Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/febd5bcb4b3babe8e72612727165b819de485f00.roa
File:                     febd5bcb4b3babe8e72612727165b819de485f00.roa (raw, json)
Hash identifier:          M1IW3hrY8bkeQhzFggPZ4sedN9h9Ck9g20lmMxKc6VI=
Subject key identifier:   0C:CF:41:55:FE:6D:63:FD:AE:A3:75:40:6A:55:BC:4D:91:06:A8:27
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       234052
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/febd5bcb4b3babe8e72612727165b819de485f00.roa
Signing time:             Wed 17 May 2023 14:24:26 +0000
ROA not before:           Tue 16 May 2023 14:24:26 +0000
ROA not after:            Sat 17 May 2025 14:24:26 +0000
asID:                     52224
IP address blocks:        200.0.88.0/24 maxlen: 24
                          200.10.60.0/24 maxlen: 24
                          200.7.86.0/24 maxlen: 24
                          2001:13c7:7010::/48 maxlen: 48
                          2001:13c7:7012::/48 maxlen: 48
                          2801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2310226 (0x234052)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: May 16 14:24:26 2023 GMT
            Not After : May 17 14:24:26 2025 GMT
        Subject: CN=febd5bcb4b3babe8e72612727165b819de485f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:8a:29:92:27:f9:78:78:83:09:1a:eb:79:
                    70:0d:01:dc:0b:c2:9e:18:4b:95:6f:1e:2b:ae:00:
                    24:13:15:1c:00:eb:0b:80:3f:1b:0b:8e:06:e7:c1:
                    ad:d0:b9:80:e2:fd:f0:10:ac:1d:58:34:86:8f:56:
                    05:ba:ef:3a:3b:c0:83:9a:15:64:41:c0:5c:43:74:
                    79:f5:28:c8:4f:4e:73:76:53:db:bd:0c:92:12:1d:
                    14:96:de:87:84:51:38:d3:65:e5:f7:31:c5:99:39:
                    fb:00:6f:b1:57:9f:00:e0:76:21:b1:9c:b7:7c:e2:
                    fc:2a:6b:f6:8a:b4:5d:d6:0e:77:8d:64:e2:23:30:
                    67:32:4f:bc:9b:41:96:0d:d2:e8:13:83:87:70:fc:
                    14:08:01:6d:0b:2f:56:4b:13:93:2e:73:10:07:a8:
                    46:09:97:ea:20:56:98:2c:f6:cf:b1:a3:de:71:5e:
                    57:77:53:79:1e:ca:2c:01:32:2b:53:7e:58:67:9f:
                    51:5b:db:d6:1e:8e:4d:b4:92:79:12:86:77:df:a3:
                    75:53:88:2f:a6:13:dd:43:42:18:58:d5:24:0d:37:
                    db:8f:02:c3:1e:c3:3c:8e:fa:72:df:e5:d4:48:c6:
                    c4:a2:eb:a5:53:72:b6:2c:a8:05:f0:9e:7d:6b:3c:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CF:41:55:FE:6D:63:FD:AE:A3:75:40:6A:55:BC:4D:91:06:A8:27
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/febd5bcb4b3babe8e72612727165b819de485f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.88.0/24
                  200.7.86.0/24
                  200.10.60.0/24
                IPv6:
                  2001:13c7:7010::/48
                  2001:13c7:7012::/48
                  2801::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:3b:64:18:cb:1e:b4:6f:1d:ce:77:32:36:bb:cb:47:a6:f8:
         e7:1b:54:ac:b9:76:d4:78:f5:02:69:ff:9e:38:bc:9b:71:5b:
         54:5f:d5:8d:81:15:50:a6:c5:8f:8c:b5:f7:f1:03:dc:3a:3d:
         ab:04:56:6a:9d:dd:1a:58:d3:4b:69:bb:59:d3:e6:7c:13:41:
         5c:05:17:1e:e4:ae:da:11:f8:53:9f:d4:b1:63:10:3e:ae:d9:
         15:66:f3:85:59:70:53:75:ec:8c:d5:b2:db:f8:43:5f:27:60:
         bd:df:6d:8d:27:19:53:b8:71:55:07:21:1c:ea:71:93:85:7b:
         4e:40:b8:67:48:b9:e4:b1:45:b0:1f:3c:28:d3:5d:8c:9a:50:
         d1:da:64:e2:7b:25:69:57:4e:a7:19:b7:ed:59:35:08:2c:09:
         28:94:b1:09:90:55:61:6d:e1:8a:75:7b:87:53:64:dd:0c:92:
         3a:91:00:6b:83:a0:36:e0:17:cb:d2:b5:16:13:4b:ec:30:05:
         3f:62:62:30:23:0a:6e:4b:19:c3:43:1d:34:84:bb:f0:ba:cb:
         b6:1d:20:5e:2c:b7:bc:99:3e:1b:92:70:5e:a0:10:23:6d:c4:
         15:86:36:10:ec:46:75:5c:35:1a:00:ca:aa:04:ad:aa:6b:87:
         c7:64:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:27 2024 by rpki-client on console-fra.rpki-client.org