Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a32303a3a2f34352d3438203d3e203139343239.roa
File:                     323830313a3136653a32303a3a2f34352d3438203d3e203139343239.roa (raw, json)
Hash identifier:          OIEMo6Fyy+cFVz0/o5fDPYp8rhaSgdtP0T9qIc2qNZU=
Subject key identifier:   C3:EC:D7:50:83:CE:7A:E9:74:61:94:0E:F4:0C:B1:B6:31:B4:58:5E
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       75978E52FDC3478C5DF0B8D2BEC7FB9016C55956
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a32303a3a2f34352d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:13:00 +0000
ROA not before:           Tue 05 Mar 2024 18:08:00 +0000
ROA not after:            Tue 04 Mar 2025 18:13:00 +0000
asID:                     19429
IP address blocks:        2801:16e:20::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:97:8e:52:fd:c3:47:8c:5d:f0:b8:d2:be:c7:fb:90:16:c5:59:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Mar  5 18:08:00 2024 GMT
            Not After : Mar  4 18:13:00 2025 GMT
        Subject: CN=C3ECD75083CE7AE97461940EF40CB1B631B4585E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:e8:27:71:91:7a:99:62:9e:f9:d0:d6:68:
                    c2:ea:c0:35:21:1a:e8:cc:02:35:f6:43:36:a7:38:
                    db:52:61:5b:6a:96:3e:71:2a:16:02:2d:f6:5a:6d:
                    bc:75:76:48:56:f2:42:c4:af:a5:84:5f:ad:4a:2d:
                    6c:b6:28:ff:17:6b:c1:76:e4:59:91:f3:e7:a7:f6:
                    9f:3e:9a:2f:85:09:c2:cd:65:31:5a:09:b2:1b:3f:
                    68:7c:88:d6:8f:ad:c2:28:42:a7:07:b0:22:1f:84:
                    75:82:26:f4:ec:02:de:a5:64:78:89:50:ea:5d:44:
                    44:cf:0f:04:47:a3:15:89:25:e8:92:16:dd:01:e9:
                    e0:89:e5:c3:cf:17:72:fb:64:22:a9:24:78:33:0c:
                    89:be:58:9f:15:52:f6:75:47:4f:22:a1:5c:4a:12:
                    0a:cc:0c:9f:3e:97:43:22:3c:5d:00:94:2e:95:ba:
                    f8:c5:a8:4e:e5:49:98:a7:0c:ac:68:84:61:69:a1:
                    d0:a8:4e:1c:38:cd:1e:a9:b3:df:c8:23:f8:eb:08:
                    66:45:4b:8a:8c:56:97:63:c8:93:aa:d6:7e:b4:8a:
                    39:ae:d6:60:27:e7:ed:72:de:19:5c:6a:7b:69:e2:
                    15:cc:05:d0:f2:fc:eb:c0:ee:7b:52:a1:e1:3b:81:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EC:D7:50:83:CE:7A:E9:74:61:94:0E:F4:0C:B1:B6:31:B4:58:5E
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a32303a3a2f34352d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:20::/45

    Signature Algorithm: sha256WithRSAEncryption
         23:22:87:62:ec:9d:d1:56:9f:03:f5:3b:0b:40:26:be:21:40:
         ae:f7:d8:10:73:12:8b:ea:77:02:96:cd:a0:21:e8:9c:f0:d7:
