Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/5e6b5caedd9ded5bc11ffbd23577d8c92de1c926.roa
File:                     5e6b5caedd9ded5bc11ffbd23577d8c92de1c926.roa (raw, json)
Hash identifier:          R2ylbJYCywwqrhRLrtj7HtSw7mX48womLHUFCLSgWdE=
Subject key identifier:   82:3E:22:67:09:B1:C1:2E:C8:41:35:FB:59:DB:91:BA:85:30:4E:7F
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0D3E89
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/5e6b5caedd9ded5bc11ffbd23577d8c92de1c926.roa
Signing time:             Wed 11 Oct 2023 19:24:46 +0000
ROA not before:           Tue 10 Oct 2023 19:24:46 +0000
ROA not after:            Sat 11 Oct 2025 19:24:46 +0000
asID:                     22884
IP address blocks:        187.189.85.0/24 maxlen: 24
                          187.189.37.0/24 maxlen: 24
                          187.189.27.0/24 maxlen: 24
                          187.189.22.0/24 maxlen: 24
                          187.189.14.0/24 maxlen: 24
                          187.189.8.0/24 maxlen: 24
                          186.96.139.0/24 maxlen: 24
                          187.189.7.0/24 maxlen: 24
                          187.189.6.0/24 maxlen: 24
                          187.189.5.0/24 maxlen: 24
                          187.189.4.0/24 maxlen: 24
                          187.189.3.0/24 maxlen: 24
                          187.189.2.0/24 maxlen: 24
                          187.189.1.0/24 maxlen: 24
                          187.188.247.0/24 maxlen: 24
                          187.188.245.0/24 maxlen: 24
                          186.96.152.0/24 maxlen: 24
                          187.188.239.0/24 maxlen: 24
                          187.188.237.0/24 maxlen: 24
                          187.188.236.0/24 maxlen: 24
                          187.188.235.0/24 maxlen: 24
                          187.188.231.0/24 maxlen: 24
                          187.188.215.0/24 maxlen: 24
                          187.188.211.0/24 maxlen: 24
                          187.188.209.0/24 maxlen: 24
                          187.188.206.0/24 maxlen: 24
                          187.188.203.0/24 maxlen: 24
                          186.96.171.0/24 maxlen: 24
                          187.188.202.0/24 maxlen: 24
                          187.188.193.0/24 maxlen: 24
                          187.188.188.0/24 maxlen: 24
                          187.188.187.0/24 maxlen: 24
                          187.188.185.0/24 maxlen: 24
                          187.188.183.0/24 maxlen: 24
                          187.188.172.0/24 maxlen: 24
                          187.188.171.0/24 maxlen: 24
                          187.188.169.0/24 maxlen: 24
                          187.188.168.0/24 maxlen: 24
                          187.188.167.0/24 maxlen: 24
                          187.188.166.0/24 maxlen: 24
                          187.188.164.0/24 maxlen: 24
                          187.188.133.0/24 maxlen: 24
                          186.96.189.0/24 maxlen: 24
                          187.188.132.0/24 maxlen: 24
                          187.188.131.0/24 maxlen: 24
                          187.188.130.0/24 maxlen: 24
                          187.188.129.0/24 maxlen: 24
                          187.188.128.0/24 maxlen: 24
                          187.188.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867977 (0xd3e89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 10 19:24:46 2023 GMT
            Not After : Oct 11 19:24:46 2025 GMT
