Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3634203d3e203238303037.roa
File:                     323830303a3565303a3a2f33322d3634203d3e203238303037.roa (raw, json)
Hash identifier:          vbYsP/2B96dnW6bO0r3OQAiSPDP3LEddPtnoqM5mcBs=
Subject key identifier:   DD:6E:8E:15:0A:43:AE:3B:98:D7:03:CD:EF:D1:E7:76:A2:EC:B0:0E
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       4038A96D09745B11ADFDE2A1D583E7472F83E794
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3634203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 17:51:23 +0000
ROA not before:           Tue 05 Mar 2024 17:46:23 +0000
ROA not after:            Tue 04 Mar 2025 17:51:23 +0000
asID:                     28007
IP address blocks:        2800:5e0::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:a9:6d:09:74:5b:11:ad:fd:e2:a1:d5:83:e7:47:2f:83:e7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:23 2024 GMT
            Not After : Mar  4 17:51:23 2025 GMT
        Subject: CN=DD6E8E150A43AE3B98D703CDEFD1E776A2ECB00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:79:ce:a9:41:9d:7a:c5:03:a1:c4:ed:ba:
                    3a:ee:8b:f5:58:6f:7f:9a:0a:f6:fa:70:6b:33:82:
                    8f:26:41:af:be:41:4a:c1:35:49:8d:59:63:09:45:
                    6c:2c:ad:fa:c4:76:01:d6:57:9c:65:e3:52:24:a5:
                    6d:3f:9d:bf:91:28:fa:8f:2f:9f:8f:75:dc:78:6c:
                    7b:03:eb:e6:59:68:0f:80:7b:88:27:e5:ad:c0:3e:
                    69:ab:33:87:20:0a:ed:7c:17:eb:e8:50:ce:c5:76:
                    3a:83:45:f9:9c:47:b7:c6:de:7a:d6:ea:41:cb:c5:
                    b4:d7:cd:07:c3:93:ed:24:07:21:ba:f8:59:35:4b:
                    19:44:b7:52:47:ba:68:b7:99:c8:95:34:95:eb:9b:
                    fe:dd:9c:0a:92:61:c8:6d:46:bc:84:1b:f4:a4:5b:
                    37:a5:c8:8e:7f:d9:06:1b:b1:0e:3f:2b:7b:2a:fd:
                    b8:cf:bf:81:10:05:ee:e3:3c:89:5b:67:13:c7:2a:
                    48:6c:d9:19:56:06:1e:1d:07:af:03:9f:95:09:49:
                    68:2d:b1:e0:2a:a8:a5:d5:ba:f2:c8:78:f5:a5:84:
                    28:05:8b:e6:9f:7c:a5:e7:09:a6:65:08:42:a1:59:
                    da:82:8e:c4:c5:80:e1:0d:75:d5:9a:4d:f2:05:bd:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6E:8E:15:0A:43:AE:3B:98:D7:03:CD:EF:D1:E7:76:A2:EC:B0:0E
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3634203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:eb:5c:bd:ba:f3:46:c1:bb:27:cb:65:3c:8c:46:82:0a:fe:
         17:dc:5b:b7:a0:bb:73:17:3b:6d:d0:e4:84:aa:b1:d0:bf:f9:
         78:f0:e4:ed:40:b0:d0:19:0d:04:58:07:6e:29:93:7a:b6:cd:
