Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/323830313a31333a353030303a3a2f34382d3438203d3e20323634383135.roa
File:                     323830313a31333a353030303a3a2f34382d3438203d3e20323634383135.roa (raw, json)
Hash identifier:          tHq+sbtehNp9lCMHM6kGKVyj8MB0VwfsAlmHHSkIXqI=
Subject key identifier:   09:79:F9:1A:25:6D:10:00:E7:44:BA:04:EB:12:9D:3C:66:90:8B:33
Certificate issuer:       /CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
Certificate serial:       37EE9639A24B5A898FC057E35AE7A760145A44FF
Authority key identifier: 1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/323830313a31333a353030303a3a2f34382d3438203d3e20323634383135.roa
Signing time:             Tue 05 Mar 2024 18:00:41 +0000
ROA not before:           Tue 05 Mar 2024 17:55:41 +0000
ROA not after:            Tue 04 Mar 2025 18:00:41 +0000
asID:                     264815
IP address blocks:        2801:13:5000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ee:96:39:a2:4b:5a:89:8f:c0:57:e3:5a:e7:a7:60:14:5a:44:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
        Validity
            Not Before: Mar  5 17:55:41 2024 GMT
            Not After : Mar  4 18:00:41 2025 GMT
        Subject: CN=0979F91A256D1000E744BA04EB129D3C66908B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:f6:de:3c:d9:bb:a8:88:b8:fc:4e:66:75:
                    43:ba:ff:60:e5:76:07:63:aa:2d:1c:1b:4a:83:7f:
                    ca:43:90:ec:e1:eb:c7:72:92:b3:6d:04:d1:5e:8a:
                    41:0f:83:f2:5e:1d:4d:97:a2:34:32:65:d4:44:6d:
                    1a:e0:37:b0:8b:25:05:8e:a2:e0:f1:06:f3:8a:78:
                    f8:86:91:1a:21:70:99:76:1c:9f:26:18:93:bb:dc:
                    11:53:76:c6:86:53:29:7d:e8:73:df:da:69:03:b0:
                    dc:a4:26:3c:26:8c:92:79:4b:f7:f7:a9:8b:b3:5a:
                    2b:26:fc:cb:30:2e:ad:3a:a6:86:8c:c7:fe:ba:8f:
                    00:9f:6f:b3:c7:76:55:13:13:bb:79:03:ae:cf:ae:
                    b7:c4:b6:a0:d7:27:03:21:5b:2a:9b:14:8e:4f:f4:
                    db:0e:03:f5:d8:26:49:1b:ad:e2:00:61:e8:14:87:
                    49:c5:eb:cd:79:59:b2:02:f8:e2:7b:d1:54:a1:16:
                    e4:36:0e:eb:9f:98:b3:82:02:dd:fa:57:3f:b2:7e:
                    a2:aa:32:4c:4f:15:08:55:ba:23:a5:39:c7:e4:ac:
                    06:da:a5:44:2d:b1:d9:b9:7a:c1:da:be:be:6e:29:
                    0c:a3:7d:2e:a1:16:75:ea:37:46:f0:86:18:55:0c:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:79:F9:1A:25:6D:10:00:E7:44:BA:04:EB:12:9D:3C:66:90:8B:33
            X509v3 Authority Key Identifier:
                keyid:1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/323830313a31333a353030303a3a2f34382d3438203d3e20323634383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:ef:44:ab:fc:f2:c6:5c:63:af:24:1f:9e:63:92:a3:ec:5d:
         bf:3a:34:9f:d5:a1:76:c3:04:15:c2:2c:94:ae:b1:2b:69:49:
         52:99:57:4d:3f:39:55:72:b3:37:6d:b5:23:cb:54:a6:ac:13:
         f3:b8:f0:97:05:d0:58:46:01:b9:ea:cc:6f:82:ee:36:e4:97:
         ae:cd:61:59:11:67:d0:18:e7:f7:2a:6f:12:d0:78:f5:48:ca:
         6e:af:82:a1:68:7e:4c:1a:7e:e5:c2:9e:0d:6b:b4:1a:95:06:
         50:f1:41:7d:a4:d5:e7:35:20:5f:ba:11:6a:fd:67:d0:f8:09:
         c1:19:47:50:d8:d0:f6:5f:47:c3:be:0a:eb:dc:c3:1a:c8:ab:
         cc:9d:59:dd:25:7f:09:2f:72:a8:f2:b7:8d:60:b5:f7:5c:14:
         fa:57:7e:4c:32:d7:14:98:f8:68:20:c2:02:c4:a5:f4:a5:2e:
         b8:96:e2:24:46:e4:d7:02:86:c8:25:18:66:25:f5:be:e3:cb:
         27:4e:ad:fc:eb:2d:d3:2b:27:06:6c:b0:91:9c:59:39:32:43:
         a0:f4:6e:eb:ad:5f:6e:30:ea:e0:cd:a2:87:59:10:d9:97:8b:
         69:81:66:10:d6:16:93:dc:95:24:f5:fc:2b:3a:a8:26:17:85:
         44:79:8d:68
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUN+6WOaJLWomPwFfjWuenYBRaRP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJCN0QzMkFBMTFGRUQwREIyMTNCMkE3MjM0RDQwMUQ1
NUIwMkZERTAeFw0yNDAzMDUxNzU1NDFaFw0yNTAzMDQxODAwNDFaMDMxMTAvBgNV
BAMTKDA5NzlGOTFBMjU2RDEwMDBFNzQ0QkEwNEVCMTI5RDNDNjY5MDhCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqvbePNm7qIi4/E5mdUO6/2Dl
dgdjqi0cG0qDf8pDkOzh68dykrNtBNFeikEPg/JeHU2XojQyZdREbRrgN7CLJQWO
ouDxBvOKePiGkRohcJl2HJ8mGJO73BFTdsaGUyl96HPf2mkDsNykJjwmjJJ5S/f3
qYuzWism/MswLq06poaMx/66jwCfb7PHdlUTE7t5A67PrrfEtqDXJwMhWyqbFI5P
9NsOA/XYJkkbreIAYegUh0nF6815WbIC+OJ70VShFuQ2DuufmLOCAt36Vz+yfqKq
MkxPFQhVuiOlOcfkrAbapUQtsdm5esHavr5uKQyjfS6hFnXqN0bwhhhVDANRAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUCXn5GiVtEADnRLoE6xKdPGaQizMwHwYDVR0j
BBgwFoAUG7fTKqEf7Q2yE7KnI01AHVWwL94wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDMxM0I5QkZERjU4M0FDMUFGMDQ1RjdCQTdFNTUzRjNC
MDYzNDkzMzM1NTNDMDE3NDA2NUNGM0Y0M0ZCRDlELzAvMUJCN0QzMkFBMTFGRUQw
REIyMTNCMkE3MjM0RDQwMUQ1NUIwMkZERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQkI3RDMyQUExMUZFRDBEQjIx
M0IyQTcyMzRENDAxRDU1QjAyRkRFLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzMTNCOUJGREY1ODNBQzFBRjA0NUY3QkE3RTU1M0YzQjA2MzQ5MzMz
NTUzQzAxNzQwNjVDRjNGNDNGQkQ5RC8wLzMyMzgzMDMxM2EzMTMzM2EzNTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNDM4MzEzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABNQADANBgkqhkiG9w0BAQsFAAOCAQEA0O9Eq/zyxlxjryQfnmOSo+xdvzo0
n9WhdsMEFcIslK6xK2lJUplXTT85VXKzN221I8tUpqwT87jwlwXQWEYBuerMb4Lu
NuSXrs1hWRFn0Bjn9ypvEtB49UjKbq+CoWh+TBp+5cKeDWu0GpUGUPFBfaTV5zUg
X7oRav1n0PgJwRlHUNjQ9l9Hw74K69zDGsirzJ1Z3SV/CS9yqPK3jWC191wU+ld+
TDLXFJj4aCDCAsSl9KUuuJbiJEbk1wKGyCUYZiX1vuPLJ06t/Ost0ysnBmywkZxZ
OTJDoPRu661fbjDq4M2ih1kQ2ZeLaYFmENYWk9yVJPX8KzqoJheFRHmNaA==
-----END CERTIFICATE-----