Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a363a3a2f34382d3438203d3e20323732313533.roa
File:                     323830313a3138393a363a3a2f34382d3438203d3e20323732313533.roa (raw, json)
Hash identifier:          SgMQrt0ZSDlzFbYkaciIKOD2ZIJ3kJGn0FPqcgcwlmE=
Subject key identifier:   D8:83:DA:61:DD:B3:E7:D2:EA:F6:33:83:B6:5C:AE:FF:D0:02:B1:E0
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       0E0E780BD80638483D7472D97F8206BE832AD988
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a363a3a2f34382d3438203d3e20323732313533.roa
Signing time:             Tue 05 Mar 2024 17:44:13 +0000
ROA not before:           Tue 05 Mar 2024 17:39:13 +0000
ROA not after:            Tue 04 Mar 2025 17:44:13 +0000
asID:                     272153
IP address blocks:        2801:189:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0e:78:0b:d8:06:38:48:3d:74:72:d9:7f:82:06:be:83:2a:d9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Mar  5 17:39:13 2024 GMT
            Not After : Mar  4 17:44:13 2025 GMT
        Subject: CN=D883DA61DDB3E7D2EAF63383B65CAEFFD002B1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:51:2a:55:b0:16:ea:bd:53:ef:52:7a:d6:
                    fb:21:58:76:29:7c:fc:76:dc:75:26:ee:57:73:a1:
                    c2:ed:b2:5b:3b:ab:0b:73:95:ef:c3:69:8a:e3:10:
                    42:e9:2f:5c:1f:1e:26:60:7a:78:9e:ac:c5:15:10:
                    80:85:95:53:1a:fb:a0:23:5c:00:e9:fc:68:82:cb:
                    d5:cb:6c:7a:4d:ee:8e:e2:bc:45:d2:8b:7f:d7:0d:
                    e6:b2:84:22:f3:a4:a4:66:f6:9e:e1:15:40:79:ba:
                    c7:69:e7:af:b6:7b:1f:d0:c2:99:0d:f1:30:c7:d6:
                    b3:a2:c6:ec:3b:9f:51:63:11:b2:71:ab:ad:e8:59:
                    c6:22:9c:ca:f1:62:3b:fb:2c:bc:53:56:89:4e:19:
                    61:fe:7c:8a:42:82:04:25:80:96:2f:f4:f2:41:7a:
                    95:00:14:bf:26:ae:d7:9e:f9:c6:17:ac:f4:bf:ae:
                    69:e0:5e:6d:27:80:7c:d7:2d:ae:c7:00:a7:06:d1:
                    6e:97:75:30:de:9b:8a:e8:8b:d4:35:7e:70:02:fc:
                    fc:d0:dc:e1:62:07:02:19:90:86:be:fb:f7:b0:c8:
                    c6:a1:07:62:37:bb:cc:e0:16:bc:2c:89:8d:66:7d:
                    a5:a2:08:95:7a:3e:d1:5b:28:a8:86:06:0b:b6:9a:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:83:DA:61:DD:B3:E7:D2:EA:F6:33:83:B6:5C:AE:FF:D0:02:B1:E0
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a363a3a2f34382d3438203d3e20323732313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:65:55:98:b5:1f:e3:4b:df:1e:3d:94:da:cc:8a:89:9b:fb:
         22:e3:62:a9:e9:22:e6:62:cd:75:20:9c:1f:57:5e:34:0f:fe:
