Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61343a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a61343a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          mb4z5gxUdO6qLoxiptRPToWcZGah0evQ/eM59UxSMKA=
Subject key identifier:   CF:16:A5:D3:7D:08:A7:3D:F2:19:C6:F2:DA:FE:0A:E0:5A:11:2F:01
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       6E68B0AB26576ED5341A67B3052103D8A107DDBD
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61343a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:17 +0000
ROA not before:           Tue 04 Feb 2025 18:40:17 +0000
ROA not after:            Tue 03 Feb 2026 18:45:17 +0000
asID:                     271891
IP address blocks:        2801:151:a4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:68:b0:ab:26:57:6e:d5:34:1a:67:b3:05:21:03:d8:a1:07:dd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:17 2025 GMT
            Not After : Feb  3 18:45:17 2026 GMT
        Subject: CN=CF16A5D37D08A73DF219C6F2DAFE0AE05A112F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:62:b7:65:47:45:ea:0f:20:61:34:d8:ff:
                    3c:7a:8b:4c:ca:d6:c4:5b:58:5b:94:d6:fa:eb:bb:
                    05:14:d4:63:f6:1f:cc:85:05:12:90:34:6b:94:3d:
                    81:2b:16:24:c2:33:68:65:d5:84:ab:3b:3e:38:42:
                    12:6d:42:20:e6:06:46:54:59:ec:dc:b7:e3:ca:1e:
                    17:5d:6f:72:cc:d2:23:2b:13:89:67:ff:9c:93:d9:
                    c4:b5:31:2a:bf:3d:47:2d:2a:12:12:bf:12:17:fa:
                    93:76:72:1e:b3:b6:78:f7:55:4f:be:10:b1:4e:92:
                    8e:64:5c:35:75:2a:c4:c4:0f:91:3f:8a:03:31:a4:
                    30:3e:41:c6:84:95:c4:07:96:f5:2a:31:db:08:be:
                    6c:90:83:55:d8:e4:f8:56:95:6d:42:b3:d8:2f:cf:
                    87:21:ad:c8:83:0d:1d:5c:67:68:1c:8a:43:93:90:
                    75:d1:e8:27:03:b2:e1:9a:57:53:45:4e:14:5a:a3:
                    e0:08:37:67:52:5b:4b:b3:be:69:47:7b:66:d2:8f:
                    f9:3a:9b:57:c5:db:c0:21:b5:5e:f5:1b:a3:31:f3:
                    20:f1:77:69:79:eb:f1:b2:cf:44:96:25:19:aa:bd:
                    ab:99:cd:fb:8e:72:c2:fb:05:5e:6b:3b:99:4b:be:
                    01:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:16:A5:D3:7D:08:A7:3D:F2:19:C6:F2:DA:FE:0A:E0:5A:11:2F:01
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a61343a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:f3:7a:5c:07:31:a4:49:f0:f5:7e:a7:c0:c6:c1:87:7b:
         06:25:72:f8:71:c7:70:85:b7:a8:eb:51:7e:41:17:48:24:0a:
         e8:19:88:7c:1a:0f:e0:7d:46:fd:f4:62:12:d9:e6:91:d1:b8:
         5a:6b:07:cb:84:63:e9:47:52:45:dc:2c:85:04:c5:9a:bf:28:
         e3:aa:6f:c4:09:12:3d:41:fb:f5:b0:b3:fb:4e:9f:10:be:7e:
         18:06:88:8e:8c:05:1f:e2:8f:32:be:2b:a4:31:6c:84:f0:5f:
         1f:0a:1e:c7:46:49:35:d6:64:a1:6a:74:5e:62:5b:a3:83:6d:
         24:c0:a8:14:ed:0e:d6:6b:0d:e1:56:de:cc:8c:f5:2f:4c:e6:
         20:a1:a2:d0:d2:d4:39:82:44:6f:c6:63:dd:ba:f4:96:c9:96:
         33:d4:32:aa:2b:4e:2d:26:7a:d8:2a:02:5f:6c:b5:6a:f0:8d:
         58:2f:05:85:18:b8:b6:94:1c:ab:24:49:44:56:cf:df:f5:43:
         aa:76:43:d8:11:54:39:f2:17:c4:51:b0:29:b4:b2:19:fc:06:
         b3:ff:2e:6e:46:81:30:a5:21:f5:af:4b:6d:43:46:10:15:2a:
         ce:28:e2:1d:15:5b:7c:ec:f7:9c:63:54:05:58:9e:66:09:f4:
         f6:55:cf:76
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUbmiwqyZXbtU0GmezBSED2KEH3b0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxMkFDQjIyMjZGOEI4OEU1RTg5RUYyRjE0NDJCOEVF
RkIzQjI3OTAeFw0yNTAyMDQxODQwMTdaFw0yNjAyMDMxODQ1MTdaMDMxMTAvBgNV
BAMTKENGMTZBNUQzN0QwOEE3M0RGMjE5QzZGMkRBRkUwQUUwNUExMTJGMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDImK3ZUdF6g8gYTTY/zx6i0zK
1sRbWFuU1vrruwUU1GP2H8yFBRKQNGuUPYErFiTCM2hl1YSrOz44QhJtQiDmBkZU
Wezct+PKHhddb3LM0iMrE4ln/5yT2cS1MSq/PUctKhISvxIX+pN2ch6ztnj3VU++
ELFOko5kXDV1KsTED5E/igMxpDA+QcaElcQHlvUqMdsIvmyQg1XY5PhWlW1Cs9gv
z4chrciDDR1cZ2gcikOTkHXR6CcDsuGaV1NFThRao+AIN2dSW0uzvmlHe2bSj/k6
m1fF28AhtV71G6Mx8yDxd2l56/Gyz0SWJRmqvauZzfuOcsL7BV5rO5lLvgE1AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUzxal030Ipz3yGcby2v4K4FoRLwEwHwYDVR0j
BBgwFoAUQxKssiJvi4jl6J7y8UQrju+zsnkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjgxNUM3OERERDQwQjQ5MjdEOTgwRkE5NEU4RDA3QUQz
NEMzNDNBQTFGMjNDRDVEREU5NUZFRjlGQkNGMUE0LzAvNDMxMkFDQjIyMjZGOEI4
OEU1RTg5RUYyRjE0NDJCOEVFRkIzQjI3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzEyQUNCMjIyNkY4Qjg4RTVF
ODlFRjJGMTQ0MkI4RUVGQjNCMjc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI4MTVDNzhEREQ0MEI0OTI3RDk4MEZBOTRFOEQwN0FEMzRDMzQzQUEx
RjIzQ0Q1RERFOTVGRUY5RkJDRjFBNC8wLzMyMzgzMDMxM2EzMTM1MzEzYTYxMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzEzODM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQFRAKQwDQYJKoZIhvcNAQELBQADggEBAHz583pcBzGkSfD1fqfAxsGHewYlcvhx
x3CFt6jrUX5BF0gkCugZiHwaD+B9Rv30YhLZ5pHRuFprB8uEY+lHUkXcLIUExZq/
KOOqb8QJEj1B+/Wws/tOnxC+fhgGiI6MBR/ijzK+K6QxbITwXx8KHsdGSTXWZKFq
dF5iW6ODbSTAqBTtDtZrDeFW3syM9S9M5iChotDS1DmCRG/GY9269JbJljPUMqor
Ti0metgqAl9stWrwjVgvBYUYuLaUHKskSURWz9/1Q6p2Q9gRVDnyF8RRsCm0shn8
BrP/Lm5GgTClIfWvS21DRhAVKs4o4h0VW3zs95xjVAVYnmYJ9PZVz3Y=
-----END CERTIFICATE-----