Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/f0c7083a6e2b735cd227439eaaecbe9c2f39956b.roa
File:                     f0c7083a6e2b735cd227439eaaecbe9c2f39956b.roa (raw, json)
Hash identifier:          OeIEhZtC5fdWq2DOWkauyNwImfv0q33fRnn3FYrSGvc=
Subject key identifier:   E8:27:50:6A:10:B0:22:CB:B3:91:0F:88:5D:4C:87:26:7D:C9:D7:94
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0D43DD
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/f0c7083a6e2b735cd227439eaaecbe9c2f39956b.roa
Signing time:             Wed 11 Oct 2023 19:55:51 +0000
ROA not before:           Tue 10 Oct 2023 19:55:51 +0000
ROA not after:            Sat 11 Oct 2025 19:55:51 +0000
asID:                     22884
IP address blocks:        187.251.237.0/24 maxlen: 24
                          187.251.198.0/24 maxlen: 24
                          187.251.134.0/24 maxlen: 24
                          187.251.133.0/24 maxlen: 24
                          187.190.103.0/24 maxlen: 24
                          187.190.45.0/24 maxlen: 24
                          187.190.42.0/24 maxlen: 24
                          187.190.41.0/24 maxlen: 24
                          187.188.42.0/24 maxlen: 24
                          187.188.41.0/24 maxlen: 24
                          186.96.155.0/24 maxlen: 24
                          186.96.150.0/24 maxlen: 24
                          186.96.32.0/24 maxlen: 24
                          187.251.234.0/24 maxlen: 24
                          187.251.226.0/24 maxlen: 24
                          187.251.201.0/24 maxlen: 24
                          187.251.199.0/24 maxlen: 24
                          187.251.122.0/24 maxlen: 24
                          187.251.121.0/24 maxlen: 24
                          187.191.15.0/24 maxlen: 24
                          187.190.232.0/24 maxlen: 24
                          187.190.125.0/24 maxlen: 24
                          187.188.75.0/24 maxlen: 24
                          186.96.182.0/24 maxlen: 24
                          186.96.165.0/24 maxlen: 24
                          186.96.148.0/24 maxlen: 24
                          186.96.49.0/24 maxlen: 24
                          186.96.18.0/24 maxlen: 24
                          186.96.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869341 (0xd43dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 10 19:55:51 2023 GMT
            Not After : Oct 11 19:55:51 2025 GMT
        Subject: CN=f0c7083a6e2b735cd227439eaaecbe9c2f39956b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:78:6a:e3:49:b5:ff:ad:26:ff:70:b7:9d:0b:
                    f9:ae:d2:7d:d6:7c:6c:3a:36:5b:f2:ee:27:4f:04:
                    fc:7d:2f:a4:aa:5e:00:d4:dc:a9:ff:d4:77:26:de:
                    04:37:38:c2:05:21:b4:31:7b:13:11:4b:7f:d1:44:
                    6b:fc:b7:c0:19:1b:ce:de:5b:3b:f5:4e:9b:da:4f:
                    4b:21:0e:eb:8b:9b:9b:7e:b4:10:f8:ca:a4:bc:fc:
                    b7:35:73:7b:73:20:3f:af:6a:6e:b9:97:b2:e2:8a:
                    33:e3:76:21:c9:3f:75:08:46:48:3c:26:c7:0a:b5:
                    01:c4:f1:57:33:86:74:0e:20:88:f2:e7:51:9a:c5:
                    ed:75:1d:56:91:81:5e:46:1a:2e:2f:1a:d2:3c:dc:
                    f3:e8:63:46:ff:37:cd:3e:ac:4f:fa:d4:c8:2a:e0:
                    5b:63:8d:da:57:ba:26:18:c4:b5:dc:a5:68:73:ae:
                    f0:cc:08:82:93:35:74:a2:65:3b:ff:e9:b0:1c:4f:
                    ad:71:05:15:58:c0:6b:00:d0:e1:e8:75:ea:2e:4d:
                    a8:8d:11:e1:4f:1a:dc:7f:0e:74:b4:cb:99:cb:68:
                    7d:96:28:86:f9:11:1b:28:bb:fd:73:4a:8b:df:a8:
                    a1:e2:30:0c:e3:c7:7c:36:7f:a6:9c:75:32:19:f2:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:27:50:6A:10:B0:22:CB:B3:91:0F:88:5D:4C:87:26:7D:C9:D7:94
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/f0c7083a6e2b735cd227439eaaecbe9c2f39956b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.11.0/24
                  186.96.18.0/24
                  186.96.32.0/24
                  186.96.49.0/24
                  186.96.148.0/24
                  186.96.150.0/24
                  186.96.155.0/24
                  186.96.165.0/24
                  186.96.182.0/24
                  187.188.41.0-187.188.42.255
                  187.188.75.0/24
                  187.190.41.0-187.190.42.255
                  187.190.45.0/24
                  187.190.103.0/24
                  187.190.125.0/24
                  187.190.232.0/24
                  187.191.15.0/24
                  187.251.121.0-187.251.122.255
                  187.251.133.0-187.251.134.255
                  187.251.198.0/23
                  187.251.201.0/24
                  187.251.226.0/24
                  187.251.234.0/24
                  187.251.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:c2:90:1e:c1:86:f7:9b:a6:c6:f1:ee:e2:06:d7:95:46:
         1a:cd:a7:3c:bc:7a:52:cc:c4:7a:0d:78:15:23:6a:5c:08:2f:
         e1:6e:d2:b0:a0:13:8a:83:ae:89:8b:d2:ca:b2:ba:3b:27:52:
         94:4b:1d:1c:d9:2e:e3:01:af:64:04:8d:a1:8f:a4:6d:98:3f:
         e8:26:3b:70:63:d2:78:b2:92:cc:d8:9e:84:01:41:34:c6:ff:
         6a:9d:fc:9b:9d:97:68:56:86:59:70:29:7a:ec:5d:a0:f1:83:
         b0:11:03:1d:50:5a:59:d6:a1:d1:9e:0e:d4:18:e8:7d:62:45:
         f6:30:26:61:16:25:2a:f1:40:2f:b2:d0:8c:91:82:c4:f1:39:
         07:7b:e3:47:e4:ed:08:4d:31:6f:39:bc:6a:38:80:42:dd:d0:
         72:c7:23:8e:a4:bb:08:75:19:cd:33:cb:09:56:d6:e6:40:6d:
         5b:76:85:bf:a5:c4:36:4c:bb:50:11:54:ae:ed:ba:66:9f:38:
         1e:43:71:21:40:f9:de:1b:d9:04:fe:1e:de:83:2c:0b:6d:57:
         36:5a:d0:ef:46:3d:d0:66:3d:01:13:d8:d2:e0:6e:2b:e6:76:
         63:c4:f6:e5:53:38:4b:7c:6c:3a:02:8c:22:d0:a4:4b:9b:c1:
         7a:82:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org