         21:e1:f1:ec:d2:7c:c7:a3:a3:d8:83:96:bb:fb:bd:d7:63:2f:
         50:b2:71:69:59:94:a5:5c:58:db:0f:b8:11:40:1c:08:e8:d6:
         a2:26:d9:a3:61:a3:f5:e7:3b:b7:a3:17:36:8a:78:7d:a8:1e:
         ab:50:64:cd:bf:51:2a:09:e8:79:ff:cf:06:be:61:6f:75:69:
         d7:cc:ea:1b:b3:b9:33:97:4a:d1:9b:be:75:1d:c9:9a:2c:78:
         33:97:62:32:85:62:4e:d8:84:59:04:b9:2c:82:b6:8e:57:20:
         37:f5:ab:00:63:ae:ec:8c:53:25:e0:5c:84:29:61:b1:3d:8c:
         58:2f:29:4d:8f:c8:63:6d:91:f6:4c:ce:30:ae:0b:ec:4d:cf:
         6f:2e:16:2e:aa:99:a2:62:8f:8e:af:08:72:3d:28:69:9c:8e:
         fe:59:8c:09:d5:fd:33:3e:43:c3:82:12:00:78:46:9e:94:9f:
         dd:db:7d:d2:84:df:4f:a7:c4:b0:48:c8:68:a1:ce:bb:e3:66:
         b2:35:45:a9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUQDipbQl0WxGt/eKh1YPnRy+D55QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBDMEFDRDg2RjMzMUE5NUQyNjE5NTkxODBGNTBDQkND
ODJGNTJBQjAeFw0yNDAzMDUxNzQ2MjNaFw0yNTAzMDQxNzUxMjNaMDMxMTAvBgNV
BAMTKERENkU4RTE1MEE0M0FFM0I5OEQ3MDNDREVGRDFFNzc2QTJFQ0IwMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX/XnOqUGdesUDocTtujrui/VY
b3+aCvb6cGszgo8mQa++QUrBNUmNWWMJRWwsrfrEdgHWV5xl41IkpW0/nb+RKPqP
L5+Pddx4bHsD6+ZZaA+Ae4gn5a3APmmrM4cgCu18F+voUM7FdjqDRfmcR7fG3nrW
6kHLxbTXzQfDk+0kByG6+Fk1SxlEt1JHumi3mciVNJXrm/7dnAqSYchtRryEG/Sk
WzelyI5/2QYbsQ4/K3sq/bjPv4EQBe7jPIlbZxPHKkhs2RlWBh4dB68Dn5UJSWgt
seAqqKXVuvLIePWlhCgFi+affKXnCaZlCEKhWdqCjsTFgOENddWaTfIFvVa3AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU3W6OFQpDrjuY1wPN79HndqLssA4wHwYDVR0j
BBgwFoAUAMCs2G8zGpXSYZWRgPUMvMgvUqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODVFMTZGMjJCM0E1MTNCQjY5NzU3NjlDRjgxNUFBQjg1
M0E5MTEyN0Q0NDZEM0EwRTRDQzExNTYyRjhCQ0M5LzAvMDBDMEFDRDg2RjMzMUE5
NUQyNjE5NTkxODBGNTBDQkNDODJGNTJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEMwQUNEODZGMzMxQTk1RDI2
MTk1OTE4MEY1MENCQ0M4MkY1MkFCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg1RTE2RjIyQjNBNTEzQkI2OTc1NzY5Q0Y4MTVBQUI4NTNBOTExMjdE
NDQ2RDNBMEU0Q0MxMTU2MkY4QkNDOS8wLzMyMzgzMDMwM2EzNTY1MzAzYTNhMmYz
MzMyMmQzNjM0MjAzZDNlMjAzMjM4MzAzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAF4DANBgkq
hkiG9w0BAQsFAAOCAQEAJutcvbrzRsG7J8tlPIxGggr+F9xbt6C7cxc7bdDkhKqx
0L/5ePDk7UCw0BkNBFgHbimTerbNIeHx7NJ8x6Oj2IOWu/u912MvULJxaVmUpVxY
2w+4EUAcCOjWoibZo2Gj9ec7t6MXNop4fageq1Bkzb9RKgnoef/PBr5hb3Vp18zq
G7O5M5dK0Zu+dR3Jmix4M5diMoViTtiEWQS5LIK2jlcgN/WrAGOu7IxTJeBchClh
sT2MWC8pTY/IY22R9kzOMK4L7E3Pby4WLqqZomKPjq8Icj0oaZyO/lmMCdX9Mz5D
w4ISAHhGnpSf3dt90oTfT6fEsEjIaKHOu+NmsjVFqQ==
-----END CERTIFICATE-----