Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa
File:                     323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa (raw, json)
Hash identifier:          3IeVahW97pKy37e0+WjALE8gCsnUGSmlxLHiyfiqmC0=
Subject key identifier:   96:2D:45:72:26:39:77:72:90:D7:CC:30:D7:4E:D9:57:70:19:5A:39
Certificate issuer:       /CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Certificate serial:       17756164E76D91A2859E774E3C914117B0D4A335
Authority key identifier: CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa
Signing time:             Tue 05 Mar 2024 17:52:16 +0000
ROA not before:           Tue 05 Mar 2024 17:47:16 +0000
ROA not after:            Tue 04 Mar 2025 17:52:16 +0000
asID:                     266848
IP address blocks:        2801:12:f000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:75:61:64:e7:6d:91:a2:85:9e:77:4e:3c:91:41:17:b0:d4:a3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
        Validity
            Not Before: Mar  5 17:47:16 2024 GMT
            Not After : Mar  4 17:52:16 2025 GMT
        Subject: CN=962D45722639777290D7CC30D74ED95770195A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:ea:8c:b5:b4:62:5a:2e:3b:83:ef:d0:8a:
                    76:16:b8:55:b7:1c:ad:cb:42:e3:e6:e9:d5:1e:fc:
                    2e:c9:83:fe:3a:b6:9c:0a:99:82:b7:20:dd:cc:59:
                    9b:51:c2:16:bd:d2:e9:f7:62:88:b3:71:5e:26:87:
                    5d:90:e4:80:8f:21:b3:03:6d:23:7f:e9:96:99:7f:
                    04:24:c6:2d:14:fc:76:2a:dc:75:08:b5:c9:9d:48:
                    a4:62:9d:ab:cc:eb:4e:da:92:84:e3:bb:d3:c4:5d:
                    b8:72:76:b7:3c:7d:7d:35:ce:54:8d:75:2d:5a:eb:
                    89:42:48:e2:ab:d2:01:ab:fd:32:5e:fa:72:ed:b6:
                    a6:6b:fc:0c:fc:c5:43:98:6c:d8:2e:84:74:21:9c:
                    72:c0:7f:b9:a2:28:b5:cd:2d:d7:a2:7f:27:03:7e:
                    df:47:b8:8e:26:27:0e:5e:80:17:52:38:7f:f3:be:
                    23:31:12:48:3d:95:a4:14:3d:d3:fd:25:f3:7d:2b:
                    04:d7:2b:c3:1b:b3:5e:b4:96:31:eb:fb:b0:84:cf:
                    48:ca:97:73:ab:f9:e0:07:ff:ae:53:32:c7:4e:a4:
                    a9:39:84:52:4e:34:1a:90:59:bd:bc:1a:33:1b:e6:
                    16:68:33:b6:e1:c6:35:1d:dd:d5:6e:ad:90:87:ea:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2D:45:72:26:39:77:72:90:D7:CC:30:D7:4E:D9:57:70:19:5A:39
            X509v3 Authority Key Identifier:
                keyid:CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:75:08:5a:4a:bf:57:9b:bf:1f:c0:76:91:45:fb:b5:53:51:
         53:7a:b8:da:8e:f6:41:c3:63:a3:c1:04:95:30:73:3e:07:32:
