Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66633a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a66633a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          fECSPla+RMw1PH6+ZDmcY5zb0haUl8Wdcex5QB+XKGw=
Subject key identifier:   D1:92:33:25:73:D8:A5:35:D1:64:E9:66:8E:23:78:9E:23:9A:74:4C
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       5E56AC1158BAF51EF4BF4027478C74B9B250E1C5
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66633a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 05 Mar 2024 18:15:48 +0000
ROA not before:           Tue 05 Mar 2024 18:10:48 +0000
ROA not after:            Tue 04 Mar 2025 18:15:48 +0000
asID:                     271891
IP address blocks:        2801:151:fc::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:56:ac:11:58:ba:f5:1e:f4:bf:40:27:47:8c:74:b9:b2:50:e1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:48 2024 GMT
            Not After : Mar  4 18:15:48 2025 GMT
        Subject: CN=D192332573D8A535D164E9668E23789E239A744C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:73:31:50:69:91:ca:cf:2c:2b:a3:7a:3c:
                    e3:12:66:f8:21:0e:f1:32:72:bf:8e:ba:0a:9c:51:
                    ac:d0:60:bd:75:fb:03:db:e7:84:ae:91:40:51:47:
                    6e:ef:d0:71:58:88:3f:a5:33:54:a9:c8:f7:30:96:
                    17:87:16:cd:f3:5b:cb:e3:af:da:d3:2e:0c:2a:5b:
                    52:7b:a2:3b:dd:83:ae:5f:c9:4a:d5:e8:3c:4b:64:
                    63:2d:6e:7e:2b:c4:0a:82:31:91:11:05:1c:52:2e:
                    1c:6c:2c:9c:fc:6f:e8:18:8e:f6:67:d9:e7:80:2c:
                    23:46:23:b8:da:1b:82:a0:28:71:65:6b:73:2b:2a:
                    16:25:91:75:b5:c8:0b:02:9b:b5:2b:75:89:8b:4f:
                    2c:a8:a6:a1:46:6f:46:ce:5b:79:c4:09:03:be:64:
                    59:b5:c8:2a:bd:7f:08:7d:de:26:e3:da:a0:14:fd:
                    9c:21:55:2f:b3:e2:c3:ae:e0:fa:32:36:bb:40:b6:
                    b1:b9:cf:a1:51:cc:44:5b:7d:a2:d4:57:d4:e9:34:
                    91:d5:63:97:e1:ac:df:4e:8b:44:d5:0c:71:a0:13:
                    1f:e0:c6:38:c5:55:40:55:96:b8:75:e9:76:55:a6:
                    14:a0:62:70:22:f6:01:87:29:c4:7c:2e:06:f1:5c:
                    1b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:92:33:25:73:D8:A5:35:D1:64:E9:66:8E:23:78:9E:23:9A:74:4C
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a66633a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:55:ca:01:97:9b:fe:d9:2f:73:f2:39:81:bf:32:eb:b6:c6:
         87:6b:21:8f:b1:70:5c:1d:e6:d7:74:50:ba:27:d4:27:a4:9a:
         12:c2:a7:02:d5:ce:39:a4:96:20:50:ca:45:31:a2:f2:94:55:
         30:49:38:fb:4e:94:70:d8:c8:90:ca:b8:8e:78:d9:49:1e:cb:
         11:4f:5a:2c:a6:f1:42:27:db:f1:f1:73:7d:1d:b0:d0:52:9e:
         18:b7:83:6b:50:c0:1e:50:b9:a3:6a:61:2a:08:ef:8b:06:77:
         48:93:19:db:26:68:df:1a:e8:e8:90:a1:1c:9b:fe:03:10:34:
         6e:d4:de:d2:ae:92:e6:af:35:3c:13:48:40:6a:f5:c3:80:d6:
         d9:9e:c4:98:08:fe:5e:b7:ed:e7:c2:15:81:b9:c3:b4:28:aa:
         64:c2:18:fa:f4:ab:23:f7:c0:80:4b:a1:c6:de:56:7f:45:0a:
         dd:6e:bf:84:6e:e8:2b:a6:43:73:4b:3d:01:db:1e:b0:a2:6e:
         70:24:b3:00:73:e2:f1:24:87:13:07:b4:8c:52:7e:75:0d:76:
         9c:94:36:95:ac:1d:be:43:23:a0:fb:2d:b9:45:3b:21:68:f0:
         82:30:60:5f:bf:31:65:e4:38:59:a0:22:f5:42:31:fd:40:70:
         db:ad:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----