Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/323830313a31663a323030303a3a2f34382d3438203d3e20323633383331.roa
File:                     323830313a31663a323030303a3a2f34382d3438203d3e20323633383331.roa (raw, json)
Hash identifier:          5sFojrkvGzbD4LWlShvNPxva30oYuEFZVZJwM+cb2ZI=
Subject key identifier:   2C:42:39:14:5C:3A:6E:09:AE:6A:21:D3:F0:2D:75:0C:62:09:87:7C
Certificate issuer:       /CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
Certificate serial:       4E41C54CEE16E0A56A4DE5194E6B1DD412A62141
Authority key identifier: DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/323830313a31663a323030303a3a2f34382d3438203d3e20323633383331.roa
Signing time:             Tue 05 Mar 2024 17:44:47 +0000
ROA not before:           Tue 05 Mar 2024 17:39:47 +0000
ROA not after:            Tue 04 Mar 2025 17:44:47 +0000
asID:                     263831
IP address blocks:        2801:1f:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:41:c5:4c:ee:16:e0:a5:6a:4d:e5:19:4e:6b:1d:d4:12:a6:21:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
        Validity
            Not Before: Mar  5 17:39:47 2024 GMT
            Not After : Mar  4 17:44:47 2025 GMT
        Subject: CN=2C4239145C3A6E09AE6A21D3F02D750C6209877C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:30:63:d2:92:2c:48:c5:52:36:80:0e:63:
                    5e:3d:bd:fe:a1:8c:bc:e3:60:22:7e:82:00:56:c9:
                    14:2a:7f:0a:a6:5a:79:29:c8:ed:8d:84:06:6a:03:
                    eb:9f:fe:62:c9:a9:f6:39:5c:f8:72:8d:b4:5f:ac:
                    7c:17:6d:f3:14:49:42:5c:26:de:0c:a2:a5:6a:73:
                    d0:8a:69:31:7b:51:4b:f6:33:22:63:3d:1b:40:ae:
                    34:b4:1b:fa:22:34:3a:98:75:51:68:19:c5:13:6e:
                    0d:a6:db:28:06:bb:2d:73:53:af:52:99:09:b8:f2:
                    18:99:a1:15:1b:bd:9d:9e:4c:d6:5d:2d:16:b3:3c:
                    ae:29:33:61:17:3b:7b:dc:9b:df:09:a5:c4:98:3e:
                    72:b9:86:8f:64:e2:bb:f3:0d:49:3a:90:b1:f8:ef:
                    a6:94:48:a6:76:a7:95:be:ca:a8:c0:71:3b:b6:59:
                    49:4d:0d:f6:be:8b:b7:12:a0:52:60:8d:96:e6:50:
                    10:3d:97:43:ee:f1:3c:30:1f:bb:54:5f:cb:26:d2:
                    c4:ec:00:0d:95:7e:da:0d:11:e5:8f:a1:5f:21:f6:
                    12:9f:ab:43:0f:82:86:86:6d:d2:f5:d4:0d:13:24:
                    95:b6:65:c1:6e:07:a8:65:6f:97:11:c5:a4:2c:f9:
                    86:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:42:39:14:5C:3A:6E:09:AE:6A:21:D3:F0:2D:75:0C:62:09:87:7C
            X509v3 Authority Key Identifier:
                keyid:DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/323830313a31663a323030303a3a2f34382d3438203d3e20323633383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:7b:71:37:b0:bd:be:32:fa:1d:49:59:96:c4:22:10:b9:
