Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a313a3a2f34382d3438203d3e203238303031.roa
File:                     323830313a3136353a313a3a2f34382d3438203d3e203238303031.roa (raw, json)
Hash identifier:          yzKFDA59lUREBU8Evi5XtECb5DGcka+9h712R9QDcB0=
Subject key identifier:   96:60:38:A4:F1:89:7C:61:1B:02:D6:2D:BA:19:DC:99:9F:11:12:C2
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       429B33922F38333B1AB090503E833551609FC47A
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a313a3a2f34382d3438203d3e203238303031.roa
Signing time:             Sat 06 Apr 2024 22:35:00 +0000
ROA not before:           Sat 06 Apr 2024 22:30:00 +0000
ROA not after:            Sat 05 Apr 2025 22:35:00 +0000
asID:                     28001
IP address blocks:        2801:165:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9b:33:92:2f:38:33:3b:1a:b0:90:50:3e:83:35:51:60:9f:c4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Apr  6 22:30:00 2024 GMT
            Not After : Apr  5 22:35:00 2025 GMT
        Subject: CN=966038A4F1897C611B02D62DBA19DC999F1112C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:8c:44:d5:04:0b:2b:69:ec:aa:ed:d7:63:
                    6a:82:90:7c:57:51:0c:70:a2:4e:d7:27:66:13:50:
                    65:d6:cc:86:4a:04:6c:a0:b2:61:74:e3:02:27:a6:
                    a3:2c:44:7c:4b:76:2f:fd:7b:b3:8d:88:83:60:5c:
                    03:3a:02:4e:c0:20:5a:98:61:fc:51:e6:4d:45:bd:
                    cf:ef:7c:39:65:23:f5:94:8f:fc:a3:c5:19:45:59:
                    8a:0b:6c:b2:43:e9:87:df:d8:ee:df:8d:f5:8a:23:
                    a3:37:3a:0e:a0:c6:c6:0c:66:2a:a8:74:46:fa:00:
                    4d:67:09:9c:8a:be:81:db:d0:a4:e2:68:c0:1d:3c:
                    04:b4:ac:16:cd:ea:21:e0:2b:a7:64:47:22:1d:54:
                    40:f7:b6:f0:68:b5:40:ee:85:e3:c9:e0:64:33:b1:
                    3f:e3:40:89:1a:dd:ab:fe:ac:1c:ec:98:a7:ad:c6:
                    fa:4b:8f:a6:01:a9:2c:dd:47:96:ab:e9:73:4d:d6:
                    2f:9e:92:21:70:7d:11:5d:4e:a2:64:65:df:5c:ed:
                    29:e7:ec:fd:89:1f:ad:22:d0:04:7f:00:8c:29:04:
                    fc:68:64:44:a0:74:61:6f:38:fd:44:94:bf:ec:c2:
                    06:99:d5:7c:d6:d3:04:ad:e0:e9:f4:d8:6f:63:77:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:60:38:A4:F1:89:7C:61:1B:02:D6:2D:BA:19:DC:99:9F:11:12:C2
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a313a3a2f34382d3438203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:81:d5:a1:db:6c:b1:86:54:01:71:ee:b2:ae:76:b1:fe:9f:
         1a:b9:76:22:54:14:8d:38:49:5b:e7:7e:48:12:df:1f:79:3d:
