Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323032.roa
File:                     323830303a643330303a3a2f32392d3438203d3e20323032.roa (raw, json)
Hash identifier:          A4PS1q7CKvxQ5Y+q0PRpiEKfAW+tyJMs4A4LBJxN5YU=
Subject key identifier:   1F:32:5F:9F:A8:14:61:F8:44:F7:08:F7:8E:84:34:24:C3:F7:4B:58
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       596FDDEF7FA2274D51E5CBE78738DCB87424DAC4
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 18:02:41 +0000
ROA not before:           Tue 05 Mar 2024 17:57:41 +0000
ROA not after:            Tue 04 Mar 2025 18:02:41 +0000
asID:                     202
IP address blocks:        2800:d300::/29 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6f:dd:ef:7f:a2:27:4d:51:e5:cb:e7:87:38:dc:b8:74:24:da:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:41 2024 GMT
            Not After : Mar  4 18:02:41 2025 GMT
        Subject: CN=1F325F9FA81461F844F708F78E843424C3F74B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:e9:51:b9:c2:2e:00:1a:d4:06:ec:6e:d1:
                    6c:26:90:a5:9a:0b:a3:d3:06:0d:53:76:52:1f:30:
                    d2:19:4b:8f:b0:1b:58:c1:76:84:49:f0:e0:4c:4a:
                    6c:a9:19:e2:37:57:02:f0:83:11:63:22:1c:3a:3d:
                    97:5e:50:5d:fb:68:68:dc:4b:2b:d2:05:d8:fe:ef:
                    43:d2:fb:65:b3:26:ef:5b:0f:9a:05:0c:73:14:67:
                    9b:78:7c:25:14:88:66:3f:a4:04:28:a2:de:07:8f:
                    fa:d2:b6:46:59:05:4c:13:2f:78:7b:e3:f3:17:37:
                    2e:ee:5d:26:9a:c7:cf:61:3e:02:bb:05:6e:0f:8e:
                    c6:20:10:49:33:05:bf:c8:a5:4c:f8:fd:f0:65:72:
                    ad:a6:70:74:f2:44:7f:59:31:ca:32:d2:25:ae:63:
                    84:f8:31:92:82:bd:db:15:1d:39:59:56:cb:2f:e8:
                    01:37:2b:fa:cc:23:db:e7:c5:08:3b:39:05:0b:e3:
                    78:65:ee:a7:ac:8e:75:61:c3:58:94:ec:64:6a:8d:
                    67:e2:2d:1f:57:46:25:9a:34:20:e3:18:7a:16:1d:
                    b2:8a:7d:5c:9c:83:99:b1:ea:eb:01:17:1a:71:52:
                    ee:75:27:22:0e:d7:ba:18:26:4d:6f:5e:6c:35:2a:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:32:5F:9F:A8:14:61:F8:44:F7:08:F7:8E:84:34:24:C3:F7:4B:58
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d300::/29

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:0e:ba:a1:9f:7e:85:71:15:79:88:7f:97:fd:da:cb:96:
         33:7d:ca:b1:2e:82:9d:cc:69:41:20:b8:d8:7f:92:2a:96:53:
         bd:78:3a:bf:72:bd:2c:00:15:5f:6f:83:ee:7b:41:97:e1:e5:
         48:07:f2:63:7a:f4:91:ce:9a:31:ba:c0:f5:00:78:f3:4b:96:
         cf:2c:a4:a7:f4:91:0b:e1:7d:c0:32:e4:42:b7:54:d5:6d:e5:
         0e:16:49:bc:17:49:9b:6a:44:30:6e:9e:a3:67:e0:30:96:cc:
         16:5d:51:ee:38:77:11:a3:f5:9d:40:a5:8a:55:ed:62:de:bb:
         fe:0f:45:98:2a:56:80:67:8c:71:84:0a:ce:7e:e1:b7:f7:b7:
         76:5f:12:e5:86:12:5b:82:ff:55:d4:1c:cb:61:a0:e0:d4:33:
         a1:ac:03:28:99:fd:dc:5d:b5:99:5a:56:31:16:aa:17:b4:d5:
         87:bf:35:d0:a6:66:69:d8:87:61:4f:ac:4b:4b:d5:0c:fd:ee:
         20:99:3e:70:ed:b1:35:c6:8e:3b:09:c7:ba:52:a9:b7:01:d2:
         8d:60:f1:01:1e:24:28:fc:92:5f:a2:41:95:6b:0d:3f:bf:10:
         27:9a:42:09:b2:46:a5:a3:7d:8c:9e:43:9f:50:69:82:60:da:
         fb:ee:52:25
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUWW/d73+iJ01R5cvnhzjcuHQk2sQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNDAzMDUxNzU3NDFaFw0yNTAzMDQxODAyNDFaMDMxMTAvBgNV
BAMTKDFGMzI1RjlGQTgxNDYxRjg0NEY3MDhGNzhFODQzNDI0QzNGNzRCNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcelRucIuABrUBuxu0WwmkKWa
C6PTBg1TdlIfMNIZS4+wG1jBdoRJ8OBMSmypGeI3VwLwgxFjIhw6PZdeUF37aGjc
SyvSBdj+70PS+2WzJu9bD5oFDHMUZ5t4fCUUiGY/pAQoot4Hj/rStkZZBUwTL3h7
4/MXNy7uXSaax89hPgK7BW4PjsYgEEkzBb/IpUz4/fBlcq2mcHTyRH9ZMcoy0iWu
Y4T4MZKCvdsVHTlZVssv6AE3K/rMI9vnxQg7OQUL43hl7qesjnVhw1iU7GRqjWfi
LR9XRiWaNCDjGHoWHbKKfVycg5mx6usBFxpxUu51JyIO17oYJk1vXmw1Ku2RAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUHzJfn6gUYfhE9wj3joQ0JMP3S1gwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzgzMDMwM2E2NDMzMzAzMDNhM2Ey
ZjMyMzkyZDM0MzgyMDNkM2UyMDMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAygA0wAwDQYJKoZI
hvcNAQELBQADggEBAHJ6Drqhn36FcRV5iH+X/drLljN9yrEugp3MaUEguNh/kiqW
U714Or9yvSwAFV9vg+57QZfh5UgH8mN69JHOmjG6wPUAePNLls8spKf0kQvhfcAy
5EK3VNVt5Q4WSbwXSZtqRDBunqNn4DCWzBZdUe44dxGj9Z1ApYpV7WLeu/4PRZgq
VoBnjHGECs5+4bf3t3ZfEuWGEluC/1XUHMthoODUM6GsAyiZ/dxdtZlaVjEWqhe0
1Ye/NdCmZmnYh2FPrEtL1Qz97iCZPnDtsTXGjjsJx7pSqbcB0o1g8QEeJCj8kl+i
QZVrDT+/ECeaQgmyRqWjfYyeQ59QaYJg2vvuUiU=
-----END CERTIFICATE-----