Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/716b6f03a8a0f9cd9842d9019eca813b1032af1e.roa
File:                     716b6f03a8a0f9cd9842d9019eca813b1032af1e.roa (raw, json)
Hash identifier:          2YrYpCRMO3js+YtxytzMfOpPeStzOfCIFxFhDOJ2/4A=
Subject key identifier:   8C:AE:80:5A:9D:A6:FA:8C:00:38:84:60:AD:FA:30:C7:DA:0A:D0:D3
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       08C0D9
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/716b6f03a8a0f9cd9842d9019eca813b1032af1e.roa
Signing time:             Fri 05 May 2023 20:27:06 +0000
ROA not before:           Thu 04 May 2023 20:27:06 +0000
ROA not after:            Mon 05 May 2025 20:27:06 +0000
asID:                     22884
IP address blocks:        186.96.131.0/24 maxlen: 24
                          186.96.137.0/24 maxlen: 24
                          186.96.144.0/24 maxlen: 24
                          186.96.157.0/24 maxlen: 24
                          186.96.164.0/24 maxlen: 24
                          186.96.34.0/24 maxlen: 24
                          186.96.5.0/24 maxlen: 24
                          186.96.9.0/24 maxlen: 24
                          187.188.179.0/24 maxlen: 24
                          187.188.194.0/24 maxlen: 24
                          187.188.2.0/24 maxlen: 24
                          187.189.103.0/24 maxlen: 24
                          187.189.105.0/24 maxlen: 24
                          187.189.143.0/24 maxlen: 24
                          187.189.182.0/24 maxlen: 24
                          187.189.238.0/24 maxlen: 24
                          187.189.239.0/24 maxlen: 24
                          187.190.139.0/24 maxlen: 24
                          187.190.17.0/24 maxlen: 24
                          187.190.208.0/24 maxlen: 24
                          187.190.221.0/24 maxlen: 24
                          187.190.246.0/24 maxlen: 24
                          187.190.248.0/24 maxlen: 24
                          187.190.65.0/24 maxlen: 24
                          187.190.69.0/24 maxlen: 24
                          187.190.89.0/24 maxlen: 24
                          187.191.25.0/24 maxlen: 24
                          187.191.60.0/24 maxlen: 24
                          187.191.61.0/24 maxlen: 24
                          187.191.62.0/24 maxlen: 24
                          187.251.100.0/24 maxlen: 24
                          187.251.192.0/24 maxlen: 24
                          187.251.219.0/24 maxlen: 24
                          187.251.221.0/24 maxlen: 24
                          187.251.253.0/24 maxlen: 24
                          187.251.96.0/24 maxlen: 24
                          187.251.97.0/24 maxlen: 24
                          187.251.98.0/24 maxlen: 24
                          187.251.99.0/24 maxlen: 24
                          189.203.155.0/24 maxlen: 24
                          189.203.195.0/24 maxlen: 24
                          189.203.4.0/24 maxlen: 24
                          189.203.66.0/24 maxlen: 24
                          189.203.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573657 (0x8c0d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: May  4 20:27:06 2023 GMT
            Not After : May  5 20:27:06 2025 GMT
        Subject: CN=716b6f03a8a0f9cd9842d9019eca813b1032af1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:04:3c:c1:1c:11:f6:64:42:2a:c5:e8:29:
                    ae:11:16:66:57:81:80:65:d9:05:92:91:8c:5d:f6:
                    21:96:36:84:89:a6:2f:30:42:bf:c9:f3:8d:f7:fa:
                    f6:93:e3:c1:3a:be:db:6c:2d:cd:04:62:92:83:4a:
                    93:60:3a:46:1c:8a:7a:e1:36:5c:79:68:2e:06:1c:
                    10:77:e4:eb:c5:98:66:db:82:78:14:9c:83:dd:bc:
                    a4:d9:95:31:5e:fe:98:a0:32:6d:9a:21:58:84:a6:
                    51:fa:52:82:9c:23:32:42:fc:3f:61:26:00:c7:20:
                    0b:24:54:95:0a:62:35:f7:f9:1c:23:e8:34:8a:75:
                    ba:a5:60:38:a5:1f:33:30:af:10:17:81:d2:65:f9:
                    6c:51:81:e9:d2:ec:f1:08:b4:ae:a6:3d:c6:ea:99:
                    a7:b7:6f:d5:55:fd:e2:ed:ba:60:4d:bb:c4:64:42:
                    4d:e8:19:c7:5c:59:3c:19:26:a1:9c:ef:25:5e:d8:
                    68:3d:1d:48:7b:c6:59:f9:1f:32:d0:62:c3:0f:8d:
                    e9:fb:c6:aa:ab:8e:83:7f:fe:49:23:f3:4d:42:4a:
