Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/79b6dac796fa2a7e6027d2a6989bfb15f0c652f6.roa
File:                     79b6dac796fa2a7e6027d2a6989bfb15f0c652f6.roa (raw, json)
Hash identifier:          Bytp9T8Znz0rQOIxlsXPSgh6GCc5oOeld+cf7Uxvq3w=
Subject key identifier:   D4:76:F1:59:48:7C:4E:BE:BB:75:45:B5:9B:96:E7:DB:33:7B:96:5D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       088939
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/79b6dac796fa2a7e6027d2a6989bfb15f0c652f6.roa
Signing time:             Sat 30 Jul 2022 05:18:51 +0000
ROA not before:           Sat 30 Jul 2022 03:00:00 +0000
ROA not after:            Sun 30 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559417 (0x88939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 30 03:00:00 2022 GMT
            Not After : Jul 30 03:00:00 2023 GMT
        Subject: CN=79b6dac796fa2a7e6027d2a6989bfb15f0c652f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:44:2c:cf:1c:9b:b8:5f:68:c7:80:b6:4f:
                    52:67:f1:74:2a:67:0f:49:e3:6b:72:ad:04:7c:84:
                    58:8d:44:76:3f:b3:56:12:37:04:32:83:e7:55:e6:
                    fb:98:a6:ba:49:c7:ac:f5:78:e2:fc:a4:51:65:4a:
                    bb:43:95:6f:c4:09:3e:fa:f9:d5:86:d1:13:ea:49:
                    d1:e0:ef:4a:ae:e8:3d:15:28:0a:09:3d:75:7a:e8:
                    65:1a:9d:f6:23:42:44:6d:be:2c:4b:27:32:75:31:
                    35:d5:dc:68:aa:39:d3:b6:ba:6d:bc:a4:e0:1e:e8:
                    a6:21:a0:d1:61:62:4b:72:e0:c4:db:1f:42:03:e2:
                    36:51:5e:b9:6a:0f:c2:a9:b3:b2:bb:c0:41:90:b3:
                    87:2c:a0:c1:42:66:38:5d:6e:0b:c1:2d:91:38:08:
                    bf:87:f6:9f:e4:10:ca:54:d7:f0:a6:6f:a6:58:ff:
                    80:7c:78:ff:7f:f5:fa:0c:7f:b7:8d:89:f7:1b:03:
                    c6:3f:6c:04:32:8c:35:c5:2f:56:2b:32:ab:6d:7b:
                    11:f9:91:42:d4:2d:91:d5:5e:10:75:88:ce:d2:38:
                    97:b1:3c:69:e8:6f:70:d1:0e:10:ce:85:59:30:70:
                    f0:64:5a:12:2a:4c:03:3e:c9:4e:24:94:28:67:f3:
                    b8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:76:F1:59:48:7C:4E:BE:BB:75:45:B5:9B:96:E7:DB:33:7B:96:5D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/79b6dac796fa2a7e6027d2a6989bfb15f0c652f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:42:51:1d:29:a3:c2:da:b3:85:42:30:35:91:dd:8c:99:
         36:ab:73:da:23:ef:6b:58:ca:27:89:c1:04:8f:89:b0:f6:e1:
         b0:1c:3a:b9:a6:05:18:83:e1:49:ba:ab:73:73:71:6a:b7:91:
         8e:a3:5a:f4:84:4f:48:db:78:e9:c1:49:7b:ad:cf:f9:c9:2b:
         c0:84:8f:b4:3a:fb:e5:f8:8f:97:99:fa:16:7c:da:5e:32:63:
         2f:1c:d6:27:30:2b:1f:96:0b:55:1e:8f:b5:e0:16:e1:9e:0d:
         9d:75:fa:6e:a7:8f:d3:32:f3:34:a1:9d:f3:f5:97:da:5a:cd:
         67:81:a9:af:27:31:bc:64:08:57:d1:e6:f7:12:7b:91:1a:65:
         b0:03:de:5f:92:70:72:9c:1e:9b:3e:1c:e4:03:38:ca:de:00:
         4c:89:c1:33:9b:f5:3a:01:5e:38:6e:d2:f5:30:f0:2d:a8:83:
         8c:68:02:6b:b8:7b:3f:40:28:1a:55:f4:22:92:35:10:1d:9f:
         c1:51:e4:ae:98:8c:90:95:ce:20:a4:bd:2c:f0:ac:81:a3:3d:
         4a:c8:45:2d:19:7d:37:5b:0e:09:94:89:5a:5a:51:0f:f7:d3:
         05:05:32:47:1b:1a:a1:ad:43:56:1e:fb:3b:26:21:d7:d1:cd:
         dc:4d:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org