Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/323830313a3130353a313a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3130353a313a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          26oGYycCgAUdjizFRb+n94DLg5OqIUcuO7M7fHBjHlw=
Subject key identifier:   E6:98:EE:4E:52:D2:9E:96:00:65:24:E1:D3:D6:EB:77:91:DA:99:A6
Certificate issuer:       /CN=511EC7ECE8F3FF815535163C5C512E56C1CDA048
Certificate serial:       455FAE4D77AA28130857F3AE86A4918A8738A858
Authority key identifier: 51:1E:C7:EC:E8:F3:FF:81:55:35:16:3C:5C:51:2E:56:C1:CD:A0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/323830313a3130353a313a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:10:40 +0000
ROA not before:           Tue 05 Mar 2024 18:05:40 +0000
ROA not after:            Tue 04 Mar 2025 18:10:40 +0000
asID:                     19429
IP address blocks:        2801:105:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5f:ae:4d:77:aa:28:13:08:57:f3:ae:86:a4:91:8a:87:38:a8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511EC7ECE8F3FF815535163C5C512E56C1CDA048
        Validity
            Not Before: Mar  5 18:05:40 2024 GMT
            Not After : Mar  4 18:10:40 2025 GMT
        Subject: CN=E698EE4E52D29E96006524E1D3D6EB7791DA99A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:71:cd:e1:76:66:af:95:a3:b0:41:5a:75:
                    3a:ba:84:02:14:96:9d:7d:af:af:e0:55:cc:ba:22:
                    d0:02:d7:e3:95:21:5a:0e:e9:f6:3c:43:4e:96:ef:
                    a9:91:c7:ae:ee:f2:1a:bc:b2:f9:d1:0d:a1:5c:b1:
                    92:f5:44:f9:56:12:06:62:19:17:55:be:23:86:eb:
                    fa:d1:2e:ed:90:d6:9b:00:4c:5b:5b:fd:9c:b2:fe:
                    40:10:f1:41:5e:ba:1e:b8:7c:4a:bd:dc:df:f7:2d:
                    25:77:ca:dc:74:f3:b4:2c:4d:3e:7e:c0:3b:27:df:
                    88:f3:23:ba:36:d9:d7:fc:5b:30:9b:2e:76:54:e1:
                    91:5c:d4:b1:6e:35:86:8f:d8:17:a3:91:3e:85:08:
                    dc:72:be:81:42:2a:88:cd:e7:b1:e6:9c:fb:00:52:
                    27:9c:26:d6:88:29:51:ed:c6:05:9d:11:26:67:71:
                    a4:1c:15:f9:6a:3a:cf:fa:e9:b2:ef:3f:b3:8e:55:
                    7e:7c:68:6f:ec:d8:7c:de:db:ac:96:cd:e8:d2:0f:
                    d9:0d:9b:93:ca:76:49:a0:46:be:63:0c:2f:fa:15:
                    6c:91:51:f1:e1:3d:a6:86:4c:e6:88:bc:0a:04:31:
                    d8:3c:eb:45:72:2c:de:50:76:39:41:7f:0d:7b:f5:
                    a3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:98:EE:4E:52:D2:9E:96:00:65:24:E1:D3:D6:EB:77:91:DA:99:A6
            X509v3 Authority Key Identifier:
                keyid:51:1E:C7:EC:E8:F3:FF:81:55:35:16:3C:5C:51:2E:56:C1:CD:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/323830313a3130353a313a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:105:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:db:6c:7e:c6:91:ab:e0:95:9e:14:60:66:37:66:56:c8:
         34:f3:29:e5:68:53:a2:bf:55:a9:65:4b:cd:5b:bc:cb:49:18:
         51:6f:7d:69:7e:0f:75:ed:d1:09:c8:fc:75:ca:d1:49:f1:63:
         34:18:cc:40:38:46:c9:cb:b4:bf:43:1a:40:27:37:c6:18:07:
         0b:b0:53:54:80:3b:0f:0e:c6:1f:17:ef:97:98:e7:b3:dc:3c:
         7f:7f:e7:d7:c5:f7:de:5b:07:37:cd:1c:03:be:a0:76:5b:71:
         69:76:5f:f6:7d:d0:c2:d9:95:8b:97:a1:15:01:8e:f6:90:cc:
         f0:a8:46:c7:95:b1:aa:f1:a4:96:55:b9:fd:48:4f:d9:4f:b4:
         8e:83:a0:a8:dd:b9:fd:19:b8:2b:f0:7a:85:76:be:7b:ba:bf:
         6c:79:0c:74:b1:3d:93:a5:5c:37:89:f3:64:2a:1e:12:4b:bc:
         01:8a:3f:47:48:fe:a2:97:70:6b:73:d5:a9:40:a1:13:dc:e1:
         55:6b:1b:c0:89:0f:51:99:db:8b:d5:6c:c0:c7:9e:87:83:54:
         6b:a3:71:17:f0:6b:f7:a8:cf:ba:9b:92:8f:93:ae:48:a6:65:
         eb:28:61:cd:56:b9:61:14:97:19:c5:6d:6c:ea:4d:a9:c2:91:
         a3:34:68:a2
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIURV+uTXeqKBMIV/OuhqSRioc4qFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExRUM3RUNFOEYzRkY4MTU1MzUxNjNDNUM1MTJFNTZD
MUNEQTA0ODAeFw0yNDAzMDUxODA1NDBaFw0yNTAzMDQxODEwNDBaMDMxMTAvBgNV
BAMTKEU2OThFRTRFNTJEMjlFOTYwMDY1MjRFMUQzRDZFQjc3OTFEQTk5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRXHN4XZmr5WjsEFadTq6hAIU
lp19r6/gVcy6ItAC1+OVIVoO6fY8Q06W76mRx67u8hq8svnRDaFcsZL1RPlWEgZi
GRdVviOG6/rRLu2Q1psATFtb/Zyy/kAQ8UFeuh64fEq93N/3LSV3ytx087QsTT5+
wDsn34jzI7o22df8WzCbLnZU4ZFc1LFuNYaP2BejkT6FCNxyvoFCKojN57HmnPsA
UiecJtaIKVHtxgWdESZncaQcFflqOs/66bLvP7OOVX58aG/s2Hze26yWzejSD9kN
m5PKdkmgRr5jDC/6FWyRUfHhPaaGTOaIvAoEMdg860VyLN5QdjlBfw179aMnAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQU5pjuTlLSnpYAZSTh09brd5HamaYwHwYDVR0j
BBgwFoAUUR7H7Ojz/4FVNRY8XFEuVsHNoEgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RDFDQzAwNDI3Njk4RUE5ODRFOURGQzI4RUFBMzUyNDBG
NzVBMDQ5OTMzNkVBNDQ2RkYzNEU2OEVEMDY5NzM2LzAvNTExRUM3RUNFOEYzRkY4
MTU1MzUxNjNDNUM1MTJFNTZDMUNEQTA0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTFFQzdFQ0U4RjNGRjgxNTUz
NTE2M0M1QzUxMkU1NkMxQ0RBMDQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkQxQ0MwMDQyNzY5OEVBOTg0RTlERkMyOEVBQTM1MjQwRjc1QTA0OTkz
MzZFQTQ0NkZGMzRFNjhFRDA2OTczNi8wLzMyMzgzMDMxM2EzMTMwMzUzYTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzOTM0MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAQUA
ATANBgkqhkiG9w0BAQsFAAOCAQEAfT3bbH7GkavglZ4UYGY3ZlbINPMp5WhTor9V
qWVLzVu8y0kYUW99aX4Pde3RCcj8dcrRSfFjNBjMQDhGycu0v0MaQCc3xhgHC7BT
VIA7Dw7GHxfvl5jns9w8f3/n18X33lsHN80cA76gdltxaXZf9n3QwtmVi5ehFQGO
9pDM8KhGx5WxqvGkllW5/UhP2U+0joOgqN25/Rm4K/B6hXa+e7q/bHkMdLE9k6Vc
N4nzZCoeEku8AYo/R0j+opdwa3PVqUChE9zhVWsbwIkPUZnbi9VswMeeh4NUa6Nx
F/Br96jPupuSj5OuSKZl6yhhzVa5YRSXGcVtbOpNqcKRozRoog==
-----END CERTIFICATE-----