Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33383a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a33383a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          gIOE+f2hbGaaCgRz3PLI4ny/4lhh3TcZnfs6HTubblo=
Subject key identifier:   D5:27:55:23:E9:A2:84:56:63:61:0F:C9:D5:EB:6C:2F:42:33:50:EA
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       05472C3151BB1A7BF8ED695059008D377949AC27
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33383a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:46 +0000
ROA not before:           Tue 05 Mar 2024 18:10:46 +0000
ROA not after:            Tue 04 Mar 2025 18:15:46 +0000
asID:                     271891
IP address blocks:        2801:151:38::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:47:2c:31:51:bb:1a:7b:f8:ed:69:50:59:00:8d:37:79:49:ac:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:46 2024 GMT
            Not After : Mar  4 18:15:46 2025 GMT
        Subject: CN=D5275523E9A2845663610FC9D5EB6C2F423350EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2e:18:79:b2:12:e7:c5:86:5d:13:66:5e:a8:
                    d9:78:0c:b3:ba:08:c7:dc:ae:30:0e:50:b8:26:ea:
                    0e:7e:99:9b:1c:5e:47:f4:94:86:e6:06:31:39:36:
                    0c:d4:67:25:30:50:f5:dc:06:2e:8f:ad:6c:db:2f:
                    b6:f4:bc:be:4c:23:fa:e4:aa:d4:29:8f:0b:c5:d9:
                    05:f6:24:81:74:a5:4b:9f:84:3e:22:05:83:c0:3e:
                    55:f8:11:2a:45:16:38:a7:42:ec:c3:3e:d7:4c:a5:
                    fc:db:9e:a0:ea:c7:7c:b7:8a:51:06:06:11:00:b0:
                    b8:07:4f:95:3f:4a:5e:21:b2:1a:66:19:c2:d7:a6:
                    ee:44:ac:49:6a:e2:67:a4:e1:26:38:4b:c9:97:6d:
                    51:01:64:d9:8b:04:a9:34:f6:84:58:3b:f5:30:aa:
                    eb:9a:7f:7e:a4:3b:64:91:b4:1e:05:cb:10:a2:e1:
                    60:4f:6b:5d:93:c8:68:24:cc:92:8d:95:fa:b3:1a:
                    31:ea:35:7e:7d:cc:4b:6d:44:c5:75:9f:b3:2e:ce:
                    75:2d:6b:09:f5:8e:37:b1:f0:e0:ea:90:f1:5d:f7:
                    3d:a4:b8:41:0f:c5:c2:c5:5a:14:b1:1a:96:30:ae:
                    be:a4:12:fc:88:73:4d:82:40:cb:8c:e9:c5:c9:90:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:27:55:23:E9:A2:84:56:63:61:0F:C9:D5:EB:6C:2F:42:33:50:EA
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a33383a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:38::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:c7:b2:15:cf:be:bf:36:c6:52:6d:e1:41:82:58:84:17:9a:
         df:eb:2e:35:e3:cd:41:9e:d4:d3:fb:5f:f5:27:c7:b1:f7:e5:
         f3:85:d7:72:f1:26:97:f4:35:c8:8f:8d:3a:90:cc:96:2a:01:
         4d:21:cb:29:99:e3:61:2e:cf:d2:b9:f7:bc:7d:51:63:c3:41:
         18:a4:46:43:e5:70:83:27:c1:68:cc:b9:0e:37:35:3d:a0:62:
         b5:60:f4:81:89:9b:e9:39:1f:9c:fe:55:a4:dd:bf:0c:32:d8:
         45:e7:9a:a7:b6:da:35:0b:56:41:11:af:72:61:9b:0c:58:55:
         12:7f:fc:35:74:8a:ae:13:6c:2c:38:d8:30:f6:d5:33:da:c5:
         40:3f:0b:0b:41:1c:57:68:3e:f8:45:3f:d7:05:08:ae:4b:76:
         f9:30:00:a2:94:fd:00:6b:af:02:c6:bd:46:af:01:f2:0a:4b:
         bb:a9:3b:f6:8b:80:e7:ee:8e:c7:5b:cb:56:38:56:1e:14:a0:
         31:7d:0c:a8:fb:db:87:65:ae:f2:ff:f6:55:5f:4c:ce:ca:94:
         e8:91:08:31:61:11:04:25:d2:5b:ec:72:7d:c1:fc:78:d5:7a:
         16:bc:b0:8e:32:e3:1d:51:13:4b:3a:5e:e6:96:2b:fb:d9:c2:
         fe:a9:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----