         74:78:24:f5:88:bb:15:95:ac:83:90:c7:41:72:e7:cd:5c:84:
         89:52:d7:ef:57:8c:88:e1:a9:ed:a8:0c:27:b7:1b:fc:6c:87:
         91:19:bc:32:c3:49:0a:5a:08:b8:dc:68:54:a9:81:18:ab:f2:
         f2:48:d2:85:cc:3c:5b:ed:48:ec:b7:ea:5a:b8:c8:f8:68:a1:
         6d:90:61:9d:c6:85:f2:04:0f:0c:a9:82:e2:72:04:20:33:df:
         82:21:72:0e:71:91:2f:02:28:9a:60:93:cb:9c:5b:d2:58:91:
         35:95:1d:b3:79:6f:c0:85:35:2c:49:8d:95:71:96:d9:aa:c8:
         01:1e:77:94:d6:ac:15:fe:44:e7:07:f5:9e:9d:e1:53:f7:d6:
         96:81:67:01:41:76:b5:0c:a4:8a:31:4e:56:49:c0:0f:de:a5:
         89:2c:43:70:dc:41:37:40:31:b7:53:4e:1d:2b:32:5a:de:02:
         f7:4a:de:b0:85:dc:03:d2:0c:55:8f:bb:f5:ef:c9:8d:3f:61:
         74:eb:c8:b7:2c:dd:ac:1d:c6:a2:14:42:7d:19:ff:d6:45:a4:
         dc:6d:41:7b:c1:88:5e:1f:de:e4:fc:75:54:1d:2e:75:1c:2b:
         5f:74:27:ec
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUTkHFTO4W4KVqTeUZTmsd1BKmIUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY0NDBFNjVDMkU2Mzk5MkMyNTBBOTkwNUJGQzhENDI4
REI2MUYxMjAeFw0yNDAzMDUxNzM5NDdaFw0yNTAzMDQxNzQ0NDdaMDMxMTAvBgNV
BAMTKDJDNDIzOTE0NUMzQTZFMDlBRTZBMjFEM0YwMkQ3NTBDNjIwOTg3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FTBj0pIsSMVSNoAOY149vf6h
jLzjYCJ+ggBWyRQqfwqmWnkpyO2NhAZqA+uf/mLJqfY5XPhyjbRfrHwXbfMUSUJc
Jt4MoqVqc9CKaTF7UUv2MyJjPRtArjS0G/oiNDqYdVFoGcUTbg2m2ygGuy1zU69S
mQm48hiZoRUbvZ2eTNZdLRazPK4pM2EXO3vcm98JpcSYPnK5ho9k4rvzDUk6kLH4
76aUSKZ2p5W+yqjAcTu2WUlNDfa+i7cSoFJgjZbmUBA9l0Pu8TwwH7tUX8sm0sTs
AA2VftoNEeWPoV8h9hKfq0MPgoaGbdL11A0TJJW2ZcFuB6hlb5cRxaQs+Ya3AgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQULEI5FFw6bgmuaiHT8C11DGIJh3wwHwYDVR0j
BBgwFoAU30QOZcLmOZLCUKmQW/yNQo22HxIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OEU4MkY3QkEwRkE1OTFCRUM3RTAzNUNGRkQ4NzI0NTg0
OTY5M0YyMzY1RTUyRUNCRTQ2NzUyOTk2NjM3QTNFLzAvREY0NDBFNjVDMkU2Mzk5
MkMyNTBBOTkwNUJGQzhENDI4REI2MUYxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjQ0MEU2NUMyRTYzOTkyQzI1
MEE5OTA1QkZDOEQ0MjhEQjYxRjEyLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhFODJGN0JBMEZBNTkxQkVDN0UwMzVDRkZEODcyNDU4NDk2OTNGMjM2
NUU1MkVDQkU0Njc1Mjk5NjYzN0EzRS8wLzMyMzgzMDMxM2EzMTY2M2EzMjMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMzM4MzMzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBAB8gADANBgkqhkiG9w0BAQsFAAOCAQEAmup7cTewvb4y+h1JWZbEIhC5dHgk
9Yi7FZWsg5DHQXLnzVyEiVLX71eMiOGp7agMJ7cb/GyHkRm8MsNJCloIuNxoVKmB
GKvy8kjShcw8W+1I7LfqWrjI+GihbZBhncaF8gQPDKmC4nIEIDPfgiFyDnGRLwIo
mmCTy5xb0liRNZUds3lvwIU1LEmNlXGW2arIAR53lNasFf5E5wf1np3hU/fWloFn
AUF2tQykijFOVknAD96liSxDcNxBN0Axt1NOHSsyWt4C90resIXcA9IMVY+79e/J
jT9hdOvItyzdrB3GohRCfRn/1kWk3G1Be8GIXh/e5Px1VB0udRwrX3Qn7A==
-----END CERTIFICATE-----