Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a65313a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a65313a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          PcdTENP674yYqG40ACUNT/hjoBxOXaXNxl+/RzRLjPI=
Subject key identifier:   F9:91:33:B4:86:C6:3E:5A:1F:B3:53:DE:92:AA:57:68:62:37:DE:2D
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       195B215919CF0AECEC0E6F218FC2EA4D1A133E20
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a65313a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:39 +0000
ROA not before:           Tue 05 Mar 2024 18:10:39 +0000
ROA not after:            Tue 04 Mar 2025 18:15:39 +0000
asID:                     271891
IP address blocks:        2801:151:e1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5b:21:59:19:cf:0a:ec:ec:0e:6f:21:8f:c2:ea:4d:1a:13:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:39 2024 GMT
            Not After : Mar  4 18:15:39 2025 GMT
        Subject: CN=F99133B486C63E5A1FB353DE92AA57686237DE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:a0:e9:13:7f:e2:33:3b:a8:2e:4d:49:cd:
                    d5:e8:d3:21:d1:0d:b1:05:6c:ed:d8:44:b9:7f:a7:
                    dc:98:30:a3:14:76:82:08:66:5a:35:7a:41:26:01:
                    ff:6c:81:bc:7d:6c:0d:95:ca:be:49:11:91:d5:77:
                    ae:66:9c:c2:c6:ab:96:4b:a6:d0:37:32:5e:e3:93:
                    33:76:0b:25:4e:7e:fe:4e:ce:33:e0:e9:36:a6:39:
                    59:8b:8e:2f:1a:5f:46:b4:1e:04:a0:e0:37:e8:7f:
                    13:b0:ce:c8:fd:b4:80:e5:cd:b6:04:1e:ec:2b:d5:
                    de:7b:64:b1:42:a1:b4:6f:0c:0d:70:e8:96:2d:b0:
                    0e:de:10:89:44:b9:6d:89:2a:81:28:fe:41:92:a2:
                    20:1a:e9:2e:bd:05:4c:24:e6:7c:0f:66:9b:d8:aa:
                    94:b1:cd:d4:49:01:3d:fe:5d:6d:8f:b2:34:32:fb:
                    70:a2:46:dd:50:4d:38:2a:5b:69:82:51:55:7b:5b:
                    8e:e8:8c:bc:da:50:17:82:19:70:f6:3e:90:db:4c:
                    55:d5:32:42:21:a6:72:2e:d0:91:7d:d4:de:26:3b:
                    19:57:67:87:18:1c:26:8f:ac:1c:25:79:00:fe:74:
                    48:91:aa:8d:0b:f8:33:35:1a:fe:b1:8a:22:fd:ed:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:91:33:B4:86:C6:3E:5A:1F:B3:53:DE:92:AA:57:68:62:37:DE:2D
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a65313a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:29:45:b7:48:e7:0f:0d:42:27:2c:5b:1a:23:7c:1f:45:30:
         a4:3a:3e:17:86:2a:0f:1b:e7:27:39:a6:3f:a1:13:28:d9:74:
         72:c3:f8:ac:3b:2f:ec:7f:e3:38:85:3a:be:60:28:9f:0a:1e:
         62:1b:ab:02:0b:c1:cb:74:e4:80:bd:af:8d:2d:41:fb:94:36:
         08:df:43:38:fe:2b:d4:34:3d:95:9e:26:52:4a:0e:f2:52:3b:
         2c:4b:6a:ce:6f:20:c9:cb:d4:f6:53:7e:74:6a:53:f8:c5:e5:
         3e:14:70:6d:92:45:02:6a:88:33:40:f9:5c:e5:47:3d:e5:3d:
         6e:21:d4:63:7b:93:c1:ad:3a:33:e5:d9:79:7d:bb:68:e5:03:
         75:4b:e7:f4:6b:10:8e:d2:41:13:47:26:e9:47:8e:1c:73:bc:
         24:0a:e4:1d:32:b6:ff:1a:75:4a:42:88:d9:3b:2e:69:16:f9:
         dd:1f:46:78:bc:59:ff:d6:6d:65:ac:80:74:62:e0:a4:9a:c9:
         93:f5:73:dc:56:96:a1:41:1d:e9:58:82:54:1f:98:c0:7a:67:
         a1:17:89:c2:39:c5:c6:4f:5d:54:14:86:29:f9:a0:b3:72:43:
         46:61:04:a4:b7:bf:18:af:bd:f3:b8:5f:ec:ea:dc:98:20:bc:
         b0:30:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----