Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/323830303a3465303a3a2f33322d3438203d3e203136363239.roa
File:                     323830303a3465303a3a2f33322d3438203d3e203136363239.roa (raw, json)
Hash identifier:          5L23XfT4Jip0Yy8rRahX85m+8t7AVPpB8HaOC9RE+8s=
Subject key identifier:   EC:3A:2A:08:1D:AE:8E:E4:AA:7F:93:63:2C:38:53:DC:87:0C:8F:64
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       2359450B03796F05EB739AB073D3A26BEF8EFADA
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/323830303a3465303a3a2f33322d3438203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:51:52 +0000
ROA not before:           Tue 05 Mar 2024 17:46:52 +0000
ROA not after:            Tue 04 Mar 2025 17:51:52 +0000
asID:                     16629
IP address blocks:        2800:4e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:59:45:0b:03:79:6f:05:eb:73:9a:b0:73:d3:a2:6b:ef:8e:fa:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:52 2024 GMT
            Not After : Mar  4 17:51:52 2025 GMT
        Subject: CN=EC3A2A081DAE8EE4AA7F93632C3853DC870C8F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7e:8b:7a:d2:23:ba:33:ec:04:7e:33:81:86:
                    fe:19:26:1e:b1:d1:86:37:73:1b:e7:85:81:32:cb:
                    6a:a3:de:af:be:2f:4d:f2:65:42:cc:be:59:93:30:
                    a4:0e:f7:fc:2a:e5:5f:3b:2d:62:de:e0:f9:fc:6f:
                    4b:c8:ed:7f:43:e2:9a:22:b7:e6:6b:64:6c:cd:86:
                    7a:b7:36:7e:0e:48:bf:ad:f1:d0:6d:18:db:dd:b0:
                    3c:71:91:62:c2:7a:43:d5:5a:1f:60:b4:de:e5:ed:
                    fb:76:8a:ce:e3:b2:3f:cf:d6:20:ec:24:c2:5f:e5:
                    30:a1:a8:1c:49:b1:76:90:44:6b:99:ca:ca:b0:74:
                    c5:de:84:9a:36:bb:40:63:87:78:d0:e1:26:a1:85:
                    33:62:ad:34:35:a1:6e:89:b1:af:0d:a6:0e:46:21:
                    ce:ca:9a:67:0d:f1:95:8d:52:bc:87:2c:eb:e4:10:
                    bb:26:78:fd:6d:3d:62:3a:30:aa:53:95:bf:4b:84:
                    7e:c7:ee:cf:c2:71:9d:4f:9a:0a:21:54:2d:5b:a0:
                    eb:2a:c4:8d:cd:83:ea:e6:65:01:23:65:09:e9:cf:
                    77:ea:04:3c:d2:0f:d2:37:f1:d6:3f:1c:10:87:13:
                    77:36:e4:bc:a7:fc:2a:ab:fe:5f:c5:4c:6a:3c:d4:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3A:2A:08:1D:AE:8E:E4:AA:7F:93:63:2C:38:53:DC:87:0C:8F:64
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/323830303a3465303a3a2f33322d3438203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:57:55:50:97:e6:aa:fa:08:a1:8f:a0:92:57:0e:d3:db:3a:
         6a:4b:5d:aa:86:39:cc:d8:88:f1:db:f0:a2:af:d8:68:c3:f5:
         8e:41:34:d4:9a:0c:2f:17:6c:88:2f:f8:b6:54:f4:9e:be:6a:
         80:6d:57:2a:9e:fc:9e:7d:8e:39:de:02:1a:a3:0c:67:af:57:
         1b:d8:19:2c:e1:a6:39:0b:d7:2c:9a:cf:d3:8d:1d:91:fb:15:
         b2:00:a4:eb:1f:83:da:c6:fd:4c:ee:8d:8b:b5:a9:d1:fe:54:
         0e:18:70:d7:98:f3:79:d9:03:37:43:eb:72:45:ed:a1:04:1d:
         30:db:0f:03:40:c7:36:97:5e:85:af:51:1f:21:1f:04:ab:38:
         ca:f9:cc:f4:e5:c0:0f:3c:b8:70:f2:6e:88:4a:5d:9e:f8:7f:
         08:d7:04:1c:13:b9:72:e6:80:fc:7a:c6:96:73:87:26:05:a7:
         ec:7d:84:9e:38:58:fe:07:b5:81:2a:f3:85:77:51:e3:d7:6a:
         3f:1c:85:29:40:5b:f9:55:bc:6a:e1:7f:8f:52:d4:07:ad:6d:
         98:c8:56:fb:85:2c:b6:ff:bb:b6:58:fd:f0:8d:1a:b4:76:db:
         0f:e2:14:fe:6a:40:9b:11:74:25:6f:f9:8c:6c:43:8b:90:44:
         a2:bd:18:ba
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUI1lFCwN5bwXrc5qwc9Oia++O+towDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNDAzMDUxNzQ2NTJaFw0yNTAzMDQxNzUxNTJaMDMxMTAvBgNV
BAMTKEVDM0EyQTA4MURBRThFRTRBQTdGOTM2MzJDMzg1M0RDODcwQzhGNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxfot60iO6M+wEfjOBhv4ZJh6x
0YY3cxvnhYEyy2qj3q++L03yZULMvlmTMKQO9/wq5V87LWLe4Pn8b0vI7X9D4poi
t+ZrZGzNhnq3Nn4OSL+t8dBtGNvdsDxxkWLCekPVWh9gtN7l7ft2is7jsj/P1iDs
JMJf5TChqBxJsXaQRGuZysqwdMXehJo2u0Bjh3jQ4SahhTNirTQ1oW6Jsa8Npg5G
Ic7KmmcN8ZWNUryHLOvkELsmeP1tPWI6MKpTlb9LhH7H7s/CcZ1PmgohVC1boOsq
xI3Ng+rmZQEjZQnpz3fqBDzSD9I38dY/HBCHE3c25Lyn/Cqr/l/FTGo81O6tAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU7DoqCB2ujuSqf5NjLDhT3IcMj2QwHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMyMzgzMDMwM2EzNDY1MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMTM2MzYzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAE4DANBgkq
hkiG9w0BAQsFAAOCAQEAQFdVUJfmqvoIoY+gklcO09s6aktdqoY5zNiI8dvwoq/Y
aMP1jkE01JoMLxdsiC/4tlT0nr5qgG1XKp78nn2OOd4CGqMMZ69XG9gZLOGmOQvX
LJrP040dkfsVsgCk6x+D2sb9TO6Ni7Wp0f5UDhhw15jzedkDN0PrckXtoQQdMNsP
A0DHNpdeha9RHyEfBKs4yvnM9OXADzy4cPJuiEpdnvh/CNcEHBO5cuaA/HrGlnOH
JgWn7H2EnjhY/ge1gSrzhXdR49dqPxyFKUBb+VW8auF/j1LUB61tmMhW+4Ustv+7
tlj98I0atHbbD+IU/mpAmxF0JW/5jGxDi5BEor0Yug==
-----END CERTIFICATE-----