Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a3a2f34382d3438203d3e2033383136.roa
File:                     323830313a3166393a3a2f34382d3438203d3e2033383136.roa (raw, json)
Hash identifier:          +iebTezIAHjdCdfytCmONf8/zn+tesTRhI9RBcWtpM0=
Subject key identifier:   3B:67:5C:A2:E3:3E:DB:0F:E2:0F:D7:5D:11:9E:A3:6F:61:2F:44:3A
Certificate issuer:       /CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
Certificate serial:       09A2F1BAD81799BB4F0DE24AFC54AE4A6A82C4FD
Authority key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a3a2f34382d3438203d3e2033383136.roa
Signing time:             Tue 04 Feb 2025 18:14:10 +0000
ROA not before:           Tue 04 Feb 2025 18:09:10 +0000
ROA not after:            Tue 03 Feb 2026 18:14:10 +0000
asID:                     3816
IP address blocks:        2801:1f9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a2:f1:ba:d8:17:99:bb:4f:0d:e2:4a:fc:54:ae:4a:6a:82:c4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0
        Validity
            Not Before: Feb  4 18:09:10 2025 GMT
            Not After : Feb  3 18:14:10 2026 GMT
        Subject: CN=3B675CA2E33EDB0FE20FD75D119EA36F612F443A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:77:ac:63:dc:09:15:ec:fe:24:1d:ad:27:
                    0a:1a:0c:8a:1d:3b:0b:3b:50:ce:fa:b7:99:3c:3d:
                    0b:cf:ea:e6:9a:b4:08:26:98:5f:e0:98:60:14:f6:
                    1a:2f:d7:73:62:4b:5e:26:e2:fe:1b:87:a6:85:48:
                    60:5b:92:b4:d8:b7:3b:f9:25:13:d7:3b:d2:62:59:
                    19:9e:d3:cd:b3:f3:cd:97:56:94:80:9f:2e:92:d5:
                    02:45:95:3c:3c:16:f9:bb:ae:8d:55:a3:67:cb:ca:
                    52:cb:7a:f1:a2:b5:b6:32:08:ef:53:36:5d:e8:9c:
                    98:ff:43:24:ac:91:40:2b:67:13:b3:a4:32:2a:3e:
                    1c:99:e9:b5:5b:be:17:a2:86:75:d7:b3:5f:f3:b9:
                    32:b5:96:e7:b3:9e:e9:2c:e3:20:25:5f:68:58:a8:
                    d3:3e:c4:45:11:58:7a:3a:f9:cd:d6:bb:b0:ad:66:
                    c9:17:e6:76:a4:fe:7b:fc:b0:f4:84:c1:fb:90:1d:
                    5b:32:5b:fa:50:1c:41:f0:41:24:16:29:ba:16:2a:
                    31:a5:34:37:8a:fa:36:60:59:34:95:ed:87:ab:e1:
                    10:52:f6:eb:d6:93:c2:c8:5c:a1:66:68:8f:e1:0b:
                    f5:09:c2:54:23:c6:cf:ab:33:18:94:27:0a:0b:dc:
                    2f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:67:5C:A2:E3:3E:DB:0F:E2:0F:D7:5D:11:9E:A3:6F:61:2F:44:3A
            X509v3 Authority Key Identifier:
                keyid:B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/323830313a3166393a3a2f34382d3438203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:51:1e:ea:30:6a:e8:18:36:b4:6c:60:8a:24:6b:d4:9d:
