Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/93ec111e8d8d839c2b04ada78300106d352429eb.roa
File:                     93ec111e8d8d839c2b04ada78300106d352429eb.roa (raw, json)
Hash identifier:          NWlMit0L4X0lJlIwq78BD4YOAiscOaz8rksoCROA8Gk=
Subject key identifier:   FA:1A:D6:35:E3:92:AB:87:D7:18:12:A8:17:18:6C:B4:2E:D4:AF:B1
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       07CAB9
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/93ec111e8d8d839c2b04ada78300106d352429eb.roa
Signing time:             Wed 05 Apr 2023 18:03:58 +0000
ROA not before:           Tue 04 Apr 2023 18:03:13 +0000
ROA not after:            Sat 05 Apr 2025 18:03:13 +0000
asID:                     17072
IP address blocks:        187.188.228.0/24 maxlen: 24
                          187.188.229.0/24 maxlen: 24
                          187.188.230.0/24 maxlen: 24
                          187.188.233.0/24 maxlen: 24
                          187.188.253.0/24 maxlen: 24
                          187.188.79.0/24 maxlen: 24
                          187.190.90.0/24 maxlen: 24
                          187.190.91.0/24 maxlen: 24
                          187.190.93.0/24 maxlen: 24
                          187.190.94.0/24 maxlen: 24
                          187.251.110.0/24 maxlen: 24
                          189.203.36.0/24 maxlen: 24
                          189.203.37.0/24 maxlen: 24
                          189.203.38.0/24 maxlen: 24
                          189.203.40.0/24 maxlen: 24
                          189.203.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510649 (0x7cab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Apr  4 18:03:13 2023 GMT
            Not After : Apr  5 18:03:13 2025 GMT
        Subject: CN=93ec111e8d8d839c2b04ada78300106d352429eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:3e:57:85:46:0a:a4:3f:dc:f9:13:8e:6f:
                    08:a2:ac:b3:09:70:a2:cb:7b:b3:e0:31:27:00:84:
                    35:1f:dd:6d:a9:8c:33:80:3d:ea:98:bf:9e:f5:7d:
                    5f:44:a4:07:51:c7:56:73:6e:45:a6:cc:2a:55:ea:
                    c2:1f:11:4c:c2:a3:a8:de:67:3a:8b:04:1f:10:2f:
                    9c:1f:a0:d3:6f:ce:39:a2:17:d1:84:f2:33:91:9f:
                    63:88:5a:1f:e7:26:55:71:03:03:21:a6:43:fe:29:
                    b4:70:40:d8:8f:3e:38:ad:64:dd:e6:5d:90:f8:6f:
                    36:b9:64:79:e3:7b:4e:8a:5f:ad:29:ac:c2:8d:a1:
                    fe:5e:14:dd:fa:6f:d2:39:5d:b9:53:09:73:17:7b:
                    9b:3e:cc:7f:2c:de:40:e2:5f:f0:31:f4:90:b1:2a:
                    11:b9:3d:6a:46:cb:6c:86:33:13:84:21:d2:b5:06:
                    9c:66:c9:1c:bd:2b:41:9f:ea:97:52:77:08:44:55:
                    76:75:dd:d8:4a:c3:17:9f:9b:9d:2b:9d:1b:2c:bc:
                    00:ea:d4:35:ca:66:6b:d0:7f:8e:49:23:0d:1b:86:
                    b0:7e:42:83:4e:20:c4:4f:31:a3:f0:97:94:9e:86:
                    5a:23:c7:98:7d:48:ad:0b:bc:6d:77:12:c9:b5:48:
                    06:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1A:D6:35:E3:92:AB:87:D7:18:12:A8:17:18:6C:B4:2E:D4:AF:B1
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/93ec111e8d8d839c2b04ada78300106d352429eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.188.79.0/24
                  187.188.228.0-187.188.230.255
                  187.188.233.0/24
                  187.188.253.0/24
                  187.190.90.0/23
                  187.190.93.0-187.190.94.255
                  187.251.110.0/24
                  189.203.36.0-189.203.38.255
                  189.203.40.0/24
                  189.203.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:17:fc:64:aa:63:9e:2a:07:49:b4:36:b7:2a:4c:bc:72:ca:
         ef:2e:f4:cb:85:05:54:14:0c:53:cf:66:4b:73:f6:1b:ec:b7:
         86:6e:0c:ab:34:d9:5a:e4:0b:0e:61:e1:b3:36:26:d0:9c:ec:
         2a:74:cf:e5:f3:da:de:ec:83:45:bc:f0:2a:ea:9c:21:06:2b:
         28:35:e6:06:52:55:21:3d:f9:82:64:e3:a2:52:f7:98:35:e0:
         c2:6d:ff:44:9c:db:cf:d5:dd:41:a9:aa:a5:35:fc:17:4d:7e:
         08:ee:8d:16:a1:35:53:42:4b:22:2d:56:51:40:99:13:36:01:
         b1:47:09:2f:0b:0b:fb:0a:22:c7:47:d8:a4:b1:3b:03:1e:e7:
         77:9b:8f:e6:86:b5:3f:6e:0e:1c:39:7d:60:28:4f:06:54:98:
         23:75:69:60:bb:c5:33:9e:a6:63:f9:55:55:9c:09:48:71:47:
         4b:0b:6c:94:fc:aa:a3:55:b4:d4:aa:a6:8d:5d:9f:e9:75:72:
         8b:55:e1:60:c4:1b:dc:fa:35:22:ff:01:9d:aa:21:d6:97:83:
         37:cb:b9:d8:3a:08:97:4c:40:6c:97:d5:f6:cc:11:c7:fc:7f:
         f0:13:ee:cc:5d:58:8c:77:c0:46:98:86:5d:e8:4b:09:2b:d0:
         f9:f5:21:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org