Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/323830313a303a3333303a3a2f34382d3438203d3e203532333832.roa
File:                     323830313a303a3333303a3a2f34382d3438203d3e203532333832.roa (raw, json)
Hash identifier:          PwXy4SRX1eKYR0dT84ZQPR3rOwiNxKwiffoPRgoHO0w=
Subject key identifier:   00:E1:6D:37:B1:72:EF:35:BA:E9:88:B1:14:B7:B9:21:9A:1D:96:A9
Certificate issuer:       /CN=64B6C96BB638070D77C87C67A1FA4111CB8C1173
Certificate serial:       62E0EE1AB3CA76D3F44DD02B25A0E3747C83570D
Authority key identifier: 64:B6:C9:6B:B6:38:07:0D:77:C8:7C:67:A1:FA:41:11:CB:8C:11:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64B6C96BB638070D77C87C67A1FA4111CB8C1173.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/323830313a303a3333303a3a2f34382d3438203d3e203532333832.roa
Signing time:             Tue 05 Mar 2024 17:41:53 +0000
ROA not before:           Tue 05 Mar 2024 17:36:53 +0000
ROA not after:            Tue 04 Mar 2025 17:41:53 +0000
asID:                     52382
IP address blocks:        2801:0:330::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e0:ee:1a:b3:ca:76:d3:f4:4d:d0:2b:25:a0:e3:74:7c:83:57:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64B6C96BB638070D77C87C67A1FA4111CB8C1173
        Validity
            Not Before: Mar  5 17:36:53 2024 GMT
            Not After : Mar  4 17:41:53 2025 GMT
        Subject: CN=00E16D37B172EF35BAE988B114B7B9219A1D96A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:40:06:50:5a:f6:fc:6d:5f:92:f9:d0:21:
                    6e:bb:1f:8f:69:7f:d7:e6:25:f4:44:20:57:28:b6:
                    3c:bc:aa:1e:1d:e8:d4:50:7e:1f:8c:a9:f9:95:57:
                    a4:ab:b4:d6:99:fe:e9:21:31:cd:95:36:4e:f0:5f:
                    92:b3:0f:d6:4c:8a:23:20:5f:28:24:68:78:ad:f2:
                    90:93:e2:d2:82:0a:43:79:88:ba:1e:23:2b:9f:8d:
                    c4:78:2c:83:f9:e4:25:ae:21:b7:ac:2e:44:b4:ac:
                    da:2f:9d:ca:ea:5e:97:ec:ef:99:fa:0c:fc:54:fa:
                    9c:ef:be:01:8f:c8:c7:a9:c5:02:48:85:04:9e:7b:
                    d1:0b:2c:ee:0a:b8:7d:3c:98:76:69:5b:b1:b4:27:
                    a0:c7:9f:6a:e6:8b:02:94:4e:17:80:0b:91:64:d1:
                    3e:b6:66:8c:f3:f6:2f:65:16:3b:ce:b3:09:bd:16:
                    46:9d:b6:d2:9e:f7:6f:cc:ca:02:6f:81:b7:11:be:
                    54:3a:52:e6:91:fd:41:c2:1f:e7:bc:22:44:1a:9a:
                    1b:1c:2d:2b:8b:03:c5:5e:da:e2:78:61:e1:1e:86:
                    7b:cd:9c:7e:7b:fe:d7:2b:a3:38:55:8b:95:17:f6:
                    32:40:15:78:5c:f6:19:07:10:08:bb:48:00:23:b3:
                    61:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E1:6D:37:B1:72:EF:35:BA:E9:88:B1:14:B7:B9:21:9A:1D:96:A9
            X509v3 Authority Key Identifier:
