Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e20323033.roa
File:                     323830313a31353a623030303a3a2f34382d3438203d3e20323033.roa (raw, json)
Hash identifier:          pOtBpF9wCyCW3ZmP0R9hjF/qLlr7J9Lweqyln1fqoTE=
Subject key identifier:   BD:8E:53:63:D1:C1:8D:00:E8:6F:7F:0A:FC:3B:27:5A:A5:F2:F3:13
Certificate issuer:       /CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
Certificate serial:       2341D3EFD1FF652CA6509BDD78A5408DCC09C3AE
Authority key identifier: 96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e20323033.roa
Signing time:             Fri 24 May 2024 18:55:00 +0000
ROA not before:           Fri 24 May 2024 18:50:00 +0000
ROA not after:            Fri 23 May 2025 18:55:00 +0000
asID:                     203
IP address blocks:        2801:15:b000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:41:d3:ef:d1:ff:65:2c:a6:50:9b:dd:78:a5:40:8d:cc:09:c3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
        Validity
            Not Before: May 24 18:50:00 2024 GMT
            Not After : May 23 18:55:00 2025 GMT
        Subject: CN=BD8E5363D1C18D00E86F7F0AFC3B275AA5F2F313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:1c:c0:77:ab:3f:6a:bc:79:f1:24:9b:4c:
                    9f:fe:16:78:80:d7:85:ca:1d:21:4a:64:dc:c4:ba:
                    64:a1:74:b1:fe:df:2d:ce:28:ff:12:9b:a9:de:5e:
                    b4:7c:95:6b:ae:92:c6:ac:b2:ff:78:85:33:4c:11:
                    3c:3d:83:55:d5:7e:53:9c:14:4e:cf:ed:a8:5a:8e:
                    e2:aa:3d:69:fb:c1:6b:0c:80:d1:9f:15:66:33:b6:
                    47:53:25:24:a6:be:fd:6e:12:22:9d:a2:be:d5:7c:
                    8b:50:99:cb:64:9e:db:02:93:80:69:8d:d7:95:ce:
                    6c:e1:de:45:51:45:67:10:5e:1a:a1:55:41:91:1b:
                    0e:eb:83:bf:a1:07:2f:cd:cd:72:72:2f:d9:d7:42:
                    f4:dd:88:3e:05:af:96:1f:b2:5c:16:cc:66:a1:b8:
                    87:37:a6:0f:28:e2:59:43:83:82:f4:52:e6:7f:b3:
                    e0:20:9b:b6:c0:79:48:d1:e6:0d:d4:48:ff:fe:60:
                    c7:65:1f:a5:f7:1f:3d:c1:ad:11:61:3c:42:e7:b7:
                    09:d0:b3:76:49:b9:76:b4:c4:df:69:51:21:62:da:
                    65:7b:8f:fc:8a:80:1d:d7:3a:b3:9a:27:96:c5:8c:
                    36:f9:27:8d:f1:01:09:1b:5b:64:be:ef:27:27:dc:
                    ec:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:53:63:D1:C1:8D:00:E8:6F:7F:0A:FC:3B:27:5A:A5:F2:F3:13
            X509v3 Authority Key Identifier:
                keyid:96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/323830313a31353a623030303a3a2f34382d3438203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:0a:d6:9e:a8:d3:a6:0b:5b:0f:25:d9:07:04:e3:77:ca:d7:
