.142.255
                  187.190.182.0/23
                  187.190.224.0/24
                  189.203.84.0/24
                  189.203.93.0-189.203.95.255

    Signature Algorithm: sha256WithRSAEncryption
         17:f8:98:e3:10:70:f7:a5:f0:00:00:f1:fd:f4:d0:aa:83:e4:
         93:93:de:e4:82:c5:02:12:b2:8c:4b:7f:38:bc:0a:2f:7e:da:
         24:ec:c5:93:d2:34:a1:24:9b:4c:97:f6:d8:b2:21:4c:63:b0:
         8d:cd:70:7f:b4:cb:ff:7b:99:44:be:88:94:ed:95:fc:08:99:
         a4:4a:3a:1b:ff:17:cd:ea:dd:be:45:a1:fc:a7:80:1b:04:a1:
         1e:01:86:fa:ce:a8:a2:ad:7a:17:07:56:23:8d:1f:8f:4c:2d:
         b6:47:a1:0f:10:62:d3:3f:db:86:5c:4c:ec:a0:cd:4a:fa:fe:
         b2:7c:cc:66:f8:ce:e2:15:37:a8:2f:01:45:30:f0:11:3b:78:
         13:8c:f7:27:cf:68:ad:f1:f9:e2:62:de:8e:37:53:15:61:e5:
         86:46:9c:1a:db:e0:af:ca:67:8b:0f:10:d6:1f:62:40:58:b8:
         f9:43:8c:07:2b:e0:b1:09:21:6c:99:4a:73:89:89:d3:22:ef:
         b8:ba:6a:b8:c1:e6:ac:07:7f:7d:d6:5f:49:3c:30:22:26:04:
         cd:42:14:fa:10:f9:b2:9c:a1:be:72:01:e5:dc:11:81:10:d3:
         5c:20:6c:5e:b2:1f:09:9f:5a:01:40:dc:05:9b:7f:b2:56:6b:
         12:2c:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org