Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/9723902e620062020deb081cd01073930ce43826.roa
File:                     9723902e620062020deb081cd01073930ce43826.roa (raw, json)
Hash identifier:          OV7bsN/TG64SZE/CJB03+Y4CahgolUgDW1Y3kO5GtSk=
Subject key identifier:   AB:80:64:CB:2A:7C:05:02:D7:2B:CC:18:6F:56:76:E5:1F:E5:A4:A7
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0B3911
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/9723902e620062020deb081cd01073930ce43826.roa
Signing time:             Thu 10 Aug 2023 06:11:12 +0000
ROA not before:           Wed 09 Aug 2023 06:11:12 +0000
ROA not after:            Sun 10 Aug 2025 06:11:12 +0000
asID:                     22884
IP address blocks:        186.96.131.0/24 maxlen: 24
                          186.96.137.0/24 maxlen: 24
                          186.96.144.0/24 maxlen: 24
                          186.96.157.0/24 maxlen: 24
                          186.96.164.0/24 maxlen: 24
                          186.96.34.0/24 maxlen: 24
                          186.96.5.0/24 maxlen: 24
                          186.96.9.0/24 maxlen: 24
                          187.188.179.0/24 maxlen: 24
                          187.188.194.0/24 maxlen: 24
                          187.188.2.0/24 maxlen: 24
                          187.189.103.0/24 maxlen: 24
                          187.189.105.0/24 maxlen: 24
                          187.189.143.0/24 maxlen: 24
                          187.189.182.0/24 maxlen: 24
                          187.189.238.0/24 maxlen: 24
                          187.189.239.0/24 maxlen: 24
                          187.190.139.0/24 maxlen: 24
                          187.190.17.0/24 maxlen: 24
                          187.190.208.0/24 maxlen: 24
                          187.190.221.0/24 maxlen: 24
                          187.190.246.0/24 maxlen: 24
                          187.190.248.0/24 maxlen: 24
                          187.190.65.0/24 maxlen: 24
                          187.190.69.0/24 maxlen: 24
                          187.190.89.0/24 maxlen: 24
                          187.191.25.0/24 maxlen: 24
                          187.191.60.0/24 maxlen: 24
                          187.191.61.0/24 maxlen: 24
                          187.191.62.0/24 maxlen: 24
                          187.251.100.0/24 maxlen: 24
                          187.251.192.0/24 maxlen: 24
                          187.251.219.0/24 maxlen: 24
                          187.251.221.0/24 maxlen: 24
                          187.251.253.0/24 maxlen: 24
                          187.251.96.0/24 maxlen: 24
                          187.251.97.0/24 maxlen: 24
                          187.251.98.0/24 maxlen: 24
                          187.251.99.0/24 maxlen: 24
                          189.203.147.0/24 maxlen: 24
                          189.203.155.0/24 maxlen: 24
                          189.203.195.0/24 maxlen: 24
                          189.203.39.0/24 maxlen: 24
                          189.203.4.0/24 maxlen: 24
                          189.203.66.0/24 maxlen: 24
                          189.203.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735505 (0xb3911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Aug  9 06:11:12 2023 GMT
            Not After : Aug 10 06:11:12 2025 GMT
        Subject: CN=9723902e620062020deb081cd01073930ce43826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:2a:f3:ed:15:bf:e3:43:c6:6e:97:11:48:
                    9c:4d:9c:9a:ff:3e:39:db:da:aa:c5:91:d2:25:dc:
                    76:4c:53:11:32:71:69:c0:2a:4a:ed:92:d9:f5:e5:
                    44:66:8c:0c:d6:c4:c4:f3:9f:e3:51:37:5e:c8:3c:
                    91:9c:2c:f9:42:b2:8d:1d:e2:a2:4a:46:b9:8c:59:
                    b2:38:7d:b2:86:76:d3:41:43:54:82:4e:c8:99:73:
                    12:dc:b6:65:f6:66:ac:03:52:ff:a3:0c:b8:4c:04:
                    8d:29:9f:61:e0:26:79:bf:d4:7f:fc:c2:ca:6d:03:
                    92:b5:8c:3f:1e:e2:c5:64:b8:56:28:7f:df:0c:7c:
                    ae:86:fc:b1:da:c3:4a:9f:f3:47:2b:6b:c0:26:de:
                    3c:d2:7f:e2:bd:2a:5c:aa:93:c2:c0:d7:c7:c8:77:
                    38:83:6d:0f:8d:b6:0f:21:51:00:dc:98:03:64:4e:
                    9d:b7:e4:6e:ac:44:87:69:0d:3d:f7:6a:3b:e2:8e:
                    14:a2:60:dd:f7:a7:bc:bd:22:7b:23:41:90:fc:e1:
                    1f:53:2f:99:2a:f0:fe:71:13:4f:19:6f:f4:9a:ee:
                    41:59:72:6b:fc:2a:cf:78:72:1d:3d:cb:22:9b:ad:
                    8f:75:79:c7:9d:1c:14:ff:ee:7e:b7:66:d2:cd:ce:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:80:64:CB:2A:7C:05:02:D7:2B:CC:18:6F:56:76:E5:1F:E5:A4:A7
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/9723902e620062020deb081cd01073930ce43826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.5.0/24
                  186.96.9.0/24
                  186.96.34.0/24
                  186.96.131.0/24
                  186.96.137.0/24
                  186.96.144.0/24
                  186.96.157.0/24
                  186.96.164.0/24
                  187.188.2.0/24
                  187.188.179.0/24
                  187.188.194.0/24
                  187.189.103.0/24
                  187.189.105.0/24
                  187.189.143.0/24
                  187.189.182.0/24
                  187.189.238.0/23
                  187.190.17.0/24
                  187.190.65.0/24
                  187.190.69.0/24
                  187.190.89.0/24
                  187.190.139.0/24
                  187.190.208.0/24
                  187.190.221.0/24
                  187.190.246.0/24
                  187.190.248.0/24
                  187.191.25.0/24
                  187.191.60.0-187.191.62.255
                  187.251.96.0-187.251.100.255
                  187.251.192.0/24
                  187.251.219.0/24
                  187.251.221.0/24
                  187.251.253.0/24
                  189.203.4.0/24
                  189.203.39.0/24
                  189.203.66.0/24
                  189.203.83.0/24
                  189.203.147.0/24
                  189.203.155.0/24
                  189.203.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:d2:80:62:0b:25:ac:02:7c:d1:46:37:ea:b7:f2:37:ea:
         4a:37:04:9e:9c:4d:ec:9f:45:5f:26:e6:e5:37:4b:24:7b:9d:
         9e:90:11:b0:0a:ed:93:4f:0b:25:77:c0:b9:83:99:fd:0b:2a:
         0e:79:6b:13:c3:c6:55:02:88:fb:b6:d5:fa:c6:88:23:52:66:
         19:b6:a3:6b:fd:67:81:a9:02:84:db:16:4b:c2:6a:94:c9:a1:
         28:e6:5c:fa:c6:bb:cb:da:ce:ca:d7:55:1f:14:63:b8:af:85:
         fa:cd:c1:ac:44:c1:89:ef:e6:fd:38:89:7b:1a:49:58:ba:47:
         68:ff:a3:dd:85:38:aa:79:ce:69:65:e3:dd:fe:34:29:51:63:
         23:45:47:0b:36:a0:22:46:e6:a6:61:82:6e:b2:d9:dd:4d:04:
         76:7c:bb:4c:4d:1b:d8:5f:b8:09:6b:b9:93:25:8b:e3:f5:af:
         3b:48:f5:99:cc:b4:cd:ff:ee:21:28:71:0d:6e:b3:e0:e8:8c:
         f5:81:b9:8a:13:bb:e2:a1:ee:cc:a6:2e:d4:5a:15:5c:34:42:
         34:e0:bc:d2:ca:e0:85:a3:82:80:77:5b:7f:b0:2e:77:d0:5c:
         4e:ff:d0:f8:c8:ac:b2:27:20:e2:3c:de:13:c1:7e:c4:53:bd:
         d2:bb:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org