Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a3a2f34382d3438203d3e2033383136.roa
File:                     323830313a3166393a3a2f34382d3438203d3e2033383136.roa (raw, json)
Hash identifier:          wFx2+4Y0dIKSWE8cW/G8w6FJQ+L5Bj0ldo1cs/RARUg=
Subject key identifier:   B6:92:24:9C:3A:B0:47:FA:22:08:64:7A:F9:07:CB:EB:41:89:15:2B
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       78EAC837CDAFC982670A4B9B0A82BBE7905DB97C
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a3a2f34382d3438203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 18:02:17 +0000
ROA not before:           Tue 05 Mar 2024 17:57:17 +0000
ROA not after:            Tue 04 Mar 2025 18:02:17 +0000
asID:                     3816
IP address blocks:        2801:1f9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ea:c8:37:cd:af:c9:82:67:0a:4b:9b:0a:82:bb:e7:90:5d:b9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Mar  5 17:57:17 2024 GMT
            Not After : Mar  4 18:02:17 2025 GMT
        Subject: CN=B692249C3AB047FA2208647AF907CBEB4189152B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:98:19:96:28:7a:4b:65:3c:55:db:40:82:91:
                    f4:3f:b5:20:85:04:2c:e8:d9:64:45:86:5b:df:d9:
                    47:7c:ef:a1:41:92:41:cf:4c:43:04:fb:15:2b:99:
                    cb:52:05:85:f7:79:a6:76:a6:a4:9b:c4:d2:6b:b4:
                    2b:bf:ff:fd:4c:e5:88:46:27:7b:98:78:af:51:b5:
                    6b:81:2b:f3:14:8e:0e:7e:c5:29:8c:f8:c1:4f:25:
                    7f:91:fa:d1:d0:bf:8b:8a:eb:33:91:cd:64:2e:87:
                    28:ee:03:05:0c:04:71:63:60:07:f4:b5:21:8f:42:
                    c7:d4:88:9b:5e:9f:36:9d:fc:d5:8e:fa:b1:f2:d8:
                    f6:fb:70:0d:86:85:47:25:ae:d3:fd:67:9e:ee:fb:
                    5f:f0:57:23:bb:9e:c1:43:2a:db:b7:e0:66:51:23:
                    41:06:26:6e:18:aa:f6:81:ff:fa:5f:72:fb:9f:64:
                    59:73:75:8d:88:f5:ea:87:82:8b:98:c9:d1:74:c2:
                    e5:8a:c9:d2:2e:aa:ce:a1:50:55:9a:72:1a:e5:02:
                    52:63:94:47:90:29:8c:94:c3:4d:1f:68:d4:f6:f6:
                    a5:fb:ef:86:33:92:d6:c9:2c:b1:80:f7:c8:09:f5:
                    5c:dc:b3:ea:03:3d:01:8a:f4:2c:34:1d:ef:02:b5:
                    c9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:92:24:9C:3A:B0:47:FA:22:08:64:7A:F9:07:CB:EB:41:89:15:2B
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a3a2f34382d3438203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:45:01:9f:46:b1:75:4e:5a:e2:93:d4:54:f2:1c:59:bd:
         ca:f2:8f:6e:80:40:c5:ec:86:90:88:c3:29:ca:f3:d9:bc:59:
         ad:8f:ad:c9:40:72:a6:69:96:73:5d:bb:47:23:02:e7:01:72:
         6d:f0:47:f3:fc:40:75:f1:82:14:10:1b:15:10:96:11:7a:41:
         b9:d0:54:a0:74:3e:82:19:a4:54:f0:4d:02:ab:9f:d8:c3:49:
         0a:27:45:98:dc:e1:7a:85:e3:d9:02:4c:a9:a5:a8:31:0b:1a:
         55:74:cd:47:13:87:5c:b3:4c:4a:d3:93:9e:34:77:5c:66:11:
         e2:7a:3d:c8:dc:8e:c6:5a:26:54:76:4e:10:55:0c:aa:33:a9:
         59:89:c3:2e:b3:14:f9:e1:b3:61:a8:ef:9f:2f:f8:3b:4d:66:
         06:62:e1:cb:08:2c:ca:06:9b:71:95:3a:00:0f:f7:ce:dc:71:
         9a:5e:73:78:d2:64:15:0c:30:cf:09:79:5f:e5:23:4d:c8:9e:
         2f:26:c3:ad:a3:bd:11:c3:b5:7c:34:93:21:94:80:df:1c:ed:
         6a:2c:2a:83:e0:10:35:b1:66:71:7f:71:e1:4c:f9:c6:6d:04:
         71:df:c0:ce:7a:3b:59:5d:f9:a4:5b:ca:be:9f:38:83:31:bc:
         32:2a:ad:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----