Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35323a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a35323a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          weSIMMW5tOnUasK57uMI9+mq5jL/QyFf5KQ5Fw8PivY=
Subject key identifier:   7E:07:30:F6:5A:17:A5:B0:2A:96:0E:EE:21:6D:48:52:8A:B4:FB:B6
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       72460BF812A74C80DA248CD0CF99F5FCB01DE0A2
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35323a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:49 +0000
ROA not before:           Tue 05 Mar 2024 18:10:49 +0000
ROA not after:            Tue 04 Mar 2025 18:15:49 +0000
asID:                     271891
IP address blocks:        2801:151:52::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:46:0b:f8:12:a7:4c:80:da:24:8c:d0:cf:99:f5:fc:b0:1d:e0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:49 2024 GMT
            Not After : Mar  4 18:15:49 2025 GMT
        Subject: CN=7E0730F65A17A5B02A960EEE216D48528AB4FBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:e6:52:74:6a:a0:48:7f:b1:9f:1c:5a:38:
                    d7:72:27:67:6a:bc:08:ee:e2:5d:66:66:bb:23:c5:
                    b1:bd:55:d3:36:7e:b7:dc:d1:66:62:4c:c1:32:9e:
                    74:32:95:2c:f3:62:3f:8c:35:e6:2e:c9:28:8e:28:
                    a4:94:02:a7:ce:56:e3:78:bf:71:82:7d:95:c5:17:
                    39:f3:83:16:43:ea:d0:72:63:98:27:fa:ed:91:ef:
                    c0:e7:a1:fd:f7:a0:d8:cd:c3:d6:0a:72:f3:74:65:
                    64:df:59:bc:74:fc:a0:0c:7b:67:9c:bf:3e:2b:94:
                    cc:c8:49:35:a0:19:1d:05:c3:9e:e0:d2:4d:6a:57:
                    c1:26:c2:3f:3e:b9:a2:ee:26:45:ad:50:54:86:6c:
                    06:8f:97:84:7e:a3:b9:b3:2d:cd:87:07:c8:15:e3:
                    9f:e2:ad:83:25:be:74:dc:2d:ec:f4:f3:74:01:08:
                    20:47:32:e2:af:60:ca:b9:d1:07:9a:fa:0d:88:37:
                    cb:c3:7b:be:20:fc:ee:e9:a0:3c:0a:dd:3e:9a:0c:
                    11:9a:2d:e7:c5:e5:af:e4:35:fe:e6:ce:2c:13:3e:
                    80:73:ae:ed:94:a1:de:e8:3c:94:fd:17:3d:16:be:
                    3f:ca:10:d5:a7:7f:34:c8:36:e4:dc:9d:d8:fa:f4:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:07:30:F6:5A:17:A5:B0:2A:96:0E:EE:21:6D:48:52:8A:B4:FB:B6
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a35323a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:52::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:83:2d:f0:dc:87:2c:10:3f:86:4f:eb:af:74:52:f3:93:39:
         07:61:38:a1:64:74:dc:80:72:7c:eb:1f:61:42:1a:81:6b:db:
         ed:69:7d:31:c3:2f:7e:c1:fc:7d:a9:ff:5f:8c:c7:7f:5b:69:
         7f:7b:b9:3c:32:d7:91:1e:35:2f:13:14:55:02:39:a6:3a:f0:
         2a:ca:b2:ba:56:76:f3:e5:fc:a9:92:b1:9e:26:e4:74:a8:ec:
         b5:b9:6a:07:92:8d:1a:cf:03:ef:28:b8:d2:81:f0:13:a2:4c:
         6d:81:08:1f:a3:12:70:65:5e:ab:21:31:76:0c:2c:68:3f:e8:
         f1:fe:e8:b1:ec:32:82:10:ed:74:4c:3e:34:ae:d8:9d:99:7a:
         b7:6b:85:52:c1:bd:37:54:e2:be:6a:70:c5:53:1d:51:d5:ef:
         e8:cc:20:b5:f8:5c:5b:b3:59:24:3c:62:77:82:8d:78:bf:1c:
         33:63:f0:e1:6b:78:3c:01:d5:c9:d7:62:ba:a7:dc:1f:ac:52:
         6f:93:c4:a0:af:9b:4c:2a:1e:41:2b:7a:df:46:33:4a:64:a2:
         a6:2a:a3:db:4e:11:d8:97:9c:e3:88:4a:b3:5a:67:07:32:63:
         1c:cf:86:43:fd:5d:95:68:9d:80:a5:ea:63:a6:48:64:66:c7:
         42:0a:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----