                keyid:64:B6:C9:6B:B6:38:07:0D:77:C8:7C:67:A1:FA:41:11:CB:8C:11:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/64B6C96BB638070D77C87C67A1FA4111CB8C1173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64B6C96BB638070D77C87C67A1FA4111CB8C1173.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50A270ECF273EF191520284B67876B87C00EAB5E39D232BB17247D8A5BE0A3E3/0/323830313a303a3333303a3a2f34382d3438203d3e203532333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:330::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:29:e0:35:fe:12:1c:85:47:1f:1a:76:f6:ed:be:b4:7f:1e:
         f9:0b:93:75:03:5c:17:d1:60:6e:36:b3:85:e7:bc:5d:6d:99:
         12:3c:a0:1a:12:f3:f1:22:ed:2d:20:f7:30:d5:b2:94:89:4a:
         4a:46:ed:c7:20:6b:fd:52:61:05:e9:f6:04:a5:58:e4:f0:41:
         11:b7:13:67:49:82:8e:04:59:3c:0a:23:0e:d6:b8:91:4e:a8:
         d6:41:1f:51:87:73:c6:e3:90:be:cf:84:8a:3f:1c:09:26:9f:
         37:5a:b4:98:23:a5:69:ea:95:11:93:8a:d6:66:88:50:02:0c:
         15:7b:49:06:f4:7f:ef:97:ed:8a:00:a2:bf:6e:29:e9:b3:4a:
         cd:af:37:fd:bb:c5:13:f2:cf:0e:2d:a1:66:66:73:e2:2e:72:
         9f:1f:ad:1d:fb:1e:0c:28:2d:93:98:d6:db:d7:e2:23:17:d7:
         00:01:96:6b:6b:7a:d7:d2:c7:c1:d2:c5:da:f1:1e:21:b4:6d:
         7f:7e:b2:c5:0c:4e:61:96:9f:4b:e5:dc:78:13:de:38:44:e4:
         3c:82:c8:de:67:46:5a:53:9e:3c:2c:e6:b4:92:6a:33:8d:45:
         d8:0b:79:48:bf:ca:c8:da:6e:2b:45:2d:d2:7c:b5:42:c3:29:
         8d:3e:e8:3b
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUYuDuGrPKdtP0TdArJaDjdHyDVw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRCNkM5NkJCNjM4MDcwRDc3Qzg3QzY3QTFGQTQxMTFD
QjhDMTE3MzAeFw0yNDAzMDUxNzM2NTNaFw0yNTAzMDQxNzQxNTNaMDMxMTAvBgNV
BAMTKDAwRTE2RDM3QjE3MkVGMzVCQUU5ODhCMTE0QjdCOTIxOUExRDk2QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kUAGUFr2/G1fkvnQIW67H49p
f9fmJfREIFcotjy8qh4d6NRQfh+MqfmVV6SrtNaZ/ukhMc2VNk7wX5KzD9ZMiiMg
XygkaHit8pCT4tKCCkN5iLoeIyufjcR4LIP55CWuIbesLkS0rNovncrqXpfs75n6
DPxU+pzvvgGPyMepxQJIhQSee9ELLO4KuH08mHZpW7G0J6DHn2rmiwKUTheAC5Fk
0T62Zozz9i9lFjvOswm9FkadttKe92/MygJvgbcRvlQ6UuaR/UHCH+e8IkQamhsc
LSuLA8Ve2uJ4YeEehnvNnH57/tcrozhVi5UX9jJAFXhc9hkHEAi7SAAjs2EfAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUAOFtN7Fy7zW66YixFLe5IZodlqkwHwYDVR0j
BBgwFoAUZLbJa7Y4Bw13yHxnofpBEcuMEXMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MEEyNzBFQ0YyNzNFRjE5MTUyMDI4NEI2Nzg3NkI4N0Mw
MEVBQjVFMzlEMjMyQkIxNzI0N0Q4QTVCRTBBM0UzLzAvNjRCNkM5NkJCNjM4MDcw
RDc3Qzg3QzY3QTFGQTQxMTFDQjhDMTE3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NEI2Qzk2QkI2MzgwNzBENzdD
ODdDNjdBMUZBNDExMUNCOEMxMTczLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTBBMjcwRUNGMjczRUYxOTE1MjAyODRCNjc4NzZCODdDMDBFQUI1RTM5
RDIzMkJCMTcyNDdEOEE1QkUwQTNFMy8wLzMyMzgzMDMxM2EzMDNhMzMzMzMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjMzMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAAAD
MDANBgkqhkiG9w0BAQsFAAOCAQEAbyngNf4SHIVHHxp29u2+tH8e+QuTdQNcF9Fg
bjazhee8XW2ZEjygGhLz8SLtLSD3MNWylIlKSkbtxyBr/VJhBen2BKVY5PBBEbcT
Z0mCjgRZPAojDta4kU6o1kEfUYdzxuOQvs+Eij8cCSafN1q0mCOlaeqVEZOK1maI
UAIMFXtJBvR/75ftigCiv24p6bNKza83/bvFE/LPDi2hZmZz4i5ynx+tHfseDCgt
k5jW29fiIxfXAAGWa2t619LHwdLF2vEeIbRtf36yxQxOYZafS+XceBPeOETkPILI
3mdGWlOePCzmtJJqM41F2At5SL/KyNpuK0Ut0ny1QsMpjT7oOw==
-----END CERTIFICATE-----