         34:d0:b3:3b:87:d0:32:6e:44:11:ac:40:9f:bb:4c:58:65:c3:
         da:b6:e1:d2:03:47:73:ce:59:51:b3:23:9c:21:3c:d8:7e:c1:
         1c:54:18:44:30:29:ae:aa:24:79:c7:4c:9c:6a:60:d1:d3:08:
         b6:60:c7:b8:80:1f:83:c9:bf:32:c8:84:dc:4a:cc:68:4d:65:
         9b:f5:5f:79:1e:1b:a9:eb:63:90:82:7a:63:46:59:2b:39:82:
         be:f3:20:04:97:a0:2b:c3:59:d7:48:37:cc:6d:28:b9:cb:41:
         1a:fd:2d:b3:ef:53:07:e7:91:39:57:22:58:c7:ca:2d:79:d3:
         d2:3e:b2:23:ef:68:f3:8e:d2:eb:43:c5:46:5d:93:e5:89:1f:
         99:9e:7a:77:a1:c0:49:9c:38:dc:b6:87:e0:87:0a:53:08:e1:
         35:29:9d:fb:75:34:81:e9:27:f3:8c:ba:09:8b:89:c4:7a:a3:
         b6:b0:da:4a:ee:c8:cc:5b:b8:f6:ca:fe:1e:19:67:d0:e9:da:
         67:23:a0:b9:93:64:a6:55:87:f7:7f:b4:20:24:57:3d:e6:32:
         34:5f:2b:d2:fa:94:52:f6:3b:83:1c:d1:fe:ea:3a:eb:0e:ac:
         3e:29:47:b9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUCaLxutgXmbtPDeJK/FSuSmqCxP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkxRUMxOUJBQzUzMUU5Q0Q4MkYzRDhGMEQyQkJDRkJF
NDE1MEJCMDAeFw0yNTAyMDQxODA5MTBaFw0yNjAyMDMxODE0MTBaMDMxMTAvBgNV
BAMTKDNCNjc1Q0EyRTMzRURCMEZFMjBGRDc1RDExOUVBMzZGNjEyRjQ0M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6S3esY9wJFez+JB2tJwoaDIod
Ows7UM76t5k8PQvP6uaatAgmmF/gmGAU9hov13NiS14m4v4bh6aFSGBbkrTYtzv5
JRPXO9JiWRme082z882XVpSAny6S1QJFlTw8Fvm7ro1Vo2fLylLLevGitbYyCO9T
Nl3onJj/QySskUArZxOzpDIqPhyZ6bVbvheihnXXs1/zuTK1lueznuks4yAlX2hY
qNM+xEURWHo6+c3Wu7CtZskX5nak/nv8sPSEwfuQHVsyW/pQHEHwQSQWKboWKjGl
NDeK+jZgWTSV7Yer4RBS9uvWk8LIXKFmaI/hC/UJwlQjxs+rMxiUJwoL3C87AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUO2dcouM+2w/iD9ddEZ6jb2EvRDowHwYDVR0j
BBgwFoAUuR7Bm6xTHpzYLz2PDSu8++QVC7AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RUU0MjVENTREQkE4RjE3Rjg2QTZBRTdFNUIxNjZCMEQ2
QzYzOERCNjE3RDE2REMyRUNEMjJFRDczQkFDNzY3LzAvQjkxRUMxOUJBQzUzMUU5
Q0Q4MkYzRDhGMEQyQkJDRkJFNDE1MEJCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTFFQzE5QkFDNTMxRTlDRDgy
RjNEOEYwRDJCQkNGQkU0MTUwQkIwLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUVFNDI1RDU0REJBOEYxN0Y4NkE2QUU3RTVCMTY2QjBENkM2MzhEQjYx
N0QxNkRDMkVDRDIyRUQ3M0JBQzc2Ny8wLzMyMzgzMDMxM2EzMTY2MzkzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAfkAADANBgkq
hkiG9w0BAQsFAAOCAQEAX6FRHuowaugYNrRsYIoka9SdNNCzO4fQMm5EEaxAn7tM
WGXD2rbh0gNHc85ZUbMjnCE82H7BHFQYRDAprqokecdMnGpg0dMItmDHuIAfg8m/
MsiE3ErMaE1lm/VfeR4bqetjkIJ6Y0ZZKzmCvvMgBJegK8NZ10g3zG0ouctBGv0t
s+9TB+eROVciWMfKLXnT0j6yI+9o847S60PFRl2T5YkfmZ56d6HASZw43LaH4IcK
UwjhNSmd+3U0gekn84y6CYuJxHqjtrDaSu7IzFu49sr+Hhln0OnaZyOguZNkplWH
93+0ICRXPeYyNF8r0vqUUvY7gxzR/uo66w6sPilHuQ==
-----END CERTIFICATE-----