Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/fd5482cbdf3b6d094173e264d812cd3f22ce08bc.roa
File:                     fd5482cbdf3b6d094173e264d812cd3f22ce08bc.roa (raw, json)
Hash identifier:          hbxfrrlAn/54q836eSgCUVmsQw01qrROFh3krP++pOs=
Subject key identifier:   94:AC:51:A8:8E:00:F4:1D:D6:EA:48:F9:E5:1A:4E:15:8F:83:56:BF
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0806C0
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/fd5482cbdf3b6d094173e264d812cd3f22ce08bc.roa
Signing time:             Wed 12 Apr 2023 20:42:18 +0000
ROA not before:           Tue 11 Apr 2023 20:34:49 +0000
ROA not after:            Sat 12 Apr 2025 20:34:49 +0000
asID:                     22884
IP address blocks:        186.96.4.0/24 maxlen: 24
                          186.96.6.0/24 maxlen: 24
                          186.96.20.0/24 maxlen: 24
                          186.96.21.0/24 maxlen: 24
                          186.96.36.0/24 maxlen: 24
                          186.96.37.0/24 maxlen: 24
                          186.96.129.0/24 maxlen: 24
                          186.96.135.0/24 maxlen: 24
                          186.96.136.0/24 maxlen: 24
                          186.96.142.0/24 maxlen: 24
                          186.96.163.0/24 maxlen: 24
                          186.96.191.0/24 maxlen: 24
                          187.188.3.0/24 maxlen: 24
                          187.188.29.0/24 maxlen: 24
                          187.188.30.0/24 maxlen: 24
                          187.188.140.0/24 maxlen: 24
                          187.188.186.0/24 maxlen: 24
                          187.188.191.0/24 maxlen: 24
                          187.188.192.0/24 maxlen: 24
                          187.188.201.0/24 maxlen: 24
                          187.188.232.0/24 maxlen: 24
                          187.189.44.0/24 maxlen: 24
                          187.189.52.0/24 maxlen: 24
                          187.189.53.0/24 maxlen: 24
                          187.189.78.0/24 maxlen: 24
                          187.189.116.0/24 maxlen: 24
                          187.189.200.0/24 maxlen: 24
                          187.189.201.0/24 maxlen: 24
                          187.189.203.0/24 maxlen: 24
                          187.189.206.0/24 maxlen: 24
                          187.189.253.0/24 maxlen: 24
                          187.189.255.0/24 maxlen: 24
                          187.190.5.0/24 maxlen: 24
                          187.190.56.0/24 maxlen: 24
                          187.190.71.0/24 maxlen: 24
                          187.190.75.0/24 maxlen: 24
                          187.190.116.0/24 maxlen: 24
                          187.190.117.0/24 maxlen: 24
                          187.190.122.0/24 maxlen: 24
                          187.190.126.0/24 maxlen: 24
                          187.190.131.0/24 maxlen: 24
                          187.190.218.0/24 maxlen: 24
                          187.190.253.0/24 maxlen: 24
                          187.190.254.0/24 maxlen: 24
                          187.190.255.0/24 maxlen: 24
                          187.251.108.0/24 maxlen: 24
                          187.251.141.0/24 maxlen: 24
                          187.251.206.0/24 maxlen: 24
                          187.251.224.0/24 maxlen: 24
                          187.251.231.0/24 maxlen: 24
                          187.251.243.0/24 maxlen: 24
                          189.203.147.0/24 maxlen: 24
                          189.203.197.0/24 maxlen: 24
                          187.251.112.0/24 maxlen: 24
                          187.251.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526016 (0x806c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Apr 11 20:34:49 2023 GMT
            Not After : Apr 12 20:34:49 2025 GMT
        Subject: CN=fd5482cbdf3b6d094173e264d812cd3f22ce08bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:26:63:c2:ca:47:7d:a2:11:b4:f6:69:2e:
                    1b:10:00:65:b4:67:4c:dd:5b:de:b2:06:2c:a5:8f:
                    29:b8:5d:ec:e9:04:29:e9:7c:6f:00:74:c2:37:4a:
                    1f:14:6e:95:46:8c:00:d9:c6:81:4b:39:95:99:6c:
                    c9:3a:54:ad:a1:75:f3:dc:f1:ea:7a:d6:3a:68:90:
                    ca:17:3c:5a:ab:cf:6a:9c:2c:30:6c:0f:69:e8:6c:
                    26:ed:9d:8c:e4:15:a8:d5:2b:91:52:a2:cc:31:c6:
                    3c:6a:78:89:e9:79:8c:c4:79:22:81:b6:ac:fa:8d:
                    e6:73:df:fc:7a:5e:2e:58:89:d2:fa:81:08:8f:90:
                    d9:2d:94:9a:64:11:ab:7b:12:a2:06:94:a6:3a:23:
                    b9:9a:5b:2b:11:2e:04:49:86:1d:45:51:8b:ad:0c:
                    79:30:73:05:d4:d5:24:39:fa:95:0a:79:3b:cd:a6:
                    be:ba:cb:4f:a2:c9:99:d2:3e:fb:71:11:67:6c:b3:
                    58:27:15:b3:46:ce:77:7b:78:c0:18:3b:4a:10:54:
                    c6:e2:dd:a7:96:c1:e4:08:cb:a6:3e:4d:9c:da:cb:
                    28:9f:20:7d:d0:53:b9:e0:a8:8b:63:9c:ad:c7:a7:
                    94:71:10:2d:52:36:91:d0:cc:ed:99:dd:a7:8d:c3:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AC:51:A8:8E:00:F4:1D:D6:EA:48:F9:E5:1A:4E:15:8F:83:56:BF
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/fd5482cbdf3b6d094173e264d812cd3f22ce08bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.4.0/24
                  186.96.6.0/24
                  186.96.20.0/23
                  186.96.36.0/23
                  186.96.129.0/24
                  186.96.135.0-186.96.136.255
                  186.96.142.0/24
                  186.96.163.0/24
                  186.96.191.0/24
                  187.188.3.0/24
                  187.188.29.0-187.188.30.255
                  187.188.140.0/24
                  187.188.186.0/24
                  187.188.191.0-187.188.192.255
                  187.188.201.0/24
                  187.188.232.0/24
                  187.189.44.0/24
                  187.189.52.0/23
                  187.189.78.0/24
                  187.189.116.0/24
                  187.189.200.0/23
                  187.189.203.0/24
                  187.189.206.0/24
                  187.189.253.0/24
                  187.189.255.0/24
                  187.190.5.0/24
                  187.190.56.0/24
                  187.190.71.0/24
                  187.190.75.0/24
                  187.190.116.0/23
                  187.190.122.0/24
                  187.190.126.0/24
                  187.190.131.0/24
                  187.190.218.0/24
                  187.190.253.0-187.190.255.255
                  187.251.108.0/24
                  187.251.112.0/24
                  187.251.115.0/24
                  187.251.141.0/24
                  187.251.206.0/24
                  187.251.224.0/24
                  187.251.231.0/24
                  187.251.243.0/24
                  189.203.147.0/24
                  189.203.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:54:b7:27:8f:c4:4e:3c:cc:15:27:f7:a0:17:1a:9c:da:83:
         0c:2e:1f:51:30:65:14:2d:fe:fb:27:dc:ac:a9:74:61:4a:09:
         9e:f0:a8:6d:73:3d:41:f7:7a:a0:6b:43:0a:b1:54:47:1d:ec:
         6a:b9:e1:53:1e:87:01:16:bf:43:7d:77:51:b5:86:b3:5d:51:
         e2:cc:e1:05:20:0b:39:52:97:34:04:e2:b9:6d:52:90:3a:85:
         f3:bc:60:7b:33:2e:d0:66:3c:d7:9a:2b:ca:96:8e:f7:d0:02:
         ca:bc:85:94:4a:ed:4b:c6:a9:b8:a2:78:ed:3b:a0:b5:b4:ea:
         66:f0:ab:f7:44:8f:9d:b6:a0:b7:c8:5d:67:9f:d9:cc:71:52:
         25:6f:fd:11:da:ba:ff:68:71:fc:56:7a:0f:15:6d:bd:d9:a3:
         d9:d5:b3:2c:7b:6e:d6:8b:72:dc:9a:b9:12:47:3c:db:a9:55:
         13:ef:e2:75:fe:0e:5a:d0:32:25:92:83:19:74:90:69:f2:da:
         e4:e0:01:67:5f:09:52:97:f1:d9:95:b6:40:6b:d7:bb:9d:61:
         22:30:a9:e3:53:08:a5:ac:26:34:5a:84:3c:81:bf:ea:0c:93:
         4a:c7:3c:7f:8b:b2:15:4f:dd:e5:ce:4a:40:81:82:29:52:06:
         3a:30:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org