        Subject: CN=5e6b5caedd9ded5bc11ffbd23577d8c92de1c926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:25:0c:d6:4b:60:c7:22:d7:f5:a3:87:5b:
                    60:ee:97:3c:dd:a5:06:e3:1e:0a:fb:d4:9c:1f:22:
                    71:aa:12:d3:e5:41:9f:21:64:a7:3b:c2:fd:b9:19:
                    bd:30:20:59:72:38:dc:9b:8e:1d:ce:df:68:51:5a:
                    ea:c8:59:fa:64:a3:a6:ad:11:92:7f:8c:77:28:5c:
                    f2:53:99:35:1a:83:c5:22:0e:f9:e2:c6:31:47:d9:
                    b5:89:cf:e7:7e:07:9b:1e:36:ff:ea:35:69:51:7c:
                    60:29:c6:be:bf:75:6b:b1:00:2d:04:33:c5:15:d2:
                    21:10:ee:01:ba:48:f6:1f:c1:b1:ed:47:98:1b:55:
                    af:19:77:d5:a7:4c:48:40:3a:f8:11:60:75:f6:d6:
                    ab:58:ed:99:b3:2d:80:57:8d:dd:6e:91:b5:35:93:
                    28:db:b9:e2:88:e3:4c:60:d3:4d:41:f3:57:49:1a:
                    a5:a5:dd:06:c3:4c:39:20:64:05:16:4b:8c:7c:56:
                    d9:e8:e6:47:21:77:a3:5d:70:f6:1e:b5:3c:67:90:
                    a3:da:1e:03:05:07:51:49:5f:96:34:59:a3:ad:9d:
                    79:af:24:6f:14:ab:74:4d:bd:4e:fd:a1:42:7d:98:
                    a8:14:b2:35:c8:36:90:59:1b:7a:ef:54:35:a7:07:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3E:22:67:09:B1:C1:2E:C8:41:35:FB:59:DB:91:BA:85:30:4E:7F
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/5e6b5caedd9ded5bc11ffbd23577d8c92de1c926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.139.0/24
                  186.96.152.0/24
                  186.96.171.0/24
                  186.96.189.0/24
                  187.188.127.0-187.188.133.255
                  187.188.164.0/24
                  187.188.166.0-187.188.169.255
                  187.188.171.0-187.188.172.255
                  187.188.183.0/24
                  187.188.185.0/24
                  187.188.187.0-187.188.188.255
                  187.188.193.0/24
                  187.188.202.0/23
                  187.188.206.0/24
                  187.188.209.0/24
                  187.188.211.0/24
                  187.188.215.0/24
                  187.188.231.0/24
                  187.188.235.0-187.188.237.255
                  187.188.239.0/24
                  187.188.245.0/24
                  187.188.247.0/24
                  187.189.1.0-187.189.8.255
                  187.189.14.0/24
                  187.189.22.0/24
                  187.189.27.0/24
                  187.189.37.0/24
                  187.189.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8b:5e:21:5f:d3:e3:dc:8c:c3:68:7d:83:b7:9c:03:f1:9e:
         b2:0c:0a:ec:c5:94:39:be:9f:67:15:7a:9c:bd:42:10:97:5c:
         bf:f7:ed:88:d2:19:9e:ba:47:54:65:27:88:72:1f:51:22:01:
         55:99:c5:75:6c:7b:1b:37:06:db:ad:2d:41:34:a5:01:03:94:
         82:9f:73:0c:18:c6:7c:2b:44:46:11:fb:dc:02:d8:d7:a6:9d:
         36:1e:86:f2:2a:bf:0f:85:3b:4b:88:c3:7c:05:9d:94:bd:c6:
         c8:71:1c:09:1e:16:12:09:e1:a5:ff:09:17:ae:6f:01:68:88:
         87:e8:fc:80:8a:c5:c3:0d:37:f2:4e:ca:36:6c:da:ff:4d:45:
         cd:be:7c:74:c8:07:5a:a7:57:e3:55:c3:a3:1d:9e:2f:8b:7a:
         45:33:c5:61:8c:c7:9a:97:47:8b:12:93:df:1b:e6:23:89:ec:
         eb:71:57:13:7c:a4:22:8c:8d:b3:db:e7:ef:a0:4b:3c:f7:d9:
         cb:c7:10:18:60:24:3a:65:e2:d2:f6:fa:b1:22:e9:ce:f1:c1:
         d1:31:3f:50:95:eb:30:8f:cb:59:8a:33:79:63:d9:21:05:c0:
         bc:cd:2c:66:8a:57:81:ce:5b:8f:05:31:f4:0a:73:36:10:f2:
         4e:0f:b0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org