         8c:d1:90:4b:8c:77:70:cd:a0:71:24:ad:06:91:9c:00:95:a5:
         1a:3c:91:d9:54:84:ca:b4:67:a5:50:3c:ab:fa:44:d0:d1:f3:
         fd:c0:59:e6:d0:37:04:c9:47:dc:dc:7a:90:50:63:56:e8:b6:
         38:f3:c6:0f:35:91:a0:7e:62:e2:a9:53:3d:b0:69:55:2a:f6:
         a4:64:d6:b5:af:ee:db:e7:2b:be:dc:46:b1:c2:df:0f:49:12:
         a0:71:0f:85:f4:5d:5e:4d:f0:41:d0:69:75:b6:bc:74:cc:5b:
         43:e8:66:90:b1:b7:37:c6:87:05:cc:33:60:31:11:dc:57:b5:
         ba:f4:f7:c5:98:96:39:56:f5:b0:01:ab:68:64:0a:3b:60:c3:
         cf:1e:66:b8:aa:1c:b7:b8:98:54:96:da:b8:dc:49:02:bf:4c:
         3a:76:eb:78:e2:aa:e9:4e:fa:e8:a4:c1:50:df:a3:2b:b1:42:
         df:5f:15:8a:6c:2b:c8:d5:97:43:9c:51:fa:4a:cf:6f:69:68:
         0d:bb:e2:9d:13:63:a4:8d:57:32:7a:33:ab:ca:e8:0c:b2:6a:
         00:cb:fd:c3
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUDg54C9gGOEg9dHLZf4IGvoMq2YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGRTJGNzkzMDMwQzY1QTgwOTE0NzVCNjdFRjVBOEND
MTlGMTk1MzAeFw0yNDAzMDUxNzM5MTNaFw0yNTAzMDQxNzQ0MTNaMDMxMTAvBgNV
BAMTKEQ4ODNEQTYxRERCM0U3RDJFQUY2MzM4M0I2NUNBRUZGRDAwMkIxRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2C1EqVbAW6r1T71J61vshWHYp
fPx23HUm7ldzocLtsls7qwtzle/DaYrjEELpL1wfHiZgenierMUVEICFlVMa+6Aj
XADp/GiCy9XLbHpN7o7ivEXSi3/XDeayhCLzpKRm9p7hFUB5usdp56+2ex/QwpkN
8TDH1rOixuw7n1FjEbJxq63oWcYinMrxYjv7LLxTVolOGWH+fIpCggQlgJYv9PJB
epUAFL8mrtee+cYXrPS/rmngXm0ngHzXLa7HAKcG0W6XdTDem4roi9Q1fnAC/PzQ
3OFiBwIZkIa++/ewyMahB2I3u8zgFrwsiY1mfaWiCJV6PtFbKKiGBgu2muL9AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU2IPaYd2z59Lq9jODtlyu/9ACseAwHwYDVR0j
BBgwFoAUvf4veTAwxlqAkUdbZ+9ajMGfGVMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTNFMDVGQkQ2QTkxQTJCM0M4MjUyNkI2NDM2Q0E5NTU5
MzhFMDhERTU2MDQ1REM0QkI2RkM3RDExQUI4NzJBLzAvQkRGRTJGNzkzMDMwQzY1
QTgwOTE0NzVCNjdFRjVBOENDMTlGMTk1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CREZFMkY3OTMwMzBDNjVBODA5
MTQ3NUI2N0VGNUE4Q0MxOUYxOTUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDkzRTA1RkJENkE5MUEyQjNDODI1MjZCNjQzNkNBOTU1OTM4RTA4REU1
NjA0NURDNEJCNkZDN0QxMUFCODcyQS8wLzMyMzgzMDMxM2EzMTM4MzkzYTM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMyMzEzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB
iQAGMA0GCSqGSIb3DQEBCwUAA4IBAQCDZVWYtR/jS98ePZTazIqJm/si42Kp6SLm
Ys11IJwfV140D/6M0ZBLjHdwzaBxJK0GkZwAlaUaPJHZVITKtGelUDyr+kTQ0fP9
wFnm0DcEyUfc3HqQUGNW6LY488YPNZGgfmLiqVM9sGlVKvakZNa1r+7b5yu+3Eax
wt8PSRKgcQ+F9F1eTfBB0Gl1trx0zFtD6GaQsbc3xocFzDNgMRHcV7W69PfFmJY5
VvWwAatoZAo7YMPPHma4qhy3uJhUltq43EkCv0w6dut44qrpTvropMFQ36MrsULf
XxWKbCvI1ZdDnFH6Ss9vaWgNu+KdE2OkjVcyejOryugMsmoAy/3D
-----END CERTIFICATE-----