Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/323830363a3231343a3a2f33322d3332203d3e203238343332.roa
File:                     323830363a3231343a3a2f33322d3332203d3e203238343332.roa (raw, json)
Hash identifier:          Bvg2Gu466ogFEljGwoq3nd1/O0qC8OtfopKMdmOqgDs=
Subject key identifier:   EB:50:56:D1:A9:25:0E:5A:EA:FB:29:2B:96:6E:77:6D:6C:52:BA:05
Certificate issuer:       /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial:       7D8F8BF84125AEAE788D504FEC6D18F8D328921C
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/323830363a3231343a3a2f33322d3332203d3e203238343332.roa
Signing time:             Tue 05 Mar 2024 17:42:19 +0000
ROA not before:           Tue 05 Mar 2024 17:37:19 +0000
ROA not after:            Tue 04 Mar 2025 17:42:19 +0000
asID:                     28432
IP address blocks:        2806:214::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8f:8b:f8:41:25:ae:ae:78:8d:50:4f:ec:6d:18:f8:d3:28:92:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
        Validity
            Not Before: Mar  5 17:37:19 2024 GMT
            Not After : Mar  4 17:42:19 2025 GMT
        Subject: CN=EB5056D1A9250E5AEAFB292B966E776D6C52BA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:79:96:17:fb:a1:07:98:37:aa:d7:9c:0d:
                    bf:bd:6e:d0:94:a0:38:1f:55:ba:f1:6d:e5:fa:71:
                    68:f0:fd:01:09:5d:5e:b4:22:05:f7:e6:12:87:4d:
                    3d:d6:e5:46:06:f9:49:0b:64:7f:18:e8:07:f9:68:
                    04:14:97:ad:38:46:3b:08:1b:00:a2:be:80:f1:72:
                    0b:fa:b5:74:37:ba:4a:0e:44:ca:d3:ed:dd:58:af:
                    8f:7b:c7:27:82:c0:45:b9:ab:7f:08:ff:ce:4e:33:
                    43:8b:b2:33:ff:8f:a7:64:46:42:27:9d:2d:bc:bf:
                    8b:d2:11:5c:dd:01:0c:c6:94:ef:7c:4f:b7:0d:cb:
                    f7:52:d9:78:70:31:56:bb:6b:11:97:a8:c3:3c:ba:
                    42:80:39:0b:f6:60:5d:5e:ed:0e:d9:01:cd:ab:4e:
                    76:d0:c4:6f:7d:89:c2:46:64:f5:c1:0e:e5:19:35:
                    73:fe:19:84:aa:72:98:2f:77:e6:d9:ce:f1:f7:34:
                    3e:cc:74:ae:62:bc:63:0c:2d:d0:08:18:8b:d7:69:
                    63:1f:68:1d:1b:af:b3:12:83:d3:68:d9:ac:22:3c:
                    3f:28:97:2f:16:56:53:84:45:7e:31:2f:04:87:45:
                    f2:9d:00:24:5e:7c:e0:35:c2:04:60:97:09:3f:8e:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:50:56:D1:A9:25:0E:5A:EA:FB:29:2B:96:6E:77:6D:6C:52:BA:05
            X509v3 Authority Key Identifier:
                keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/323830363a3231343a3a2f33322d3332203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:214::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:e3:4b:45:2d:2e:d4:c6:b1:ca:be:91:f3:f4:06:a0:e6:
