Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34342d3434203d3e203138373437.roa
File:                     323830313a3161613a3a2f34342d3434203d3e203138373437.roa (raw, json)
Hash identifier:          2Po1uNz9C9zmSsIFB7gNHz5hseuHq5tqaeK2WDmWZxE=
Subject key identifier:   83:75:1A:8C:6D:BE:2C:41:81:32:B0:1D:FC:D2:17:C1:26:CE:75:96
Certificate issuer:       /CN=76B8A90CA8E96EF9D4662804E12B1D4B5179678F
Certificate serial:       0DAF4D92126AB48ED72E47EA4409554B4C1BFB1D
Authority key identifier: 76:B8:A9:0C:A8:E9:6E:F9:D4:66:28:04:E1:2B:1D:4B:51:79:67:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76B8A90CA8E96EF9D4662804E12B1D4B5179678F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34342d3434203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:22:35 +0000
ROA not before:           Tue 05 Mar 2024 18:17:35 +0000
ROA not after:            Tue 04 Mar 2025 18:22:35 +0000
asID:                     18747
IP address blocks:        2801:1aa::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:af:4d:92:12:6a:b4:8e:d7:2e:47:ea:44:09:55:4b:4c:1b:fb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76B8A90CA8E96EF9D4662804E12B1D4B5179678F
        Validity
            Not Before: Mar  5 18:17:35 2024 GMT
            Not After : Mar  4 18:22:35 2025 GMT
        Subject: CN=83751A8C6DBE2C418132B01DFCD217C126CE7596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7b:40:fa:55:5e:f4:06:0e:e7:c4:98:30:6f:
                    1f:52:37:00:ab:c4:db:42:6f:96:fc:19:db:1b:64:
                    53:f9:41:98:ff:68:8a:a8:a2:6e:3a:8d:6c:2b:56:
                    36:9e:bc:29:d0:36:a0:98:d1:03:00:8e:21:fc:72:
                    94:4e:50:5f:03:f1:b3:98:f8:44:18:19:38:d9:d3:
                    55:33:0f:7c:52:ba:32:ee:e8:ff:5f:07:c1:20:2b:
                    6c:c0:97:a1:e3:2a:ff:74:dc:1e:c6:9d:8d:99:c3:
                    21:49:9d:63:9d:ed:bb:eb:0a:05:6e:50:a8:8a:b8:
                    ee:d5:15:9c:73:1b:1f:53:8a:75:c5:2f:91:86:a6:
                    d2:1b:54:78:db:50:36:cd:c7:30:48:8d:44:80:e9:
                    bb:1e:ec:f2:f1:b7:db:8d:22:9d:ee:13:4c:97:cc:
                    67:87:df:ed:4f:ca:3f:b0:5f:0b:6c:0a:27:b4:92:
                    a3:68:19:3d:cc:b1:81:c9:db:7b:e8:74:f8:d0:2f:
                    ad:a0:f9:ec:67:95:fc:97:ee:f5:c0:79:2a:4a:91:
                    ce:f2:65:55:d3:4d:88:d0:9e:2c:cd:bf:ad:fb:12:
                    26:e4:23:77:ce:cc:2c:53:a8:d4:ac:f8:9f:32:34:
                    f0:be:15:c0:2b:b5:13:a7:b9:57:df:49:14:5e:df:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:75:1A:8C:6D:BE:2C:41:81:32:B0:1D:FC:D2:17:C1:26:CE:75:96
            X509v3 Authority Key Identifier:
                keyid:76:B8:A9:0C:A8:E9:6E:F9:D4:66:28:04:E1:2B:1D:4B:51:79:67:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/76B8A90CA8E96EF9D4662804E12B1D4B5179678F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76B8A90CA8E96EF9D4662804E12B1D4B5179678F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34342d3434203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1aa::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:74:69:06:65:5b:bb:8b:cd:87:69:67:92:8d:21:59:83:
         3e:ac:61:e3:70:4f:8a:35:e9:85:cc:8a:2a:4d:10:ce:12:b5:
         7f:c0:b8:f5:c7:27:2d:43:75:76:12:e3:3c:1d:69:ef:ba:fd:
         a3:0f:0c:f6:41:0f:21:11:f2:2d:42:5f:b8:07:4b:5d:d8:10:
         71:e0:03:ce:ff:fa:63:00:f7:5d:c7:9e:d2:25:8e:ff:c7:54:
         58:86:d0:b3:63:e5:67:dd:04:4c:38:aa:48:d4:f1:65:08:f6:
         00:6c:98:31:3d:10:a9:68:83:3a:8a:a3:05:89:82:ff:d8:e2:
         7f:1d:18:45:16:90:f8:bf:37:15:ae:29:26:08:e4:99:6c:c3:
         8d:5f:6a:07:05:a8:03:ad:02:15:ab:4b:71:c1:dc:3f:32:fd:
         f3:56:2d:ff:ab:66:e9:a4:37:68:93:df:80:c3:3c:f2:f1:e1:
         36:eb:94:c8:d7:40:51:aa:10:d4:b2:e1:43:d7:58:fb:e8:93:
         62:19:f5:08:2a:61:97:a0:eb:5f:0a:de:a5:a1:9c:af:c9:50:
         2e:bf:14:1a:34:ec:0e:bd:9a:e4:dd:2e:79:1c:36:3a:3f:7a:
         f2:5d:2f:f6:26:d3:b6:0f:07:2c:b6:17:e2:3e:75:9e:b8:64:
         b6:9a:ae:1b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUDa9NkhJqtI7XLkfqRAlVS0wb+x0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZCOEE5MENBOEU5NkVGOUQ0NjYyODA0RTEyQjFENEI1
MTc5Njc4RjAeFw0yNDAzMDUxODE3MzVaFw0yNTAzMDQxODIyMzVaMDMxMTAvBgNV
BAMTKDgzNzUxQThDNkRCRTJDNDE4MTMyQjAxREZDRDIxN0MxMjZDRTc1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDne0D6VV70Bg7nxJgwbx9SNwCr
xNtCb5b8GdsbZFP5QZj/aIqoom46jWwrVjaevCnQNqCY0QMAjiH8cpROUF8D8bOY
+EQYGTjZ01UzD3xSujLu6P9fB8EgK2zAl6HjKv903B7GnY2ZwyFJnWOd7bvrCgVu
UKiKuO7VFZxzGx9TinXFL5GGptIbVHjbUDbNxzBIjUSA6bse7PLxt9uNIp3uE0yX
zGeH3+1Pyj+wXwtsCie0kqNoGT3MsYHJ23vodPjQL62g+exnlfyX7vXAeSpKkc7y
ZVXTTYjQnizNv637EibkI3fOzCxTqNSs+J8yNPC+FcArtROnuVffSRRe3xLNAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUg3UajG2+LEGBMrAd/NIXwSbOdZYwHwYDVR0j
BBgwFoAUdripDKjpbvnUZigE4SsdS1F5Z48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NjU4MTk5ODExNzEwN0I2NTY5RDNEOUIxNzgxRENEODM2
OUVEQzFCNDI4MTk0OUY3NTA0QjU2N0MzQkFERTY4LzAvNzZCOEE5MENBOEU5NkVG
OUQ0NjYyODA0RTEyQjFENEI1MTc5Njc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkI4QTkwQ0E4RTk2RUY5RDQ2
NjI4MDRFMTJCMUQ0QjUxNzk2NzhGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjY1ODE5OTgxMTcxMDdCNjU2OUQzRDlCMTc4MURDRDgzNjlFREMxQjQy
ODE5NDlGNzUwNEI1NjdDM0JBREU2OC8wLzMyMzgzMDMxM2EzMTYxNjEzYTNhMmYz
NDM0MmQzNDM0MjAzZDNlMjAzMTM4MzczNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBqgAAMA0G
CSqGSIb3DQEBCwUAA4IBAQByxXRpBmVbu4vNh2lnko0hWYM+rGHjcE+KNemFzIoq
TRDOErV/wLj1xyctQ3V2EuM8HWnvuv2jDwz2QQ8hEfItQl+4B0td2BBx4APO//pj
APddx57SJY7/x1RYhtCzY+Vn3QRMOKpI1PFlCPYAbJgxPRCpaIM6iqMFiYL/2OJ/
HRhFFpD4vzcVrikmCOSZbMONX2oHBagDrQIVq0txwdw/Mv3zVi3/q2bppDdok9+A
wzzy8eE265TI10BRqhDUsuFD11j76JNiGfUIKmGXoOtfCt6loZyvyVAuvxQaNOwO
vZrk3S55HDY6P3ryXS/2JtO2DwcsthfiPnWeuGS2mq4b
-----END CERTIFICATE-----