         88:46:79:08:6a:22:e5:90:24:09:5c:d2:4f:8d:54:3f:70:82:
         73:26:d2:8a:a1:82:1f:4d:8b:df:39:6d:7c:59:02:8c:24:2e:
         c8:39:d3:f5:98:71:d6:27:c2:f1:64:07:ae:ec:ad:76:e6:16:
         12:6e:3a:b8:93:08:1f:aa:46:dd:9c:91:e9:5a:e5:d0:55:e0:
         7b:4c:0b:5f:2b:d7:43:5c:66:bb:2e:c6:27:30:6d:8d:8d:10:
         0f:93:3c:15:e4:45:af:f3:37:1f:67:94:34:66:ec:93:0e:64:
         b8:4c:bf:d9:eb:d6:1a:75:fc:4d:e6:07:df:45:77:a4:5c:b4:
         fb:42:92:e6:f8:78:d0:4c:68:04:7e:95:df:7c:0e:21:53:7a:
         a6:79:26:48:dc:bb:c4:aa:1a:ba:0f:91:b1:e6:8a:73:d8:15:
         c0:1b:ec:94:c1:5f:cd:58:30:69:1b:31:65:75:04:3a:4c:54:
         20:5d:cf:56:a8:75:6d:b6:0f:37:c6:d8:64:85:51:5f:60:0d:
         6f:64:f6:db:c6:2f:fe:db:ff:2e:16:40:e4:21:8f:ea:06:9d:
         2e:6b:a0:cb
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUF3VhZOdtkaKFnndOPJFBF7DUozUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RFNTM2RDVGMEE5MTlEREYxQUQyQTBENkRGMzc2MDhG
Nzg5QTRFODAeFw0yNDAzMDUxNzQ3MTZaFw0yNTAzMDQxNzUyMTZaMDMxMTAvBgNV
BAMTKDk2MkQ0NTcyMjYzOTc3NzI5MEQ3Q0MzMEQ3NEVEOTU3NzAxOTVBMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJuqMtbRiWi47g+/QinYWuFW3
HK3LQuPm6dUe/C7Jg/46tpwKmYK3IN3MWZtRwha90un3YoizcV4mh12Q5ICPIbMD
bSN/6ZaZfwQkxi0U/HYq3HUItcmdSKRinavM607akoTju9PEXbhydrc8fX01zlSN
dS1a64lCSOKr0gGr/TJe+nLttqZr/Az8xUOYbNguhHQhnHLAf7miKLXNLdeifycD
ft9HuI4mJw5egBdSOH/zviMxEkg9laQUPdP9JfN9KwTXK8Mbs160ljHr+7CEz0jK
l3Or+eAH/65TMsdOpKk5hFJONBqQWb28GjMb5hZoM7bhxjUd3dVurZCH6kb7AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUli1FciY5d3KQ18ww107ZV3AZWjkwHwYDVR0j
BBgwFoAUzeU21fCpGd3xrSoNbfN2CPeJpOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMzNBRDQ5RjczNTYwQzJCMzdEMjdFNDEzRjYxRTgwRjM4
RTZFQzE3QjkwNkQwM0MyMEYwREZCODkxRUU5OUJDLzAvQ0RFNTM2RDVGMEE5MTlE
REYxQUQyQTBENkRGMzc2MDhGNzg5QTRFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREU1MzZENUYwQTkxOURERjFB
RDJBMEQ2REYzNzYwOEY3ODlBNEU4LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjMzQUQ0OUY3MzU2MEMyQjM3RDI3RTQxM0Y2MUU4MEYzOEU2RUMxN0I5
MDZEMDNDMjBGMERGQjg5MUVFOTlCQy8wLzMyMzgzMDMxM2EzMTMyM2E2NjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNjM4MzQzOC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABLwADANBgkqhkiG9w0BAQsFAAOCAQEAp3UIWkq/V5u/H8B2kUX7tVNRU3q4
2o72QcNjo8EElTBzPgcyiEZ5CGoi5ZAkCVzST41UP3CCcybSiqGCH02L3zltfFkC
jCQuyDnT9Zhx1ifC8WQHruytduYWEm46uJMIH6pG3ZyR6Vrl0FXge0wLXyvXQ1xm
uy7GJzBtjY0QD5M8FeRFr/M3H2eUNGbskw5kuEy/2evWGnX8TeYH30V3pFy0+0KS
5vh40ExoBH6V33wOIVN6pnkmSNy7xKoaug+RseaKc9gVwBvslMFfzVgwaRsxZXUE
OkxUIF3PVqh1bbYPN8bYZIVRX2ANb2T228Yv/tv/LhZA5CGP6gadLmugyw==
-----END CERTIFICATE-----