Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/71173cbd1c58c5311ee8431ca514a667fb976e70.roa
File:                     71173cbd1c58c5311ee8431ca514a667fb976e70.roa (raw, json)
Hash identifier:          w0sf7hvWuk59s3vqO4gG7eDT9nHyJ4D3cTsoJBbXcPM=
Subject key identifier:   4E:86:8B:08:9D:BD:BE:81:C4:A8:3A:30:33:50:6F:0A:0A:2A:AC:C1
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       07D32A
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/71173cbd1c58c5311ee8431ca514a667fb976e70.roa
Signing time:             Wed 05 Apr 2023 18:40:46 +0000
ROA not before:           Tue 04 Apr 2023 18:40:21 +0000
ROA not after:            Sat 05 Apr 2025 18:40:21 +0000
asID:                     22884
IP address blocks:        186.96.28.0/24 maxlen: 24
                          186.96.44.0/24 maxlen: 24
                          186.96.47.0/24 maxlen: 24
                          186.96.48.0/24 maxlen: 24
                          186.96.56.0/24 maxlen: 24
                          186.96.62.0/24 maxlen: 24
                          186.96.138.0/24 maxlen: 24
                          186.96.147.0/24 maxlen: 24
                          186.96.158.0/24 maxlen: 24
                          186.96.160.0/24 maxlen: 24
                          186.96.161.0/24 maxlen: 24
                          187.188.101.0/24 maxlen: 24
                          187.188.144.0/24 maxlen: 24
                          187.188.195.0/24 maxlen: 24
                          187.188.196.0/24 maxlen: 24
                          187.188.197.0/24 maxlen: 24
                          187.188.198.0/24 maxlen: 24
                          187.188.250.0/24 maxlen: 24
                          187.189.158.0/24 maxlen: 24
                          187.189.241.0/24 maxlen: 24
                          187.190.57.0/24 maxlen: 24
                          187.190.58.0/24 maxlen: 24
                          187.190.64.0/24 maxlen: 24
                          187.190.67.0/24 maxlen: 24
                          187.190.73.0/24 maxlen: 24
                          187.190.83.0/24 maxlen: 24
                          187.190.85.0/24 maxlen: 24
                          187.190.86.0/24 maxlen: 24
                          187.190.87.0/24 maxlen: 24
                          187.190.92.0/24 maxlen: 24
                          187.190.120.0/24 maxlen: 24
                          187.190.121.0/24 maxlen: 24
                          187.190.247.0/24 maxlen: 24
                          187.191.4.0/24 maxlen: 24
                          187.191.27.0/24 maxlen: 24
                          187.191.59.0/24 maxlen: 24
                          187.251.102.0/24 maxlen: 24
                          187.251.103.0/24 maxlen: 24
                          187.251.104.0/24 maxlen: 24
                          187.251.105.0/24 maxlen: 24
                          187.251.132.0/24 maxlen: 24
                          187.251.196.0/24 maxlen: 24
                          187.251.209.0/24 maxlen: 24
                          187.251.218.0/24 maxlen: 24
                          189.203.39.0/24 maxlen: 24
                          189.203.41.0/24 maxlen: 24
                          189.203.86.0/24 maxlen: 24
                          189.203.194.0/24 maxlen: 24
                          189.203.227.0/24 maxlen: 24
                          187.188.38.0/24 maxlen: 24
                          187.188.40.0/24 maxlen: 24
                          187.189.210.0/24 maxlen: 24
                          187.189.222.0/24 maxlen: 24
                          187.190.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512810 (0x7d32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Apr  4 18:40:21 2023 GMT
            Not After : Apr  5 18:40:21 2025 GMT
        Subject: CN=71173cbd1c58c5311ee8431ca514a667fb976e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:a6:a7:a5:c5:b7:06:a1:fa:cd:1c:37:71:
