Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a353a3a2f34382d3438203d3e2033383136.roa
File:                     323830313a3166393a353a3a2f34382d3438203d3e2033383136.roa (raw, json)
Hash identifier:          2XWsy+fjh6vDr7UUtiVrV+V6WdzpMLG5fF1BUc11RhU=
Subject key identifier:   9E:D6:89:96:30:FA:38:E4:87:F6:47:ED:33:A7:9C:BD:D2:C6:CD:CB
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       654B6B05E3757BAD69FBD60DEC2A400336D4621E
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a353a3a2f34382d3438203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 18:02:20 +0000
ROA not before:           Tue 05 Mar 2024 17:57:20 +0000
ROA not after:            Tue 04 Mar 2025 18:02:20 +0000
asID:                     3816
IP address blocks:        2801:1f9:5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4b:6b:05:e3:75:7b:ad:69:fb:d6:0d:ec:2a:40:03:36:d4:62:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Mar  5 17:57:20 2024 GMT
            Not After : Mar  4 18:02:20 2025 GMT
        Subject: CN=9ED6899630FA38E487F647ED33A79CBDD2C6CDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:7c:75:2d:c1:7f:cf:e1:64:a0:6a:56:04:
                    b9:83:a9:a1:58:a2:a8:e3:af:5f:0f:fb:67:db:b8:
                    89:37:28:c7:07:43:49:82:96:75:94:b8:79:05:78:
                    ba:30:7a:9e:f6:c4:3f:0a:3b:8b:83:c2:00:ff:9a:
                    43:63:ed:c2:46:16:ac:fe:4b:88:a1:4a:90:bb:41:
                    9b:79:e4:ef:6d:83:47:1c:5b:3c:fb:83:2a:f3:be:
                    9a:b3:38:c2:93:96:f8:e0:df:74:b3:1d:f9:54:0f:
                    f2:0f:bc:5e:13:2c:cd:25:b9:c9:e1:3e:1a:21:7b:
                    99:05:11:24:3e:94:3b:2e:ec:22:e0:2f:ed:d1:1b:
                    46:99:94:e7:83:39:6e:8a:dc:ad:11:a7:b7:a7:0f:
                    5e:f4:d8:a7:35:f0:04:7e:94:66:bd:48:52:eb:1c:
                    23:67:07:a6:6c:43:77:df:80:a8:93:c9:72:c1:ad:
                    e4:58:77:ea:a3:bb:7d:fb:2f:4e:6c:62:a5:1d:a0:
                    df:96:db:64:be:5e:d6:da:af:7e:6a:ef:a9:99:7f:
                    fd:a2:fd:41:c6:62:7c:ff:fd:d2:c0:f3:ba:90:2d:
                    fa:f2:71:12:87:c1:34:a4:f5:d9:f0:24:e0:58:0e:
                    4e:f6:d8:e1:20:e7:04:4b:53:b8:c7:f2:cd:8a:f0:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:89:96:30:FA:38:E4:87:F6:47:ED:33:A7:9C:BD:D2:C6:CD:CB
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a353a3a2f34382d3438203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:70:5a:aa:0a:f3:67:ca:ec:e6:30:c1:e5:25:a3:f7:8c:8e:
         28:7f:35:aa:04:6a:f2:e9:20:8e:d7:45:47:b6:96:be:58:9b:
         8b:4c:57:a4:bc:0c:97:cd:0b:76:c9:53:00:70:45:ba:c9:1d:
         b7:11:f2:ec:d6:22:e2:67:35:17:43:9f:20:05:fd:12:0f:2a:
         4b:67:02:0d:44:2e:ed:06:28:f0:aa:6d:f0:e5:c3:68:bc:67:
         f2:fb:c5:47:f1:c9:4a:0f:76:d9:15:d0:5f:60:ab:41:2c:24:
         8c:f1:b6:df:9f:63:3c:f9:c6:06:85:54:0b:e6:fa:6b:ba:79:
         c9:b1:40:00:c7:21:16:85:d3:54:50:8f:6b:55:00:77:4b:e2:
         96:97:a4:d1:46:d4:0a:bd:88:ba:d0:bc:f3:7f:c0:3d:3a:6b:
         66:bb:e0:67:94:15:8b:c8:96:d5:b0:09:f0:87:3f:a5:d4:1c:
         16:17:21:93:ba:27:8b:a3:f6:91:80:37:cf:1d:08:44:01:6c:
         4d:03:86:44:c3:fe:74:2d:67:2f:cb:17:2d:61:2e:76:c3:68:
         36:62:b7:a2:a9:89:c8:5c:4b:4d:3c:02:62:84:3a:19:4d:0d:
         a6:7e:ff:15:69:ce:e0:6a:33:27:c2:e5:ae:00:f8:31:dc:73:
         0a:51:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----