Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/bd0fc3169da85635a38186284ccce067def7e540.roa
File:                     bd0fc3169da85635a38186284ccce067def7e540.roa (raw, json)
Hash identifier:          3wQEMscBjc7upPvKxyVZOqVyehn6ol2LfVLFY1ERByk=
Subject key identifier:   FC:D7:66:92:B9:CC:56:E1:B2:DF:19:D4:DC:E0:0F:DB:57:8B:C7:93
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0D4E0D
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/bd0fc3169da85635a38186284ccce067def7e540.roa
Signing time:             Wed 11 Oct 2023 20:49:59 +0000
ROA not before:           Tue 10 Oct 2023 20:49:59 +0000
ROA not after:            Sat 11 Oct 2025 20:49:59 +0000
asID:                     22884
IP address blocks:        187.188.213.0/24 maxlen: 24
                          187.188.205.0/24 maxlen: 24
                          187.188.123.0/24 maxlen: 24
                          187.188.81.0/24 maxlen: 24
                          187.188.72.0/24 maxlen: 24
                          187.188.66.0/24 maxlen: 24
                          187.188.56.0/24 maxlen: 24
                          187.188.34.0/24 maxlen: 24
                          187.188.24.0/24 maxlen: 24
                          187.188.22.0/24 maxlen: 24
                          187.188.7.0/24 maxlen: 24
                          187.188.6.0/24 maxlen: 24
                          187.188.1.0/24 maxlen: 24
                          186.96.188.0/24 maxlen: 24
                          186.96.186.0/24 maxlen: 24
                          186.96.185.0/24 maxlen: 24
                          186.96.184.0/24 maxlen: 24
                          186.96.180.0/24 maxlen: 24
                          186.96.179.0/24 maxlen: 24
                          186.96.178.0/24 maxlen: 24
                          186.96.172.0/24 maxlen: 24
                          186.96.167.0/24 maxlen: 24
                          186.96.151.0/24 maxlen: 24
                          186.96.149.0/24 maxlen: 24
                          186.96.145.0/24 maxlen: 24
                          186.96.140.0/24 maxlen: 24
                          186.96.58.0/24 maxlen: 24
                          186.96.53.0/24 maxlen: 24
                          186.96.46.0/24 maxlen: 24
                          186.96.31.0/24 maxlen: 24
                          186.96.17.0/24 maxlen: 24
                          186.96.2.0/24 maxlen: 24
                          186.96.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871949 (0xd4e0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 10 20:49:59 2023 GMT
            Not After : Oct 11 20:49:59 2025 GMT
        Subject: CN=bd0fc3169da85635a38186284ccce067def7e540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:1f:77:3b:d3:99:32:ee:09:a8:14:59:54:
                    ad:67:78:36:d6:33:a9:4a:2d:b0:ba:9e:ca:23:42:
                    d1:46:2a:18:3a:52:95:fe:f5:28:a5:e2:e2:8e:4b:
                    4d:e2:ce:04:71:16:09:8e:99:d9:af:25:ae:10:b3:
                    07:08:7f:b3:d1:b8:6c:ce:77:64:cc:68:72:81:6b:
                    5a:74:d3:16:dc:41:34:89:43:f2:2d:0c:af:d0:2a:
                    21:97:87:56:1e:b5:0c:05:df:11:33:87:51:fd:23:
                    20:41:35:70:86:0d:a3:40:63:a3:e9:16:ec:8b:d1:
                    58:70:94:a1:15:c2:c7:f9:4a:1a:6a:31:60:d6:bf:
                    0c:68:f0:0f:1d:4b:f3:04:47:96:42:6a:8b:a3:d9:
                    a8:fe:92:36:3c:0d:69:3d:cc:c2:89:d6:6f:18:21:
                    f8:0c:e7:92:3a:1a:3b:2d:7f:f3:47:03:1e:9d:66:
                    e1:52:58:8d:0f:e8:ad:b8:58:ff:5b:1c:b9:78:f9:
                    06:54:1b:87:09:c5:77:fd:6c:d2:fa:06:13:ba:d0:
                    c1:ae:6c:f8:14:01:c9:f1:1e:08:6d:eb:5b:76:b3:
                    a0:fe:9e:3d:2e:4d:69:a2:41:e7:e5:b2:c8:e7:96:
                    6b:df:7a:8b:2e:9e:3b:43:28:4a:e0:74:e2:03:6c:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D7:66:92:B9:CC:56:E1:B2:DF:19:D4:DC:E0:0F:DB:57:8B:C7:93
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/bd0fc3169da85635a38186284ccce067def7e540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.1.0-186.96.2.255
                  186.96.17.0/24
                  186.96.31.0/24
                  186.96.46.0/24
                  186.96.53.0/24
                  186.96.58.0/24
                  186.96.140.0/24
                  186.96.145.0/24
                  186.96.149.0/24
                  186.96.151.0/24
                  186.96.167.0/24
                  186.96.172.0/24
                  186.96.178.0-186.96.180.255
                  186.96.184.0-186.96.186.255
                  186.96.188.0/24
                  187.188.1.0/24
                  187.188.6.0/23
                  187.188.22.0/24
                  187.188.24.0/24
                  187.188.34.0/24
                  187.188.56.0/24
                  187.188.66.0/24
                  187.188.72.0/24
                  187.188.81.0/24
                  187.188.123.0/24
                  187.188.205.0/24
                  187.188.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:48:47:fc:3e:15:1e:22:16:f0:8d:7f:cf:7f:93:f3:c7:
         ab:5b:b5:73:ad:d6:c9:64:e7:63:08:fe:32:06:07:01:7c:a1:
         bf:7b:69:8e:ba:b9:58:13:96:4d:b5:58:31:2c:fb:90:eb:f9:
         24:80:73:80:fe:88:f6:3f:df:27:a0:cb:b4:62:90:a8:41:07:
         bf:c7:ef:e9:fb:2c:03:29:c1:3a:3d:0d:af:9c:79:1e:9b:3c:
         25:db:91:87:50:9f:1a:15:c2:5f:09:73:1c:fb:67:ac:cd:ff:
         d5:50:48:b1:df:7b:08:6b:a5:18:e9:84:1c:b3:2a:f2:56:2b:
         ff:29:d6:89:4c:50:71:e4:cf:17:56:c0:e8:d0:1d:e9:cd:59:
         07:64:53:52:44:ee:72:61:2b:08:a2:64:32:f5:64:96:d1:3b:
         7b:f5:b3:6e:68:88:b0:bb:9a:bd:a8:80:bf:71:f3:91:64:98:
         17:8d:37:f2:ff:ca:9a:1b:3f:27:df:7b:cd:d4:83:49:15:4b:
         a3:38:1c:65:e3:6a:39:39:56:04:f1:69:63:bd:c5:06:41:19:
         4f:4c:24:a9:08:0e:24:a3:47:ee:70:6e:4f:ca:42:a5:94:9e:
         5c:94:7c:f8:5e:60:f3:6e:23:07:d8:09:c8:d1:5d:fc:aa:6e:
         d1:5e:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org