         9b:77:a4:bc:ad:75:f6:8e:5e:21:92:f5:3b:a0:41:6c:2d:35:
         1a:c3:6e:9e:ff:1d:8b:e6:f2:dc:0e:4c:48:97:ca:b5:78:03:
         36:ce:3e:93:e0:0b:e4:6a:42:07:e2:bc:82:d3:7c:58:2f:25:
         4a:59:fe:05:24:a4:c9:80:81:d0:93:9e:5a:2b:89:26:46:44:
         86:09:0a:37:13:d5:9b:c5:47:d7:f0:46:90:01:f4:5c:21:95:
         7f:5d:3d:f8:ff:df:2e:2b:02:b8:22:91:68:3c:9a:5e:41:0a:
         ab:f2:49:c5:77:22:94:e2:f5:05:0a:f8:94:6a:6d:1b:2d:79:
         4a:fa:6d:e3:2e:25:51:b6:8d:6f:aa:88:1e:1f:28:ad:56:43:
         5e:25:67:8d:d0:e1:43:b3:46:5f:b2:8c:2d:1e:94:30:0d:e2:
         45:5b:b8:42:a6:77:0f:39:77:d1:e2:80:6f:8c:71:7d:88:7f:
         b3:01:87:19:1c:2f:5e:4d:a2:1e:e5:1d:46:df:97:cd:a0:b6:
         70:37:e5:67:8d:5a:56:72:76:0a:7e:c6:b9:4f:37:b2:66:d0:
         be:8a:54:61
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUQpszki84MzsasJBQPoM1UWCfxHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcwOUQ3NUUwQkQwMTk5MDAyQzA3MUQzNjk3MUEwOUU2
RDVFNUY0ODAeFw0yNDA0MDYyMjMwMDBaFw0yNTA0MDUyMjM1MDBaMDMxMTAvBgNV
BAMTKDk2NjAzOEE0RjE4OTdDNjExQjAyRDYyREJBMTlEQzk5OUYxMTEyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRkoxE1QQLK2nsqu3XY2qCkHxX
UQxwok7XJ2YTUGXWzIZKBGygsmF04wInpqMsRHxLdi/9e7ONiINgXAM6Ak7AIFqY
YfxR5k1Fvc/vfDllI/WUj/yjxRlFWYoLbLJD6Yff2O7fjfWKI6M3Og6gxsYMZiqo
dEb6AE1nCZyKvoHb0KTiaMAdPAS0rBbN6iHgK6dkRyIdVED3tvBotUDuhePJ4GQz
sT/jQIka3av+rBzsmKetxvpLj6YBqSzdR5ar6XNN1i+ekiFwfRFdTqJkZd9c7Snn
7P2JH60i0AR/AIwpBPxoZESgdGFvOP1ElL/swgaZ1XzW0wSt4On02G9jdw2PAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUlmA4pPGJfGEbAtYtuhncmZ8REsIwHwYDVR0j
BBgwFoAUpwnXXgvQGZACwHHTaXGgnm1eX0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RTBEMjhDMEIyMjg1NEYwMjEwMDMzREY3QjBDNjM2MTU5
MzEyQzExRDFDNzQyQUZCM0ZEMUZDMzc4QThFNzYwLzAvQTcwOUQ3NUUwQkQwMTk5
MDAyQzA3MUQzNjk3MUEwOUU2RDVFNUY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzA5RDc1RTBCRDAxOTkwMDJD
MDcxRDM2OTcxQTA5RTZENUU1RjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEUwRDI4QzBCMjI4NTRGMDIxMDAzM0RGN0IwQzYzNjE1OTMxMkMxMUQx
Qzc0MkFGQjNGRDFGQzM3OEE4RTc2MC8wLzMyMzgzMDMxM2EzMTM2MzUzYTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzODMwMzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAWUA
ATANBgkqhkiG9w0BAQsFAAOCAQEAvYHVodtssYZUAXHusq52sf6fGrl2IlQUjThJ
W+d+SBLfH3k9m3ekvK119o5eIZL1O6BBbC01GsNunv8di+by3A5MSJfKtXgDNs4+
k+AL5GpCB+K8gtN8WC8lSln+BSSkyYCB0JOeWiuJJkZEhgkKNxPVm8VH1/BGkAH0
XCGVf109+P/fLisCuCKRaDyaXkEKq/JJxXcilOL1BQr4lGptGy15Svpt4y4lUbaN
b6qIHh8orVZDXiVnjdDhQ7NGX7KMLR6UMA3iRVu4QqZ3Dzl30eKAb4xxfYh/swGH
GRwvXk2iHuUdRt+XzaC2cDflZ41aVnJ2Cn7GuU83smbQvopUYQ==
-----END CERTIFICATE-----