         08:bf:ed:1d:9a:32:69:0e:d8:b1:df:dd:c0:1e:8e:db:de:46:
         cc:67:65:d7:62:97:72:3e:4d:55:e4:38:ff:05:6a:cf:44:4b:
         53:98:23:8d:5e:60:e4:b4:0b:b0:61:e3:80:0e:b2:19:c6:b3:
         7c:7a:e5:4c:0a:ba:d4:e0:d9:b6:46:d6:1e:7a:82:51:78:91:
         d3:1c:49:bc:b8:4c:c2:4d:e8:fa:db:1f:00:1f:2e:8f:a0:12:
         7c:06:87:8f:bd:92:10:44:66:40:ff:db:87:57:9c:44:72:b4:
         58:d7:cb:50:6a:ec:0c:86:68:e6:19:5b:e9:de:eb:be:79:1a:
         80:d2:c9:df:4f:29:81:e1:06:dd:82:13:91:73:c7:3a:08:c1:
         a8:4d:f5:53:3d:12:d0:ce:54:c1:f6:e7:ff:27:89:99:51:16:
         b7:ab:ae:76:5d:00:32:86:1c:7d:4f:c2:06:18:45:06:74:37:
         21:ff:87:a8:11:63:65:a1:68:d5:86:a6:b0:e0:e6:70:d9:a2:
         56:d5:80:07:28:95:d1:fc:d1:65:40:ee:69:50:66:98:f6:d1:
         0c:0a:46:8b:a2:21:65:05:ce:1e:70:68:c4:37:de:d9:cb:b9:
         26:9e:50:da
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUI0HT79H/ZSymUJvdeKVAjcwJw64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY0RUI5ODRBNkNEQUQ2NkREM0NDNzE3RDcwRDZFN0RD
RDRGRkU5NjAeFw0yNDA1MjQxODUwMDBaFw0yNTA1MjMxODU1MDBaMDMxMTAvBgNV
BAMTKEJEOEU1MzYzRDFDMThEMDBFODZGN0YwQUZDM0IyNzVBQTVGMkYzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfERzAd6s/arx58SSbTJ/+FniA
14XKHSFKZNzEumShdLH+3y3OKP8Sm6neXrR8lWuuksassv94hTNMETw9g1XVflOc
FE7P7ahajuKqPWn7wWsMgNGfFWYztkdTJSSmvv1uEiKdor7VfItQmctkntsCk4Bp
jdeVzmzh3kVRRWcQXhqhVUGRGw7rg7+hBy/NzXJyL9nXQvTdiD4Fr5YfslwWzGah
uIc3pg8o4llDg4L0UuZ/s+Agm7bAeUjR5g3USP/+YMdlH6X3Hz3BrRFhPELntwnQ
s3ZJuXa0xN9pUSFi2mV7j/yKgB3XOrOaJ5bFjDb5J43xAQkbW2S+7ycn3OyXAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUvY5TY9HBjQDob38K/DsnWqXy8xMwHwYDVR0j
BBgwFoAUlk65hKbNrWbdPMcX1w1ufc1P/pYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQjRGQTZERTFFMUM0MjRGMUYzRURFRDcwNzNBQjgxMzEy
RkM0QTY4RUFEMDIwQURGMkY2MTY4Qjc5RkRFOEZELzAvOTY0RUI5ODRBNkNEQUQ2
NkREM0NDNzE3RDcwRDZFN0RDRDRGRkU5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjRFQjk4NEE2Q0RBRDY2REQz
Q0M3MTdENzBENkU3RENENEZGRTk2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkI0RkE2REUxRTFDNDI0RjFGM0VERUQ3MDczQUI4MTMxMkZDNEE2OEVB
RDAyMEFERjJGNjE2OEI3OUZERThGRC8wLzMyMzgzMDMxM2EzMTM1M2E2MjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABWw
ADANBgkqhkiG9w0BAQsFAAOCAQEAZgrWnqjTpgtbDyXZBwTjd8rXCL/tHZoyaQ7Y
sd/dwB6O295GzGdl12KXcj5NVeQ4/wVqz0RLU5gjjV5g5LQLsGHjgA6yGcazfHrl
TAq61ODZtkbWHnqCUXiR0xxJvLhMwk3o+tsfAB8uj6ASfAaHj72SEERmQP/bh1ec
RHK0WNfLUGrsDIZo5hlb6d7rvnkagNLJ308pgeEG3YITkXPHOgjBqE31Uz0S0M5U
wfbn/yeJmVEWt6uudl0AMoYcfU/CBhhFBnQ3If+HqBFjZaFo1YamsODmcNmiVtWA
ByiV0fzRZUDuaVBmmPbRDApGi6IhZQXOHnBoxDfe2cu5Jp5Q2g==
-----END CERTIFICATE-----