         dd:fb:ec:39:4c:c0:4d:ac:29:28:8e:fc:06:0c:f2:a9:ee:34:
         58:eb:9e:3b:26:ed:ed:b7:b9:8e:29:33:a8:dd:c3:bb:e6:ee:
         67:e9:9a:e3:47:0b:9d:7e:96:fa:20:a9:b3:af:d6:56:6a:99:
         25:fc:48:4a:81:8c:0a:42:60:15:cb:d2:ca:5b:73:30:5d:7d:
         e9:c0:c3:7d:24:a6:1d:e3:5a:28:88:f0:50:e5:38:9c:51:72:
         7a:3f:2d:d4:3f:4f:8b:85:5b:cd:01:b6:2c:e5:3a:c4:7d:52:
         41:8d:e1:6c:bd:08:2f:86:40:fd:2a:b9:c9:bc:3f:d4:48:57:
         4b:9b:6b:5d:55:0b:89:01:17:81:67:1b:27:6f:08:3e:04:a2:
         4a:bb:65:ae:81:9e:c3:92:ae:c8:69:ab:5b:59:a1:e2:1d:9a:
         dd:30:67:1e:e7:15:d1:63:26:c7:39:d4:c7:c4:06:ee:61:6e:
         50:8c:04:b9:11:25:d3:d3:e1:ba:24:54:ec:ca:ab:b4:ce:4b:
         aa:0f:d2:b4:5f:75:94:7e:d4:fd:fd:f4:54:fe:e6:26:66:92:
         6c:77:ce:80:0a:45:b4:c0:db:11:f2:4f:f8:0d:c5:f1:11:93:
         37:72:52:47
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUfY+L+EElrq54jVBP7G0Y+NMokhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlCRjM1NUEzODI2M0RBQzBDNEYzRDgyNEYyQTQyRTg4
Qjc4QTFCNjAeFw0yNDAzMDUxNzM3MTlaFw0yNTAzMDQxNzQyMTlaMDMxMTAvBgNV
BAMTKEVCNTA1NkQxQTkyNTBFNUFFQUZCMjkyQjk2NkU3NzZENkM1MkJBMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lnmWF/uhB5g3qtecDb+9btCU
oDgfVbrxbeX6cWjw/QEJXV60IgX35hKHTT3W5UYG+UkLZH8Y6Af5aAQUl604RjsI
GwCivoDxcgv6tXQ3ukoORMrT7d1Yr497xyeCwEW5q38I/85OM0OLsjP/j6dkRkIn
nS28v4vSEVzdAQzGlO98T7cNy/dS2XhwMVa7axGXqMM8ukKAOQv2YF1e7Q7ZAc2r
TnbQxG99icJGZPXBDuUZNXP+GYSqcpgvd+bZzvH3ND7MdK5ivGMMLdAIGIvXaWMf
aB0br7MSg9No2awiPD8oly8WVlOERX4xLwSHRfKdACRefOA1wgRglwk/jr9PAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU61BW0aklDlrq+ykrlm53bWxSugUwHwYDVR0j
BBgwFoAUGb81WjgmPawMTz2CTypC6It4obYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEM0NDk5QzEzODcxQzAxQ0MxM0M0RDMyNzNBOEFDRjEx
NjcxRjA3MTMwMDI5Mzk4ODJFREFEREREQzU3NUQ1LzAvMTlCRjM1NUEzODI2M0RB
QzBDNEYzRDgyNEYyQTQyRTg4Qjc4QTFCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOUJGMzU1QTM4MjYzREFDMEM0
RjNEODI0RjJBNDJFODhCNzhBMUI2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRDNDQ5OUMxMzg3MUMwMUNDMTNDNEQzMjczQThBQ0YxMTY3MUYwNzEz
MDAyOTM5ODgyRURBREREREM1NzVENS8wLzMyMzgzMDM2M2EzMjMxMzQzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM4MzQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYCFDANBgkq
hkiG9w0BAQsFAAOCAQEAaenjS0UtLtTGscq+kfP0BqDm3fvsOUzATawpKI78Bgzy
qe40WOueOybt7be5jikzqN3Du+buZ+ma40cLnX6W+iCps6/WVmqZJfxISoGMCkJg
FcvSyltzMF196cDDfSSmHeNaKIjwUOU4nFFyej8t1D9Pi4VbzQG2LOU6xH1SQY3h
bL0IL4ZA/Sq5ybw/1EhXS5trXVULiQEXgWcbJ28IPgSiSrtlroGew5KuyGmrW1mh
4h2a3TBnHucV0WMmxznUx8QG7mFuUIwEuREl09PhuiRU7MqrtM5Lqg/StF91lH7U
/f30VP7mJmaSbHfOgApFtMDbEfJP+A3F8RGTN3JSRw==
-----END CERTIFICATE-----