                    b5:88:82:43:3d:03:1c:ce:6d:2b:c2:d1:63:2f:19:
                    12:dc:04:d6:84:a4:50:21:78:14:71:62:8e:3c:29:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AE:80:5A:9D:A6:FA:8C:00:38:84:60:AD:FA:30:C7:DA:0A:D0:D3
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/716b6f03a8a0f9cd9842d9019eca813b1032af1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.5.0/24
                  186.96.9.0/24
                  186.96.34.0/24
                  186.96.131.0/24
                  186.96.137.0/24
                  186.96.144.0/24
                  186.96.157.0/24
                  186.96.164.0/24
                  187.188.2.0/24
                  187.188.179.0/24
                  187.188.194.0/24
                  187.189.103.0/24
                  187.189.105.0/24
                  187.189.143.0/24
                  187.189.182.0/24
                  187.189.238.0/23
                  187.190.17.0/24
                  187.190.65.0/24
                  187.190.69.0/24
                  187.190.89.0/24
                  187.190.139.0/24
                  187.190.208.0/24
                  187.190.221.0/24
                  187.190.246.0/24
                  187.190.248.0/24
                  187.191.25.0/24
                  187.191.60.0-187.191.62.255
                  187.251.96.0-187.251.100.255
                  187.251.192.0/24
                  187.251.219.0/24
                  187.251.221.0/24
                  187.251.253.0/24
                  189.203.4.0/24
                  189.203.66.0/24
                  189.203.83.0/24
                  189.203.155.0/24
                  189.203.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:c6:a1:f1:e1:fd:48:c6:8a:3c:bb:b8:83:0c:ad:38:4c:b2:
         fb:a8:3d:38:29:b6:b9:36:e1:a1:f6:4d:1e:4c:0d:07:cd:b6:
         2c:4e:ee:6c:62:c6:f8:ce:fa:16:28:7b:a2:0c:b8:94:6d:0c:
         88:1b:33:35:0e:21:9e:2a:49:ac:f7:e1:65:e6:dd:65:55:10:
         79:58:a5:af:42:99:3b:63:54:2c:f8:69:51:1c:c8:bd:97:13:
         99:93:89:8e:7f:e0:88:37:dd:04:be:b6:06:ff:2a:2d:24:e0:
         79:e1:5f:58:f1:52:bf:f6:15:67:37:42:3d:ab:02:de:35:72:
         83:f9:8a:76:09:e0:20:1e:70:ac:bc:30:d8:ca:96:d7:8e:51:
         22:ad:8a:24:7d:d7:d6:4a:6f:89:fa:77:b0:cf:dd:ea:a5:f9:
         64:e8:91:ab:ae:3f:a9:2b:cc:f0:f2:fa:ac:62:51:56:04:f4:
         01:c6:1e:fa:01:c6:47:32:df:a9:ae:53:c0:16:25:07:f7:2f:
         94:54:16:7b:37:65:cb:f2:39:56:1b:ff:a0:8c:7c:12:26:18:
         a0:bf:4e:ba:ee:24:14:38:a1:0b:d2:fc:17:1c:8c:2c:21:f8:
         5e:b1:89:99:93:16:07:33:57:65:b3:06:7f:1d:6f:77:be:a7:
         a5:cd:ae:ca
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIDCMDZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMwNTA0
MjAyNzA2WhcNMjUwNTA1MjAyNzA2WjAzMTEwLwYDVQQDEyg3MTZiNmYwM2E4YTBm
OWNkOTg0MmQ5MDE5ZWNhODEzYjEwMzJhZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgFAEPMEcEfZkQirF6CmuERZmV4GAZdkFkpGMXfYhljaEiaYv
MEK/yfON9/r2k+PBOr7bbC3NBGKSg0qTYDpGHIp64TZceWguBhwQd+TrxZhm24J4
FJyD3byk2ZUxXv6YoDJtmiFYhKZR+lKCnCMyQvw/YSYAxyALJFSVCmI19/kcI+g0
inW6pWA4pR8zMK8QF4HSZflsUYHp0uzxCLSupj3G6pmnt2/VVf3i7bpgTbvEZEJN
6BnHXFk8GSahnO8lXthoPR1Ie8ZZ+R8y0GLDD43p+8aqq46Df/5JI/NNQkq1iIJD
PQMczm0rwtFjLxkS3ATWhKRQIXgUcWKOPCnCHQIDAQABo4IDSTCCA0UwHQYDVR0O
BBYEFIyugFqdpvqMADiEYK36MMfaCtDTMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzcxNmI2ZjAzYThhMGY5Y2Q5ODQyZDkwMTllY2E4MTNiMTAzMmFmMWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAQsGCCsGAQUFBwEHAQH/
BIH7MIH4MIH1BAIAATCB7gMEALpgBQMEALpgCQMEALpgIgMEALpggwMEALpgiQME
ALpgkAMEALpgnQMEALpgpAMEALu8AgMEALu8swMEALu8wgMEALu9ZwMEALu9aQME
ALu9jwMEALu9tgMEAbu97gMEALu+EQMEALu+QQMEALu+RQMEALu+WQMEALu+iwME
ALu+0AMEALu+3QMEALu+9gMEALu++AMEALu/GTAMAwQCu788AwQAu78+MAwDBAW7
+2ADBAC7+2QDBAC7+8ADBAC7+9sDBAC7+90DBAC7+/0DBAC9ywQDBAC9y0IDBAC9
y1MDBAC9y5sDBAC9y8MwDQYJKoZIhvcNAQELBQADggEBAJ7GofHh/UjGijy7uIMM
rThMsvuoPTgptrk24aH2TR5MDQfNtixO7mxixvjO+hYoe6IMuJRtDIgbMzUOIZ4q
Saz34WXm3WVVEHlYpa9CmTtjVCz4aVEcyL2XE5mTiY5/4Ig33QS+tgb/Ki0k4Hnh
X1jxUr/2FWc3Qj2rAt41coP5inYJ4CAecKy8MNjKlteOUSKtiiR919ZKb4n6d7DP
3eql+WTokauuP6krzPDy+qxiUVYE9AHGHvoBxkcy36muU8AWJQf3L5RUFns3Zcvy
OVYb/6CMfBImGKC/TrruJBQ4oQvS/BccjCwh+F6xiZmTFgczV2WzBn8db3e+p6XN
rso=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org