                    7a:a2:3f:e5:86:06:f2:bd:98:56:85:30:ef:c9:2f:
                    26:12:93:2f:e5:bb:a7:38:57:10:72:fb:0b:22:9e:
                    9b:82:f9:26:e2:29:35:1c:81:b8:87:ed:31:ae:d3:
                    ed:48:34:ea:60:b1:93:fa:24:ba:1d:90:e0:7b:68:
                    45:c0:75:61:67:d4:4a:7c:fc:60:3d:5c:a0:6b:c9:
                    ea:2e:25:63:3b:26:b6:45:54:c8:03:2a:8a:a1:16:
                    f1:d5:04:54:a5:8c:37:7c:ac:c1:5e:2f:b1:bd:1e:
                    fd:7e:59:c3:71:e2:56:70:5e:37:85:b5:37:96:96:
                    ae:8d:71:e9:cb:04:a4:b9:c1:fb:57:89:99:41:c6:
                    f1:6c:ef:97:02:b6:63:f7:54:4d:7e:94:9d:e1:1d:
                    91:84:a0:a5:db:59:0d:63:29:d4:fa:24:e7:61:ef:
                    d6:7f:04:66:62:b4:5a:37:fd:c7:91:5c:3c:80:18:
                    c4:3b:5b:47:c5:72:53:71:15:83:d2:de:e2:8a:90:
                    b7:e1:be:c7:9d:04:63:87:e2:01:5f:27:43:e6:79:
                    13:a1:19:6b:4f:06:e5:f9:97:21:a1:f5:e9:fd:93:
                    5b:c9:02:77:a6:f0:8f:e3:e8:81:dd:e3:2d:64:59:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:86:8B:08:9D:BD:BE:81:C4:A8:3A:30:33:50:6F:0A:0A:2A:AC:C1
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/71173cbd1c58c5311ee8431ca514a667fb976e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.28.0/24
                  186.96.44.0/24
                  186.96.47.0-186.96.48.255
                  186.96.56.0/24
                  186.96.62.0/24
                  186.96.138.0/24
                  186.96.147.0/24
                  186.96.158.0/24
                  186.96.160.0/23
                  187.188.38.0/24
                  187.188.40.0/24
                  187.188.101.0/24
                  187.188.144.0/24
                  187.188.195.0-187.188.198.255
                  187.188.250.0/24
                  187.189.158.0/24
                  187.189.210.0/24
                  187.189.222.0/24
                  187.189.241.0/24
                  187.190.57.0-187.190.58.255
                  187.190.64.0/24
                  187.190.67.0/24
                  187.190.73.0/24
                  187.190.83.0/24
                  187.190.85.0-187.190.87.255
                  187.190.92.0/24
                  187.190.120.0/23
                  187.190.196.0/24
                  187.190.247.0/24
                  187.191.4.0/24
                  187.191.27.0/24
                  187.191.59.0/24
                  187.251.102.0-187.251.105.255
                  187.251.132.0/24
                  187.251.196.0/24
                  187.251.209.0/24
                  187.251.218.0/24
                  189.203.39.0/24
                  189.203.41.0/24
                  189.203.86.0/24
                  189.203.194.0/24
                  189.203.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:30:ba:b0:15:d6:c3:e8:83:66:44:d5:66:bf:88:cd:21:91:
         06:69:7d:70:65:c9:27:f0:9d:27:6f:84:f4:65:bb:9f:79:50:
         ae:05:73:0c:06:94:0c:9e:fe:e8:05:ee:06:15:41:06:a8:3a:
         6e:34:b4:d2:7b:1e:e1:85:b5:7f:4c:26:aa:50:60:33:94:02:
         2b:e7:52:8a:f6:df:64:b9:be:d0:57:01:d1:52:4e:2b:f4:bc:
         45:91:bc:60:49:46:e6:50:75:e2:6a:36:fd:3d:cd:5d:1d:eb:
         8d:d3:38:9e:bf:d9:dc:57:4e:76:13:94:a5:f8:1a:1f:7f:da:
         bf:6e:31:39:7c:36:e0:15:de:4e:8b:86:4a:48:44:da:c4:f6:
         5c:3e:14:99:40:db:43:1e:e5:41:00:02:b8:5b:9d:24:2e:65:
         4a:15:a9:11:42:38:9f:e1:36:0d:b2:15:10:f3:f8:b6:6d:09:
         3b:20:ac:da:26:4d:f0:4a:3d:a3:a1:84:8a:58:40:9e:4c:5f:
         01:1c:93:d1:46:ff:92:26:96:d0:63:44:6a:06:0d:a1:c3:56:
         72:11:fe:a5:5a:b2:e6:88:da:df:35:ea:f9:bb:51:f5:90:d6:
         35:4c:c1:25:0d:0e:c0:98:fd:6a:1a:37:47:df:29:b3:d4:55:
         06:e8:c3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org