Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e20323634383435.roa
File:                     323830303a3730303a3a2f33322d3438203d3e20323634383435.roa (raw, json)
Hash identifier:          VykYbB7UIyNFYqjRbElZ50Wn5uhnfCjo3meBJUH06ss=
Subject key identifier:   B6:56:76:76:2D:75:A1:1B:DC:1C:22:4A:96:62:56:1E:C8:9A:1F:CD
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       4FB2FDC3A0D100BC3155594BE5D73FC7A19A9211
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e20323634383435.roa
Signing time:             Tue 05 Mar 2024 18:20:58 +0000
ROA not before:           Tue 05 Mar 2024 18:15:58 +0000
ROA not after:            Tue 04 Mar 2025 18:20:58 +0000
asID:                     264845
IP address blocks:        2800:700::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b2:fd:c3:a0:d1:00:bc:31:55:59:4b:e5:d7:3f:c7:a1:9a:92:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Mar  5 18:15:58 2024 GMT
            Not After : Mar  4 18:20:58 2025 GMT
        Subject: CN=B65676762D75A11BDC1C224A9662561EC89A1FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:38:30:b4:7e:78:42:64:ea:2d:8e:91:e2:
                    fd:9a:0f:4a:e4:3d:0c:06:67:dd:19:ce:eb:f6:f0:
                    89:05:9a:5e:a5:cf:48:e2:15:b5:18:34:1f:64:e8:
                    b5:77:ff:b9:7f:95:27:33:9d:fc:33:2e:b7:76:3f:
                    6f:36:d2:0b:07:1d:ab:0a:59:d7:cb:c6:9f:16:3f:
                    9c:f8:fc:8f:c8:ad:ce:4a:02:47:24:39:25:22:32:
                    54:d0:ef:a2:cc:3a:68:9d:5a:f7:e9:46:90:7f:b6:
                    87:69:af:ff:a9:ec:4f:f3:43:e8:72:59:5b:52:64:
                    2f:db:8a:13:05:af:80:06:a3:29:09:8e:31:34:42:
                    38:2f:23:ea:2d:8a:de:29:7c:7d:10:66:be:5d:54:
                    08:28:af:da:23:7b:97:32:25:40:16:67:fd:f4:74:
                    1b:70:e5:8d:57:1e:d9:59:18:c6:39:26:28:df:48:
                    21:6a:49:5b:e5:94:73:db:80:f3:4b:28:f2:57:3a:
                    71:f0:a4:54:61:e3:2d:79:8f:5e:49:97:23:ee:c6:
                    18:04:9c:86:8c:86:24:eb:06:75:ec:8c:21:6e:e1:
                    89:f2:f4:c5:71:23:ab:40:f5:d8:58:4f:f2:59:b7:
                    be:2f:5e:2c:6b:29:5d:07:83:da:69:3a:b4:e2:1b:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:56:76:76:2D:75:A1:1B:DC:1C:22:4A:96:62:56:1E:C8:9A:1F:CD
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:93:d9:3d:45:c3:5c:f3:f3:26:1d:fa:64:d1:4f:4f:55:
         d7:ad:fc:fe:d6:3c:4e:4f:7d:75:72:40:04:44:b2:56:f6:2e:
         9a:9d:0d:d2:eb:90:2e:f5:42:b6:c6:df:7d:3a:bc:e8:2d:4e:
         85:7b:00:1f:a2:a4:71:12:fd:c5:55:e9:e0:0c:32:d6:03:e6:
         65:c4:35:a1:64:e3:e9:9f:e9:c4:b4:19:9c:9d:8d:2b:26:ba:
         b2:5b:33:1d:b2:77:70:45:51:27:e5:a0:49:92:39:4e:17:4a:
         bf:99:0d:c6:68:ff:c6:7f:81:6f:c9:5b:c8:a5:cb:84:95:ec:
         10:dc:c7:95:36:b2:c1:ad:b4:1f:ca:fd:76:92:8c:2f:02:ab:
         2d:95:90:70:80:75:fd:c7:d6:8f:c5:52:66:0f:86:24:d2:71:
         b3:a0:81:d5:10:6b:4f:1f:4d:2f:08:1c:df:b4:9a:b1:ee:cd:
         d0:99:cd:16:a0:43:eb:6c:38:1e:e4:98:0e:a8:b6:cd:94:a9:
         73:30:7e:62:e4:7e:30:31:35:f6:54:9d:be:2e:ee:52:48:a6:
         0d:a5:91:9b:dc:0c:78:29:b4:57:ea:8c:0e:e4:4d:2a:4f:99:
         e8:08:ff:9a:db:87:a3:46:04:b2:75:84:95:f0:3f:52:1c:39:
         f1:da:f9:5f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUT7L9w6DRALwxVVlL5dc/x6GakhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNDAzMDUxODE1NThaFw0yNTAzMDQxODIwNThaMDMxMTAvBgNV
BAMTKEI2NTY3Njc2MkQ3NUExMUJEQzFDMjI0QTk2NjI1NjFFQzg5QTFGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ojgwtH54QmTqLY6R4v2aD0rk
PQwGZ90Zzuv28IkFml6lz0jiFbUYNB9k6LV3/7l/lScznfwzLrd2P2820gsHHasK
WdfLxp8WP5z4/I/Irc5KAkckOSUiMlTQ76LMOmidWvfpRpB/todpr/+p7E/zQ+hy
WVtSZC/bihMFr4AGoykJjjE0QjgvI+otit4pfH0QZr5dVAgor9oje5cyJUAWZ/30
dBtw5Y1XHtlZGMY5JijfSCFqSVvllHPbgPNLKPJXOnHwpFRh4y15j15JlyPuxhgE
nIaMhiTrBnXsjCFu4Yny9MVxI6tA9dhYT/JZt74vXixrKV0Hg9ppOrTiG+vzAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUtlZ2di11oRvcHCJKlmJWHsiaH80wHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzgzMDMwM2EzNzMwMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzQzODM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAcAMA0G
CSqGSIb3DQEBCwUAA4IBAQC8Z5PZPUXDXPPzJh36ZNFPT1XXrfz+1jxOT311ckAE
RLJW9i6anQ3S65Au9UK2xt99OrzoLU6FewAfoqRxEv3FVengDDLWA+ZlxDWhZOPp
n+nEtBmcnY0rJrqyWzMdsndwRVEn5aBJkjlOF0q/mQ3GaP/Gf4FvyVvIpcuElewQ
3MeVNrLBrbQfyv12kowvAqstlZBwgHX9x9aPxVJmD4Yk0nGzoIHVEGtPH00vCBzf
tJqx7s3Qmc0WoEPrbDge5JgOqLbNlKlzMH5i5H4wMTX2VJ2+Lu5SSKYNpZGb3Ax4
KbRX6owO5E0qT5noCP+a24ejRgSydYSV8D9SHDnx2vlf
-----END CERTIFICATE-----