Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/e842f0a8b3207ab7841bcaf4e3fc68a55fbac775.roa
File:                     e842f0a8b3207ab7841bcaf4e3fc68a55fbac775.roa (raw, json)
Hash identifier:          4xp3Z5PiX3hzw4cjVARZQgdKO8IDUjz176G/uC4eprE=
Subject key identifier:   16:1F:F7:1E:10:77:F4:A6:8E:09:2F:90:1B:D8:0C:69:95:F2:CF:1B
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0B5883
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/e842f0a8b3207ab7841bcaf4e3fc68a55fbac775.roa
Signing time:             Thu 10 Aug 2023 07:01:50 +0000
ROA not before:           Wed 09 Aug 2023 07:01:50 +0000
ROA not after:            Sun 10 Aug 2025 07:01:50 +0000
asID:                     22884
IP address blocks:        187.251.139.0/24 maxlen: 24
                          187.251.142.0/24 maxlen: 24
                          189.203.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743555 (0xb5883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Aug  9 07:01:50 2023 GMT
            Not After : Aug 10 07:01:50 2025 GMT
        Subject: CN=e842f0a8b3207ab7841bcaf4e3fc68a55fbac775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:9a:a1:f6:b2:15:84:f5:59:1c:7a:6b:83:
                    5f:cd:ed:d0:77:90:1d:8a:76:e3:5e:3f:63:df:e8:
                    f4:9a:a8:b3:40:3b:d0:8a:ad:4f:28:63:55:14:02:
                    f3:3a:d7:28:54:f9:cc:b6:3c:60:a1:f6:e7:45:ce:
                    52:f8:c1:98:59:4f:0e:4e:51:31:4b:f3:e9:2e:2f:
                    d6:bb:f2:bd:67:df:6e:29:e8:4a:4e:24:c0:e3:72:
                    be:3f:df:ba:d2:fa:48:d9:22:2c:a3:48:fe:38:62:
                    e0:77:b8:f6:e9:11:0e:d0:e4:0e:b5:e4:cc:10:09:
                    64:8e:0b:64:a4:36:28:14:be:d5:04:a0:b0:f5:5d:
                    c8:b9:42:82:5a:3d:ce:5b:27:eb:f0:51:09:c6:ad:
                    30:83:3b:06:b5:44:43:9b:e6:32:53:f2:55:b5:62:
                    17:3b:37:cc:fe:bf:83:d9:a3:6c:f2:5a:a8:2a:93:
                    ec:37:76:40:76:d6:1b:78:a5:ec:05:74:e2:0b:b9:
                    c2:fc:75:1a:5e:fc:f5:24:97:3f:47:38:fc:bb:31:
                    c3:f9:01:0e:1f:d7:96:e3:d5:3d:d4:f4:41:53:a1:
                    88:ee:ec:ba:02:55:ad:48:96:1b:c7:07:ac:c7:3f:
                    52:53:e1:56:a1:50:a7:24:87:3a:d7:09:4a:b2:6f:
                    4f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:F7:1E:10:77:F4:A6:8E:09:2F:90:1B:D8:0C:69:95:F2:CF:1B
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/e842f0a8b3207ab7841bcaf4e3fc68a55fbac775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.139.0/24
                  187.251.142.0/24
                  189.203.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:29:cd:52:e1:fe:f1:57:c9:ec:eb:2c:d6:15:00:9e:f4:de:
         db:2c:5b:f9:8c:95:0f:20:72:7f:fb:15:df:b8:1a:33:0b:27:
         5c:8a:80:d2:46:ba:c2:d1:5f:db:c5:7b:5b:d1:6e:a9:3f:fc:
         ac:d6:bb:1f:82:df:a3:8a:24:b1:ae:dc:4f:a4:18:ae:56:30:
         43:1c:d5:70:ab:29:71:a5:53:ec:ad:f7:d7:46:c5:07:9c:d3:
         e2:ed:28:88:74:db:41:ac:8c:39:04:cb:7e:23:8e:7c:8c:5c:
         2f:bd:14:6e:de:2d:5a:d0:61:95:40:a1:6c:ed:33:b9:1d:25:
         40:cb:f4:85:74:b1:54:9f:5e:2b:e7:e9:8a:b0:1b:8a:34:30:
         e0:26:63:eb:20:e8:41:61:2c:65:04:89:94:d9:df:df:52:d1:
         2b:72:08:19:49:ae:f5:56:82:4d:25:a8:cc:5b:78:e2:45:d4:
         6a:96:3d:72:80:ff:cc:d1:08:b3:5a:ca:eb:90:5f:d7:23:bb:
         13:b5:65:71:93:bf:82:7c:6a:8f:54:a2:ce:bd:47:18:5c:29:
         af:db:b9:24:4c:69:96:d1:86:c4:bf:84:59:46:af:24:50:ba:
         d6:29:b1:ad:66:2b:60:e4:e7:3a:89:c8:31:f9:93:5e:da:af:
         c0:a2:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org