Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a393a3a2f34382d3438203d3e2033383136.roa
File:                     323830313a3166393a393a3a2f34382d3438203d3e2033383136.roa (raw, json)
Hash identifier:          5YsmMsixGyTDf1S8bBIXUZ/tS5MBHW9cLwOk8Gg3dwM=
Subject key identifier:   D7:BB:DA:44:59:AD:F4:F4:E3:8B:2C:5D:10:7A:57:DD:14:C1:A0:EF
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       1524C41EF0A84FB6F2C3B5DBA684E3D30229BE4B
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a393a3a2f34382d3438203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 18:02:18 +0000
ROA not before:           Tue 05 Mar 2024 17:57:18 +0000
ROA not after:            Tue 04 Mar 2025 18:02:18 +0000
asID:                     3816
IP address blocks:        2801:1f9:9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:24:c4:1e:f0:a8:4f:b6:f2:c3:b5:db:a6:84:e3:d3:02:29:be:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Mar  5 17:57:18 2024 GMT
            Not After : Mar  4 18:02:18 2025 GMT
        Subject: CN=D7BBDA4459ADF4F4E38B2C5D107A57DD14C1A0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:48:4a:d7:91:d2:42:79:e5:e2:96:3c:1a:
                    b6:c6:aa:9b:7b:27:df:e1:97:df:20:1e:18:8b:b5:
                    4d:60:69:14:1b:dc:8e:6a:29:04:6c:e2:9e:3b:c8:
                    8c:0a:3d:5f:f5:4c:3e:2d:17:5d:16:56:4b:f5:d2:
                    ae:d7:1f:99:7a:fe:2a:31:cf:5b:98:b8:35:24:00:
                    48:51:cf:58:cc:1f:b6:da:e8:b2:79:a0:c1:2b:09:
                    5b:74:1c:e1:7c:cf:86:46:c6:62:7b:94:39:16:dc:
                    f5:53:ee:18:52:ee:92:e3:29:67:27:b3:87:8f:1d:
                    46:bc:c5:a0:3c:28:04:cf:69:6b:70:de:b9:e0:f7:
                    21:0f:5f:bd:62:0c:55:4f:a9:59:ba:2b:9e:8d:07:
                    77:fa:1e:c8:67:1b:58:93:15:b6:7a:44:c1:ae:63:
                    72:03:b6:7e:95:12:7e:d5:a6:12:4c:b4:be:96:27:
                    5c:9f:99:a7:9c:ad:32:84:c7:67:36:18:25:a9:3e:
                    17:38:94:77:73:45:48:54:31:c3:19:88:0f:d4:b8:
                    59:f1:85:84:ef:4d:7e:5b:63:62:a3:25:8e:0c:1d:
                    21:a6:55:ec:a0:f7:97:b9:8f:71:b4:59:e6:2f:ee:
                    e0:80:bc:b2:a5:89:aa:d4:07:aa:6f:b8:ad:f1:8e:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:DA:44:59:AD:F4:F4:E3:8B:2C:5D:10:7A:57:DD:14:C1:A0:EF
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a393a3a2f34382d3438203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:38:cd:f8:26:bc:23:87:e2:62:b8:7e:32:51:ce:26:d2:
         04:e0:08:cb:14:72:8a:b4:e6:f1:2f:0d:7a:30:b4:03:04:ab:
         1c:8f:a7:db:33:eb:5c:93:d3:22:e4:f9:ad:a2:b2:16:cd:5b:
         20:67:0e:66:6c:8a:42:55:11:ea:5a:b9:9a:06:9b:ea:df:5f:
         92:8f:66:73:3b:56:c5:57:2e:0c:57:0f:74:3b:fd:3d:2b:34:
         1e:6c:6f:84:aa:53:af:05:3c:3c:24:10:f5:5e:74:d5:f4:a4:
         6e:db:21:5a:38:56:c0:2f:b3:3b:e0:d1:40:ff:8a:61:f2:53:
         52:9d:04:4d:53:e9:c3:49:84:39:c2:ca:20:52:f7:2a:93:e3:
         3a:05:4e:f9:70:cb:e4:8e:0e:01:c5:99:a8:24:f2:9b:61:d5:
         3a:3c:3f:28:b5:14:cd:79:7d:a6:88:f8:17:b5:b6:3c:c2:65:
         23:5c:5b:96:6d:78:98:7f:25:2b:f8:f3:ec:23:ad:19:3b:ea:
         b7:de:be:09:dc:31:33:fb:de:c5:91:63:16:be:a3:49:a6:c5:
         40:fa:16:9c:80:bd:07:85:15:ee:ea:46:fa:c3:b9:0f:5f:37:
         fa:a6:12:a7:99:a9:8d:96:0f:18:f5:fb:2a:63:52:bf:1e:49:
         8c:75:09:e6
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUFSTEHvCoT7byw7XbpoTj0wIpvkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkxRUMxOUJBQzUzMUU5Q0Q4MkYzRDhGMEQyQkJDRkJF
NDE1MEJCMDAeFw0yNDAzMDUxNzU3MThaFw0yNTAzMDQxODAyMThaMDMxMTAvBgNV
BAMTKEQ3QkJEQTQ0NTlBREY0RjRFMzhCMkM1RDEwN0E1N0REMTRDMUEwRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQEhK15HSQnnl4pY8GrbGqpt7
J9/hl98gHhiLtU1gaRQb3I5qKQRs4p47yIwKPV/1TD4tF10WVkv10q7XH5l6/iox
z1uYuDUkAEhRz1jMH7ba6LJ5oMErCVt0HOF8z4ZGxmJ7lDkW3PVT7hhS7pLjKWcn
s4ePHUa8xaA8KATPaWtw3rng9yEPX71iDFVPqVm6K56NB3f6HshnG1iTFbZ6RMGu
Y3IDtn6VEn7VphJMtL6WJ1yfmaecrTKEx2c2GCWpPhc4lHdzRUhUMcMZiA/UuFnx
hYTvTX5bY2KjJY4MHSGmVeyg95e5j3G0WeYv7uCAvLKliarUB6pvuK3xjvxvAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU17vaRFmt9PTjiyxdEHpX3RTBoO8wHwYDVR0j
BBgwFoAUuR7Bm6xTHpzYLz2PDSu8++QVC7AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RUU0MjVENTREQkE4RjE3Rjg2QTZBRTdFNUIxNjZCMEQ2
QzYzOERCNjE3RDE2REMyRUNEMjJFRDczQkFDNzY3LzAvQjkxRUMxOUJBQzUzMUU5
Q0Q4MkYzRDhGMEQyQkJDRkJFNDE1MEJCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTFFQzE5QkFDNTMxRTlDRDgy
RjNEOEYwRDJCQkNGQkU0MTUwQkIwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUVFNDI1RDU0REJBOEYxN0Y4NkE2QUU3RTVCMTY2QjBENkM2MzhEQjYx
N0QxNkRDMkVDRDIyRUQ3M0JBQzc2Ny8wLzMyMzgzMDMxM2EzMTY2MzkzYTM5M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQH5AAkw
DQYJKoZIhvcNAQELBQADggEBAGEPOM34Jrwjh+JiuH4yUc4m0gTgCMsUcoq05vEv
DXowtAMEqxyPp9sz61yT0yLk+a2ishbNWyBnDmZsikJVEepauZoGm+rfX5KPZnM7
VsVXLgxXD3Q7/T0rNB5sb4SqU68FPDwkEPVedNX0pG7bIVo4VsAvszvg0UD/imHy
U1KdBE1T6cNJhDnCyiBS9yqT4zoFTvlwy+SODgHFmagk8pth1To8Pyi1FM15faaI
+Be1tjzCZSNcW5ZteJh/JSv48+wjrRk76rfevgncMTP73sWRYxa+o0mmxUD6FpyA
vQeFFe7qRvrDuQ9fN/qmEqeZqY2WDxj1+ypjUr8eSYx1CeY=
-----END CERTIFICATE-----