Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          N67kQVo0FXsqMf+wWQUXx7c52CY1En2ti0IHmLHIVnw=
Subject key identifier:   37:3B:46:DA:24:68:9E:17:B8:17:D7:2A:BE:64:27:93:EA:0E:BC:B5
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       1C58B9593AE487243BA249A85639009F6585CE63
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:07 +0000
ROA not before:           Tue 04 Feb 2025 18:40:07 +0000
ROA not after:            Tue 03 Feb 2026 18:45:07 +0000
asID:                     271891
IP address blocks:        2801:151:4e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:58:b9:59:3a:e4:87:24:3b:a2:49:a8:56:39:00:9f:65:85:ce:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:07 2025 GMT
            Not After : Feb  3 18:45:07 2026 GMT
        Subject: CN=373B46DA24689E17B817D72ABE642793EA0EBCB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:b2:22:3a:52:02:6d:32:7f:66:01:5a:7a:
                    a7:cf:8d:30:dd:1a:17:62:c9:d3:8e:c4:e7:e9:6d:
                    64:58:af:6d:32:5f:05:94:1a:3d:88:8c:38:2e:66:
                    1a:89:f9:ec:05:06:54:bd:9d:3d:45:c9:74:5c:23:
                    75:8a:8c:1e:d6:4b:d2:c2:f0:d3:18:fc:05:e7:ce:
                    41:f6:88:54:5f:a1:78:26:4b:70:ac:d7:63:f8:66:
                    da:ae:7f:43:e7:4c:dd:a7:15:e3:4e:ed:db:eb:27:
                    54:30:80:46:8f:8e:51:af:55:0e:3a:50:81:5e:a8:
                    df:38:43:7f:29:55:62:b8:cf:1e:b1:8d:ac:66:26:
                    cb:5b:f5:3e:9b:79:87:2b:68:c9:6a:63:ac:7a:37:
                    cf:d8:72:4f:76:ca:5a:ec:c5:51:84:39:8a:91:45:
                    62:4e:d3:ea:70:ac:00:f4:62:a7:6c:c4:28:f1:f3:
                    e1:25:44:ea:f1:b8:e1:09:ca:3e:08:e2:4c:23:27:
                    f1:64:32:12:c2:d3:d0:30:df:dd:73:c8:97:20:e0:
                    70:fc:34:64:bc:38:48:b9:9d:e1:9c:82:c6:b8:dd:
                    b5:f3:d0:66:8a:b7:90:20:36:bd:07:71:82:c5:30:
                    1c:46:12:ff:fa:89:4a:b7:42:6b:15:01:c4:6c:bf:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3B:46:DA:24:68:9E:17:B8:17:D7:2A:BE:64:27:93:EA:0E:BC:B5
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a34653a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:4e::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:35:37:7b:dc:58:bf:67:ac:d4:0f:0a:fd:d6:98:38:e5:
         78:91:a7:9c:5c:61:54:76:0a:7e:04:36:45:82:8e:d2:d9:f8:
         4c:a3:9c:43:67:5a:46:39:cc:52:96:b5:bb:50:0a:b1:b9:80:
         56:7a:3a:15:01:6e:06:05:78:88:0f:57:8b:4f:6c:e5:47:3c:
         79:9f:73:ae:71:73:9e:23:a9:9d:7b:59:ed:19:57:2c:58:31:
         7e:0a:e3:31:06:41:42:1e:2f:55:43:2f:46:f1:2b:0c:ed:b5:
         bb:b4:08:d5:cf:13:a2:cb:8f:17:b0:e0:73:6b:f6:18:0c:24:
         7f:b9:e6:37:20:43:a9:a2:73:a6:e4:6e:a0:e8:ab:db:20:71:
         01:3b:f4:8e:fa:70:13:04:a9:cb:bd:b6:0a:be:67:71:1d:1b:
         8b:55:7c:c0:03:a4:87:27:32:6b:b4:f8:34:62:a4:48:3c:27:
         08:c3:0b:47:ec:50:72:97:23:44:34:54:ac:bc:19:7a:22:2f:
         59:68:25:62:8c:1c:a9:e5:a5:de:06:00:9b:74:65:39:7f:d0:
         a1:63:61:76:2b:39:31:2f:77:5c:a5:70:5c:11:13:0d:e7:c2:
         01:cd:d8:28:6c:71:1b:4c:47:1d:52:7f:f3:d2:32:62:ba:f1:
         86:28:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----