Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/79a5a17a2bacf8430175e6eb2add2def592ea9a7.roa
File:                     79a5a17a2bacf8430175e6eb2add2def592ea9a7.roa (raw, json)
Hash identifier:          qQ4Ihbi00yUwvzOCW/Ia2/O2OkXZGNWTmKw/kOF5GJM=
Subject key identifier:   6C:3E:6C:16:75:D9:02:CF:EF:77:95:DF:A9:DC:0A:7C:4B:B0:21:EF
Certificate issuer:       /CN=5ab59f78162934a82dac9a1bd82bec4b6266225b
Certificate serial:       1E556A
Authority key identifier: E2:BD:0D:E9:77:BC:AE:75:04:2A:3F:F7:E5:CE:D1:D0:64:52:32:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ab59f78162934a82dac9a1bd82bec4b6266225b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/79a5a17a2bacf8430175e6eb2add2def592ea9a7.roa
Signing time:             Mon 22 Jan 2024 14:41:06 +0000
ROA not before:           Mon 22 Jan 2024 14:41:06 +0000
ROA not after:            Mon 22 Jan 2029 14:41:06 +0000
asID:                     264845
IP address blocks:        201.219.252.0/23 maxlen: 24
                          2800:700::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987946 (0x1e556a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab59f78162934a82dac9a1bd82bec4b6266225b
        Validity
            Not Before: Jan 22 14:41:06 2024 GMT
            Not After : Jan 22 14:41:06 2029 GMT
        Subject: CN=79a5a17a2bacf8430175e6eb2add2def592ea9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1e:b2:43:fb:54:99:c2:80:79:c6:e0:d7:0a:
                    28:a5:3b:a3:ef:30:18:d0:dc:fe:a7:21:68:3e:e3:
                    21:ad:8e:19:de:f4:ab:ad:78:fa:0b:29:1a:ce:3c:
                    e5:f2:8e:a1:2b:ed:26:54:08:20:76:af:b8:49:f0:
                    10:76:b0:0c:01:ab:4c:c6:ff:71:0f:15:7a:f1:5c:
                    bf:77:e2:ba:0e:ab:f6:de:62:e7:f3:3c:38:f7:7f:
                    34:7b:0f:94:09:b5:ba:66:b3:75:c8:e3:93:62:27:
                    b2:30:10:6d:ca:9f:df:50:54:1a:97:39:c0:06:c8:
                    79:f0:3a:64:60:5b:11:66:af:2e:bc:48:80:67:dc:
                    27:0f:f4:bf:39:96:b9:0d:83:fa:2f:56:ff:11:02:
                    52:95:8c:ea:2a:75:77:7e:d7:e8:d1:b6:f1:af:d1:
                    1a:19:7e:90:33:93:6a:22:69:2c:a4:7a:0a:dd:36:
                    3a:89:7a:5b:7e:27:0e:32:49:cf:3d:64:40:11:7d:
                    af:2a:50:fe:0b:2c:8f:63:fb:90:c3:f3:6f:8d:b2:
                    f6:00:ab:41:82:e3:a3:8d:cd:e4:10:57:6f:7e:3c:
                    83:7b:fe:48:2f:e7:98:67:52:61:36:88:fd:f6:33:
                    a9:9b:37:8a:dd:c3:0c:b4:9f:c5:59:26:ec:1a:2e:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3E:6C:16:75:D9:02:CF:EF:77:95:DF:A9:DC:0A:7C:4B:B0:21:EF
            X509v3 Authority Key Identifier:
                keyid:E2:BD:0D:E9:77:BC:AE:75:04:2A:3F:F7:E5:CE:D1:D0:64:52:32:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ab59f78162934a82dac9a1bd82bec4b6266225b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/79a5a17a2bacf8430175e6eb2add2def592ea9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/5ab59f78162934a82dac9a1bd82bec4b6266225b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/23
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:10:99:b1:83:d9:db:20:54:82:97:3e:17:7a:36:28:39:38:
         23:10:bf:fb:48:40:0f:7f:9d:ed:86:ef:78:dc:e0:c5:cb:9c:
         02:6f:af:c9:aa:0b:33:5d:1e:00:42:7e:84:b5:41:dd:b7:74:
         63:85:c1:20:b4:45:84:ff:bd:87:6c:58:e9:26:78:99:89:0e:
         c7:b1:a0:9d:83:08:5d:f5:61:37:4f:12:ed:80:b3:01:8a:f4:
         be:07:20:b5:fc:ed:70:9e:3d:91:b1:b4:06:cc:72:0c:0a:8d:
         02:b1:2f:ea:e4:b8:9a:49:c0:bc:69:1a:84:ef:ee:c8:9d:ad:
         f6:0c:cd:27:69:d4:ec:e9:92:fc:de:4b:81:d0:d0:c3:ed:f0:
         cc:5e:61:3b:f0:56:40:25:f1:ab:a6:07:59:90:3c:cb:de:ed:
         e0:81:36:fb:a2:5f:9d:67:45:06:52:68:eb:af:40:40:6a:25:
         17:92:65:96:3e:f7:fc:6f:fb:e2:66:a9:80:34:fa:87:44:c2:
         33:dc:0f:9f:23:b6:e0:33:89:fd:69:09:b5:6b:d2:a6:8f:ab:
         86:fc:24:54:7d:25:cc:ce:87:7c:ea:62:04:42:72:4d:59:db:
         b6:07:50:f3:a6:27:5a:6c:71:b6:a4:d9:7a:14:c0:b9:0c:6f:
         9b:9e:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----