Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/95d2f7a5b79b0f0cf688d1c25600f1926ea7d0e0.roa
File:                     95d2f7a5b79b0f0cf688d1c25600f1926ea7d0e0.roa (raw, json)
Hash identifier:          dW6dNSJdyUeUOvU32wdeEHTfInxCgRftHDgdywFy3dc=
Subject key identifier:   24:ED:0C:92:58:18:81:07:AD:28:D2:60:17:A4:F0:22:8D:4D:3B:75
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       25C15D
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/95d2f7a5b79b0f0cf688d1c25600f1926ea7d0e0.roa
Signing time:             Thu 27 Jul 2023 19:15:34 +0000
ROA not before:           Wed 26 Jul 2023 19:15:34 +0000
ROA not after:            Sun 27 Jul 2025 19:15:34 +0000
asID:                     280001
IP address blocks:        200.0.88.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474333 (0x25c15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jul 26 19:15:34 2023 GMT
            Not After : Jul 27 19:15:34 2025 GMT
        Subject: CN=95d2f7a5b79b0f0cf688d1c25600f1926ea7d0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:c3:80:e8:b8:bb:df:c2:1d:b7:82:81:2d:
                    74:eb:9c:4d:9e:ce:af:fa:33:36:d1:73:a4:a3:ef:
                    c3:03:74:79:ed:6d:e2:1d:0f:3c:00:46:b8:97:fc:
                    8c:be:ad:43:2a:02:db:60:8f:34:8f:58:9d:ed:28:
                    c3:ad:0f:76:d2:76:18:e1:ad:ee:13:14:69:35:fc:
                    fc:d1:1a:ad:31:3b:5d:55:3a:56:1e:af:66:db:62:
                    ee:29:60:52:be:3d:73:43:e8:1f:b8:7e:9d:9f:0a:
                    80:73:18:7b:84:c2:ec:9b:61:4a:90:ae:8a:2e:aa:
                    8f:c9:20:04:6e:00:a4:e5:d8:e8:73:9b:23:db:ed:
                    00:24:47:c5:3e:a2:dc:40:28:f3:88:bc:1d:4a:9a:
                    74:31:c2:b7:e1:17:0a:5c:30:00:ba:c2:04:41:29:
                    44:e2:45:3d:79:3d:14:bb:d6:5c:57:97:4d:64:e7:
                    e0:09:62:aa:73:8a:1d:40:42:82:61:8c:cb:a0:11:
                    a9:bc:6e:37:62:6b:6d:43:2c:18:d2:9c:ec:97:e2:
                    41:76:19:ba:cf:73:65:cd:5f:fb:8b:b8:10:b9:fb:
                    82:13:b9:57:c4:44:84:b1:4b:3a:32:80:3b:a2:63:
                    82:4d:bd:f7:0c:84:ac:9b:37:45:aa:1d:f6:f1:b7:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:ED:0C:92:58:18:81:07:AD:28:D2:60:17:A4:F0:22:8D:4D:3B:75
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/95d2f7a5b79b0f0cf688d1c25600f1926ea7d0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d4:c9:23:aa:37:c2:27:71:3b:9e:54:e1:96:85:4a:a9:f1:
         42:2e:2b:25:40:1b:8a:4e:06:bd:ac:4a:50:99:71:4d:84:94:
         16:8f:0f:f7:87:d6:fe:8d:b7:f4:6d:9e:7a:b6:ce:4f:da:7c:
         14:92:09:dd:40:9e:27:be:a8:c9:21:62:88:71:3b:f0:85:53:
         80:fb:68:b0:c9:7f:95:64:b7:86:f8:b7:b8:dc:bc:42:ad:26:
         b3:75:e1:83:41:e0:0c:f7:05:93:21:20:1d:12:fb:85:d1:a9:
         ba:b1:1e:f3:29:42:8d:5f:59:63:24:a9:50:62:fe:eb:66:9a:
         ec:9b:6d:66:a0:db:9d:55:2b:49:24:52:d9:e0:a9:ea:56:95:
         d1:ed:26:00:b7:53:8b:c1:35:db:06:a4:60:a2:68:05:f8:1d:
         cc:da:8f:dd:c7:1f:13:7d:9b:15:ce:45:df:64:40:db:81:46:
         46:8d:f2:b2:0a:1d:87:ef:20:6b:98:c1:14:00:45:38:b5:19:
         8a:9f:0b:b6:eb:d1:34:0b:c1:a9:72:f9:e8:0f:ff:64:a1:7c:
         61:2b:30:e2:d5:b5:df:75:a2:4f:00:6b:fa:98:56:d0:08:b6:
         e9:56:90:5c:ba:17:16:67:60:2c:52:ba:60:a3:cb:85:16:2f:
         58:42:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org