Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/6c2128a854f702e0b02db5d5f97c44dd7ff2cdd3.roa
File:                     6c2128a854f702e0b02db5d5f97c44dd7ff2cdd3.roa (raw, json)
Hash identifier:          4SSgWe/u6jxs2tGOkR9w3PiWrshrnNoGgZ8vTr7F3J8=
Subject key identifier:   FB:A4:FA:68:CA:87:B5:C4:53:2C:D8:67:D2:73:35:AE:F7:65:82:CD
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0B484D
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/6c2128a854f702e0b02db5d5f97c44dd7ff2cdd3.roa
Signing time:             Thu 10 Aug 2023 06:43:11 +0000
ROA not before:           Wed 09 Aug 2023 06:43:11 +0000
ROA not after:            Sun 10 Aug 2025 06:43:11 +0000
asID:                     22884
IP address blocks:        187.251.231.0/24 maxlen: 24
                          187.251.243.0/24 maxlen: 24
                          189.203.197.0/24 maxlen: 24
                          187.251.114.0/24 maxlen: 24
                          187.251.112.0/24 maxlen: 24
                          187.251.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739405 (0xb484d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Aug  9 06:43:11 2023 GMT
            Not After : Aug 10 06:43:11 2025 GMT
        Subject: CN=6c2128a854f702e0b02db5d5f97c44dd7ff2cdd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:ae:ab:a8:7d:a4:c4:0c:96:71:37:e2:f8:
                    39:80:e7:96:a7:62:b0:77:ee:fb:30:0e:36:42:4a:
                    84:5a:81:06:58:53:22:03:29:d7:be:5e:56:19:53:
                    19:0f:d3:01:96:6a:40:f1:df:4f:b6:99:1f:c3:9c:
                    c6:3d:c4:92:59:40:35:01:da:8c:39:ce:58:0a:01:
                    43:e9:b7:13:a9:a9:0f:79:d9:33:89:ff:97:28:ef:
                    d3:30:0f:f6:38:ab:49:3c:a6:e1:2e:3c:aa:e7:fe:
                    c4:bf:05:e6:e9:e3:59:5d:21:14:72:c6:89:dd:03:
                    3b:6e:5c:74:73:44:c2:5a:a3:ce:80:c2:5e:23:62:
                    3f:32:8f:c0:89:9c:fe:6c:75:15:8e:3e:0f:26:e9:
                    e0:c2:a2:fc:4f:40:3a:a2:d0:09:4b:a1:12:b7:d4:
                    a5:21:fd:93:49:bb:7c:bb:c4:00:f7:aa:ce:49:ca:
                    08:cc:e5:a6:d8:40:e5:dc:66:54:58:3e:35:9d:97:
                    45:fe:1a:56:8e:bd:6f:c1:bf:dc:fa:d8:bf:5f:df:
                    f8:c4:59:b6:9b:13:30:48:ef:4a:cb:5a:98:85:ae:
                    6b:e0:87:a1:33:05:ae:dd:33:3d:be:42:a6:c8:1f:
                    3d:a1:70:60:38:2c:d9:85:48:60:b9:ec:bc:a9:c1:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:FA:68:CA:87:B5:C4:53:2C:D8:67:D2:73:35:AE:F7:65:82:CD
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/6c2128a854f702e0b02db5d5f97c44dd7ff2cdd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.112.0/24
                  187.251.114.0/23
                  187.251.231.0/24
                  187.251.243.0/24
                  189.203.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:94:70:59:77:1f:a2:1a:5d:dc:87:32:70:c8:9c:2a:02:83:
         50:40:e8:6b:47:49:04:d3:8f:b4:5f:0c:a6:4d:84:bb:98:69:
         1c:c5:d1:76:9b:8a:ad:ba:d5:73:40:e0:b1:9d:5d:65:b2:bd:
         d2:90:99:26:f3:f7:ce:22:bc:71:af:c4:9a:80:32:b9:93:69:
         b8:09:d0:92:8f:ab:b2:2b:96:cb:42:93:91:96:c3:13:14:0d:
         ce:0a:9d:47:18:fb:c7:a8:66:c9:3a:a4:17:85:b8:45:b0:89:
         9e:97:27:df:94:80:d6:c3:1e:ac:16:e8:c7:0a:52:a1:63:32:
         ef:6b:72:b8:42:a7:4e:28:06:e3:1c:63:4c:a6:f2:fd:6d:2d:
         39:89:ca:72:5b:7a:88:3a:69:25:43:06:a6:7b:09:73:c7:fd:
         7f:d1:75:1e:85:96:c5:d3:c0:97:00:5e:43:a7:5a:2e:fc:33:
         8b:ba:89:ef:fa:e2:c2:46:a4:17:8b:d3:21:12:ca:bb:c1:e9:
         a8:af:5b:12:29:c0:9a:47:10:3b:75:9d:c7:cf:df:4a:e6:1e:
         81:98:fa:b3:6d:da:4e:7a:38:3c:af:10:73:33:e2:c6:6e:ed:
         3a:f0:1a:3c:d1:3e:ec:88:7e:91:be:a2:55:74:57:77:be:91:
         84:b2:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org