Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a38633a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a38633a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          pYfcX3bxbjJKgPLVU9vHJvzpmEdI1qp+Mt1kJ0iglQg=
Subject key identifier:   B5:A1:08:05:2B:4B:C3:17:F2:43:92:CB:52:AA:C2:12:30:1F:D6:DB
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       240DA88CB9C264ABA79F6897B9D300A65E574150
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a38633a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:44:58 +0000
ROA not before:           Tue 04 Feb 2025 18:39:58 +0000
ROA not after:            Tue 03 Feb 2026 18:44:58 +0000
asID:                     271891
IP address blocks:        2801:151:8c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0d:a8:8c:b9:c2:64:ab:a7:9f:68:97:b9:d3:00:a6:5e:57:41:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:39:58 2025 GMT
            Not After : Feb  3 18:44:58 2026 GMT
        Subject: CN=B5A108052B4BC317F24392CB52AAC212301FD6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b3:38:e5:7a:bd:9e:39:0a:82:05:a6:c6:b1:
                    90:f3:ce:54:33:1a:af:02:d2:ce:fd:03:e8:8d:36:
                    ed:fd:6a:3c:7e:55:fe:1f:49:19:54:d0:26:8e:71:
                    fe:45:3e:07:48:29:af:3f:23:41:69:d4:4d:63:f9:
                    f9:e2:f5:d2:b4:86:99:3c:e7:4d:eb:ac:b7:8e:b9:
                    a4:f4:a8:13:e0:f6:d5:f7:23:a2:55:39:01:e4:e8:
                    d2:0a:c6:40:44:27:d1:8f:d1:07:86:61:e2:50:a8:
                    5d:c1:fc:b9:2a:e7:b8:75:89:53:e0:4a:c5:f5:26:
                    5b:ad:b2:23:43:6b:10:16:2c:d3:72:6a:2f:fa:5d:
                    71:a5:ca:0e:76:f5:d7:5a:21:66:ba:5d:1e:30:0b:
                    2a:b0:9e:47:e4:ac:69:26:3a:40:78:86:15:f7:67:
                    c5:67:f9:39:36:dc:53:07:5f:cf:56:5e:b7:2d:3d:
                    4c:9e:02:8e:97:70:ce:00:ca:ab:7c:db:c5:09:c2:
                    ae:67:99:f7:24:58:47:75:7d:9d:05:c4:5c:90:d2:
                    eb:5a:53:06:62:f9:63:1c:45:04:26:82:f0:62:a0:
                    f4:66:5c:64:22:99:eb:bd:99:bd:4b:7c:9e:f2:94:
                    59:c6:79:fa:94:c5:e6:58:0f:77:0c:9c:6b:c8:34:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A1:08:05:2B:4B:C3:17:F2:43:92:CB:52:AA:C2:12:30:1F:D6:DB
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a38633a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:8c::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:e8:0a:9d:e8:10:08:7d:a5:29:6c:9e:a4:41:1f:2f:88:6f:
         f5:d9:36:c6:5a:37:3e:3e:36:a5:eb:01:7a:f2:8f:3b:b7:f6:
         48:3d:59:ac:1f:dc:d2:ec:15:43:65:86:fb:05:9c:25:d6:92:
         51:7f:a7:01:57:11:38:87:ad:ec:da:fc:06:be:96:f1:88:c0:
         d9:23:33:4b:21:4c:7e:1a:8b:ed:b0:0c:44:d1:93:61:46:d6:
         0f:9f:36:c4:6e:e7:a1:62:1a:41:ad:21:16:a4:b4:ec:e2:85:
         bb:f0:80:a0:75:e8:6e:b4:f5:3d:39:a6:f8:30:8e:ff:3b:2e:
         78:b7:6d:4d:00:47:1b:2b:b6:3c:24:af:e9:e0:e7:4b:d6:8c:
         e9:ed:3b:0e:06:9a:41:2a:b1:7d:1d:dc:53:63:d5:7a:f8:06:
         c4:ae:57:e2:30:90:3a:24:5b:e5:03:92:e1:1a:30:24:6a:30:
         5f:cc:7a:87:df:87:e2:53:1e:ee:e8:b6:bb:05:2c:f9:78:77:
         b9:ab:1b:ab:08:ed:5e:2a:b6:f5:31:b4:25:21:6b:89:71:22:
         8d:47:38:31:cd:33:b3:d2:c2:54:b1:1d:8b:fe:6b:e6:6a:f8:
         0f:e9:64:db:3d:22:b2:70:c4:e3:74:26:ea:08:29:8b:1d:a8:
         bf:a1:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----