         31:c0:f2:e7:f8:6c:92:86:51:a5:c2:02:15:6f:57:a4:1d:95:
         9d:e8:9f:c8:6c:dc:d4:73:6c:47:a9:fe:87:24:64:d5:bd:b4:
         c9:3a:ab:0e:23:e7:58:32:2f:15:e8:d9:88:40:8e:df:03:74:
         64:11:81:fc:93:f6:3c:96:27:f7:27:fb:ae:91:6f:cc:a0:a0:
         52:8d:73:a9:51:66:0d:97:6b:85:53:03:65:91:ef:9a:e7:ff:
         a2:fa:08:fc:a2:07:c1:1b:87:1e:b9:41:8f:c3:6a:78:4e:f8:
         f1:3d:4e:3b:07:13:cb:b3:3f:10:3b:f9:29:81:97:e3:94:97:
         2e:b7:4a:0c:71:8a:c9:25:9d:d7:18:e0:11:df:88:ef:f8:2e:
         2d:55:2d:d5:05:fa:0a:34:69:74:e3:f3:1f:ac:97:ef:86:5d:
         db:38:a4:6d:09:75:9f:73:a1:c4:5a:29:c0:92:42:9f:3f:48:
         fa:64:95:a1:85:da:41:48:42:fb:72:a5:53:38:6b:c9:08:22:
         77:fb:f6:cf:a4:01:1d:2e:3a:24:f4:94:c1:28:7d:60:7d:44:
         37:bc:99:ee
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUdZeOUv3DR4xd8LjSvsf7kBbFWVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU4NjkyM0E2NEQzNzlCODAwRjQwOUM1OEYwQTY0QzU0
MDY4N0Q5NzAeFw0yNDAzMDUxODA4MDBaFw0yNTAzMDQxODEzMDBaMDMxMTAvBgNV
BAMTKEMzRUNENzUwODNDRTdBRTk3NDYxOTQwRUY0MENCMUI2MzFCNDU4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HegncZF6mWKe+dDWaMLqwDUh
GujMAjX2QzanONtSYVtqlj5xKhYCLfZabbx1dkhW8kLEr6WEX61KLWy2KP8Xa8F2
5FmR8+en9p8+mi+FCcLNZTFaCbIbP2h8iNaPrcIoQqcHsCIfhHWCJvTsAt6lZHiJ
UOpdRETPDwRHoxWJJeiSFt0B6eCJ5cPPF3L7ZCKpJHgzDIm+WJ8VUvZ1R08ioVxK
EgrMDJ8+l0MiPF0AlC6VuvjFqE7lSZinDKxohGFpodCoThw4zR6ps9/II/jrCGZF
S4qMVpdjyJOq1n60ijmu1mAn5+1y3hlcantp4hXMBdDy/OvA7ntSoeE7gW5dAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUw+zXUIPOeul0YZQO9AyxtjG0WF4wHwYDVR0j
BBgwFoAUNYaSOmTTebgA9AnFjwpkxUBofZcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzU3Qjk2RkMyODY4OTc0NENERDVGNEZEOTBFRjNBNjYy
MzU3Q0RBMEYwQjFDNEU2N0MwOEU2MDgwRTA3QjBDLzAvMzU4NjkyM0E2NEQzNzlC
ODAwRjQwOUM1OEYwQTY0QzU0MDY4N0Q5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTg2OTIzQTY0RDM3OUI4MDBG
NDA5QzU4RjBBNjRDNTQwNjg3RDk3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjc1N0I5NkZDMjg2ODk3NDRDREQ1RjRGRDkwRUYzQTY2MjM1N0NEQTBG
MEIxQzRFNjdDMDhFNjA4MEUwN0IwQy8wLzMyMzgzMDMxM2EzMTM2NjUzYTMyMzAz
YTNhMmYzNDM1MmQzNDM4MjAzZDNlMjAzMTM5MzQzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKAEB
bgAgMA0GCSqGSIb3DQEBCwUAA4IBAQAjIodi7J3RVp8D9TsLQCa+IUCu99gQcxKL
6ncCls2gIeic8NcxwPLn+GyShlGlwgIVb1ekHZWd6J/IbNzUc2xHqf6HJGTVvbTJ
OqsOI+dYMi8V6NmIQI7fA3RkEYH8k/Y8lif3J/uukW/MoKBSjXOpUWYNl2uFUwNl
ke+a5/+i+gj8ogfBG4ceuUGPw2p4TvjxPU47BxPLsz8QO/kpgZfjlJcut0oMcYrJ
JZ3XGOAR34jv+C4tVS3VBfoKNGl04/MfrJfvhl3bOKRtCXWfc6HEWinAkkKfP0j6
ZJWhhdpBSEL7cqVTOGvJCCJ3+/bPpAEdLjok9JTBKH1gfUQ3vJnu
-----END CERTIFICATE-----