Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8c487893a3faa94d2a3030d879a3c358beef8cbf.roa
File:                     8c487893a3faa94d2a3030d879a3c358beef8cbf.roa (raw, json)
Hash identifier:          OfvCBCmHc/qEQeomRr6KiKBxTS5Kz3RADG2m8itQk3I=
Subject key identifier:   F4:13:AC:DE:23:A7:51:FE:67:96:49:01:41:8A:27:FA:F0:D0:9A:18
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0CCD0F
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8c487893a3faa94d2a3030d879a3c358beef8cbf.roa
Signing time:             Wed 27 Sep 2023 19:47:09 +0000
ROA not before:           Tue 26 Sep 2023 19:47:09 +0000
ROA not after:            Sat 27 Sep 2025 19:47:09 +0000
asID:                     17072
IP address blocks:        187.188.8.0/24 maxlen: 24
                          187.188.9.0/24 maxlen: 24
                          187.188.10.0/24 maxlen: 24
                          187.188.11.0/24 maxlen: 24
                          187.188.14.0/24 maxlen: 24
                          187.189.145.0/24 maxlen: 24
                          187.189.146.0/24 maxlen: 24
                          187.189.221.0/24 maxlen: 24
                          187.189.240.0/24 maxlen: 24
                          187.190.4.0/24 maxlen: 24
                          187.190.144.0/24 maxlen: 24
                          187.190.159.0/24 maxlen: 24
                          187.190.166.0/24 maxlen: 24
                          187.190.167.0/24 maxlen: 24
                          187.190.184.0/24 maxlen: 24
                          187.190.185.0/24 maxlen: 24
                          187.190.186.0/24 maxlen: 24
                          187.190.187.0/24 maxlen: 24
                          187.190.189.0/24 maxlen: 24
                          187.190.190.0/24 maxlen: 24
                          187.190.192.0/24 maxlen: 24
                          187.190.193.0/24 maxlen: 24
                          187.190.194.0/24 maxlen: 24
                          187.190.198.0/24 maxlen: 24
                          187.190.203.0/24 maxlen: 24
                          187.190.206.0/24 maxlen: 24
                          187.190.229.0/24 maxlen: 24
                          187.191.36.0/24 maxlen: 24
                          187.191.37.0/24 maxlen: 24
                          187.191.38.0/24 maxlen: 24
                          187.191.39.0/24 maxlen: 24
                          189.203.45.0/24 maxlen: 24
                          189.203.88.0/24 maxlen: 24
                          189.203.89.0/24 maxlen: 24
                          189.203.145.0/24 maxlen: 24
                          189.203.150.0/24 maxlen: 24
                          189.203.174.0/24 maxlen: 24
                          189.203.193.0/24 maxlen: 24
                          189.203.231.0/24 maxlen: 24
                          189.203.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838927 (0xccd0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Sep 26 19:47:09 2023 GMT
            Not After : Sep 27 19:47:09 2025 GMT
        Subject: CN=8c487893a3faa94d2a3030d879a3c358beef8cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ba:59:17:a7:1f:c1:36:4e:33:c5:ae:08:44:
                    5d:77:02:10:3f:47:e2:d7:2e:dc:15:87:bf:9e:9b:
                    3f:e8:bd:06:df:b5:15:b1:57:fc:d4:e1:4b:d9:e3:
                    3f:0e:9d:ff:5c:1b:b5:2e:cb:08:8c:ed:6b:30:50:
                    df:69:a2:e6:41:01:15:29:cd:2a:e8:f6:98:b7:72:
                    77:ea:0d:e3:f9:31:e1:57:f7:54:ad:e3:28:84:83:
                    3f:a3:ba:84:b9:70:b6:22:88:d5:72:43:74:30:d3:
                    2d:ba:37:c9:0a:26:bd:44:56:7c:64:34:bd:50:28:
                    56:ee:94:13:ca:d2:13:02:99:65:ea:10:90:64:e9:
                    5f:a5:ce:f6:ad:ec:30:0c:b0:6f:66:69:00:6a:80:
                    2a:16:62:87:e8:a0:5f:fd:9a:7a:86:da:58:ca:57:
                    dc:e9:2a:50:d0:53:67:4b:58:d2:c5:d0:c7:27:8d:
                    cb:bb:54:18:e6:f8:80:47:51:ad:19:a1:5e:9a:9e:
                    63:b2:9d:a0:d4:18:18:d5:ed:86:50:76:28:ce:5a:
                    f5:70:c7:48:32:cf:4a:f6:8e:83:15:63:5e:e7:7a:
                    d1:eb:19:b1:32:10:f2:6e:5a:54:68:ad:0b:08:6a:
                    a1:a6:a2:7d:ac:a6:99:9b:43:70:64:57:1f:7d:1a:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:13:AC:DE:23:A7:51:FE:67:96:49:01:41:8A:27:FA:F0:D0:9A:18
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8c487893a3faa94d2a3030d879a3c358beef8cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.188.8.0/22
                  187.188.14.0/24
                  187.189.145.0-187.189.146.255
                  187.189.221.0/24
                  187.189.240.0/24
                  187.190.4.0/24
                  187.190.144.0/24
                  187.190.159.0/24
                  187.190.166.0/23
                  187.190.184.0/22
                  187.190.189.0-187.190.190.255
                  187.190.192.0-187.190.194.255
                  187.190.198.0/24
                  187.190.203.0/24
                  187.190.206.0/24
                  187.190.229.0/24
                  187.191.36.0/22
                  189.203.45.0/24
                  189.203.88.0/23
                  189.203.145.0/24
                  189.203.150.0/24
                  189.203.174.0/24
                  189.203.193.0/24
                  189.203.231.0/24
                  189.203.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:58:b3:8a:88:25:08:d6:e9:12:76:7c:0e:38:d0:42:94:12:
         e7:4f:53:7a:29:42:a8:29:22:31:29:90:57:8d:80:78:62:95:
         a2:fd:92:94:51:d6:9b:cc:b5:8a:3e:55:a2:56:d3:62:d8:32:
         ac:09:84:1f:b4:54:2c:07:84:33:d5:63:98:b2:93:79:d7:a1:
         bf:a8:65:96:5c:4e:01:ca:b6:d6:a1:a5:6e:16:67:f8:ba:00:
         f8:9a:42:92:d7:84:e4:08:5a:bf:f0:41:0e:f7:6b:b0:77:14:
         2b:26:82:27:9a:b1:fd:28:d9:76:b0:f0:21:ae:ed:e9:f7:5a:
         12:63:64:f5:45:e0:b3:63:57:87:b7:35:d1:05:62:ae:fe:c1:
         d1:95:59:82:cd:f8:b5:b8:5f:0d:c7:ad:59:45:56:2a:3d:79:
         f8:86:5d:3d:70:df:ff:e0:5c:b4:5f:e5:4a:4a:81:25:6f:c2:
         59:40:fa:7e:19:46:37:f3:79:15:3e:76:ec:ce:78:dd:cc:f6:
         04:fc:f9:75:11:95:02:dc:ff:d1:dc:b1:0d:fb:9e:ed:d7:8b:
         0c:4a:07:f7:96:ef:2f:0b:bb:28:0d:e0:3c:46:6a:e4:02:e6:
         7e:08:51:6f:c2:8b:ea:93:eb:0e:51:8e:50:e9:f1:aa:79:23:
         d6:5a:09:49
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgIDDM0PMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMwOTI2
MTk0NzA5WhcNMjUwOTI3MTk0NzA5WjAzMTEwLwYDVQQDEyg4YzQ4Nzg5M2EzZmFh
OTRkMmEzMDMwZDg3OWEzYzM1OGJlZWY4Y2JmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAirpZF6cfwTZOM8WuCERddwIQP0fi1y7cFYe/nps/6L0G37UV
sVf81OFL2eM/Dp3/XBu1LssIjO1rMFDfaaLmQQEVKc0q6PaYt3J36g3j+THhV/dU
reMohIM/o7qEuXC2IojVckN0MNMtujfJCia9RFZ8ZDS9UChW7pQTytITApll6hCQ
ZOlfpc72rewwDLBvZmkAaoAqFmKH6KBf/Zp6htpYylfc6SpQ0FNnS1jSxdDHJ43L
u1QY5viAR1GtGaFemp5jsp2g1BgY1e2GUHYozlr1cMdIMs9K9o6DFWNe53rR6xmx
MhDyblpUaK0LCGqhpqJ9rKaZm0NwZFcffRq70wIDAQABo4IDCDCCAwQwHQYDVR0O
BBYEFPQTrN4jp1H+Z5ZJAUGKJ/rw0JoYMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzhjNDg3ODkzYTNmYWE5NGQyYTMwMzBkODc5YTNjMzU4YmVlZjhjYmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBywYIKwYBBQUHAQcBAf8E
gbswgbgwgbUEAgABMIGuAwQCu7wIAwQAu7wOMAwDBAC7vZEDBAC7vZIDBAC7vd0D
BAC7vfADBAC7vgQDBAC7vpADBAC7vp8DBAG7vqYDBAK7vrgwDAMEALu+vQMEALu+
vjAMAwQGu77AAwQAu77CAwQAu77GAwQAu77LAwQAu77OAwQAu77lAwQCu78kAwQA
vcstAwQBvctYAwQAvcuRAwQAvcuWAwQAvcuuAwQAvcvBAwQAvcvnAwQAvcv8MA0G
CSqGSIb3DQEBCwUAA4IBAQCNWLOKiCUI1ukSdnwOONBClBLnT1N6KUKoKSIxKZBX
jYB4YpWi/ZKUUdabzLWKPlWiVtNi2DKsCYQftFQsB4Qz1WOYspN516G/qGWWXE4B
yrbWoaVuFmf4ugD4mkKS14TkCFq/8EEO92uwdxQrJoInmrH9KNl2sPAhru3p91oS
Y2T1ReCzY1eHtzXRBWKu/sHRlVmCzfi1uF8Nx61ZRVYqPXn4hl09cN//4Fy0X+VK
SoElb8JZQPp+GUY383kVPnbsznjdzPYE/Pl1EZUC3P/R3LEN+57t14sMSgf3lu8v
C7soDeA8RmrkAuZ+CFFvwovqk+sOUY5Q6fGqeSPWWglJ
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org