Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a373a3a2f34382d3438203d3e2033383136.roa
File:                     323830313a3166393a373a3a2f34382d3438203d3e2033383136.roa (raw, json)
Hash identifier:          3PWAP34Mn3w1cbVJUURcJUuNVtaYzovGk/1k9rXOEtA=
Subject key identifier:   34:36:F5:C5:F8:0C:6B:DF:A2:3D:27:13:77:1B:CC:80:D3:04:24:56
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       160BB4B3F510C428889E15930D36B73B13C9569B
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a373a3a2f34382d3438203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 18:02:19 +0000
ROA not before:           Tue 05 Mar 2024 17:57:19 +0000
ROA not after:            Tue 04 Mar 2025 18:02:19 +0000
asID:                     3816
IP address blocks:        2801:1f9:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0b:b4:b3:f5:10:c4:28:88:9e:15:93:0d:36:b7:3b:13:c9:56:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Mar  5 17:57:19 2024 GMT
            Not After : Mar  4 18:02:19 2025 GMT
        Subject: CN=3436F5C5F80C6BDFA23D2713771BCC80D3042456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c3:18:a4:cd:72:56:a5:59:bb:d5:06:d6:19:
                    06:5b:7f:38:ce:19:b9:7a:5f:a3:8c:b1:3d:77:a1:
                    cf:8c:ec:a5:ae:11:2c:a6:ed:4d:d4:ac:c4:e3:3c:
                    10:aa:6a:c3:53:33:78:10:9d:a2:d9:7d:5e:ac:c7:
                    4c:07:a7:3c:73:20:a2:f6:83:e7:19:65:1f:fd:16:
                    2e:3e:02:54:5a:e6:55:88:d1:2e:9b:6f:32:cd:15:
                    c3:5f:82:5a:bb:b4:74:b9:a1:df:80:62:ee:a1:a1:
                    19:bb:b2:11:16:61:99:61:41:04:99:80:e4:3e:f5:
                    80:8b:8f:73:d8:6d:95:96:60:4f:c5:c2:8f:b0:86:
                    a7:ad:de:a7:94:80:c7:fc:c8:5a:a6:8d:fd:c0:89:
                    75:d4:e2:bc:88:75:e1:6b:1b:d9:f3:5b:e5:c4:22:
                    79:69:c0:4c:20:60:4a:ab:61:45:6f:29:34:58:75:
                    18:77:50:74:70:1c:18:42:6d:f2:39:bd:90:07:b9:
                    5e:79:e3:c4:df:fd:db:19:3b:28:06:78:f9:59:d2:
                    85:bf:79:c4:6b:68:13:65:28:7a:ca:04:22:4c:3c:
                    bd:bc:6e:2f:c5:20:62:03:4b:b2:cd:bf:ab:c7:fe:
                    1b:57:29:2a:63:78:18:86:3c:69:17:37:12:e6:14:
                    24:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:36:F5:C5:F8:0C:6B:DF:A2:3D:27:13:77:1B:CC:80:D3:04:24:56
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a373a3a2f34382d3438203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:41:a3:28:15:54:ba:29:2b:96:87:cb:ea:95:dd:85:6b:cb:
         9c:50:13:65:4d:ec:af:3b:c3:55:8d:16:4e:bf:2c:a6:1e:ae:
         d1:6e:92:7b:f9:50:08:f4:ac:38:47:80:af:5f:e6:88:b2:01:
         9e:27:25:48:fd:68:78:f6:14:aa:f5:20:34:52:5f:6d:7d:6c:
         63:e8:d1:47:0a:c0:97:fe:30:97:9f:fd:f0:f1:89:60:1b:e3:
         1d:ab:79:28:c7:0d:e4:0f:b6:c9:24:50:30:a3:b4:e3:a4:9f:
         e5:25:fa:2a:b8:b2:49:95:32:3f:a0:5a:07:65:a5:65:f8:f7:
         69:7d:a3:c9:23:47:9e:50:11:f1:a7:f8:98:93:ac:06:1d:f1:
         1c:7a:6a:02:37:89:d9:59:2e:ed:96:63:dd:c4:2f:13:07:7c:
         d4:54:cb:b7:93:d1:24:ad:41:97:82:b0:d1:87:0a:51:9b:02:
         ce:0a:f8:72:e5:3b:ef:e0:d0:bb:08:87:17:b5:37:18:d8:19:
         29:40:33:a2:68:58:84:7d:ba:9f:77:76:1f:4f:e0:b2:1f:d2:
         88:d7:c9:45:02:93:9f:45:bb:78:10:35:0b:9d:dd:51:bb:77:
         fb:41:fd:a0:81:15:85:39:a7:76:12:25:51:ee:30:5d:69:53:
         34:f4:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----