Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/323830303a3162303a3a2f33322d3336203d3e203230313931.roa
File:                     323830303a3162303a3a2f33322d3336203d3e203230313931.roa (raw, json)
Hash identifier:          3XkXKJ6ao2+fcaICrIQ4GliKN1mcAx/aRjW34BPDkW0=
Subject key identifier:   F4:37:9E:AB:0D:B0:94:0E:05:FD:22:2E:CA:64:1E:F7:5E:8B:EF:24
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       01EF7CAA92454CFB137BE463B7050AC71FFF31B9
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/323830303a3162303a3a2f33322d3336203d3e203230313931.roa
Signing time:             Thu 28 Nov 2024 16:40:00 +0000
ROA not before:           Thu 28 Nov 2024 16:35:00 +0000
ROA not after:            Thu 27 Nov 2025 16:40:00 +0000
asID:                     20191
IP address blocks:        2800:1b0::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ef:7c:aa:92:45:4c:fb:13:7b:e4:63:b7:05:0a:c7:1f:ff:31:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Nov 28 16:35:00 2024 GMT
            Not After : Nov 27 16:40:00 2025 GMT
        Subject: CN=F4379EAB0DB0940E05FD222ECA641EF75E8BEF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:22:ad:9e:37:0d:f8:03:1d:19:d1:d6:01:66:
                    16:28:c2:1f:fa:9c:93:2b:04:e9:45:8f:30:f2:bf:
                    8b:5b:37:87:60:f9:c2:c7:80:cb:f8:f0:22:d0:92:
                    78:e4:a5:c9:64:6b:89:14:8f:89:c2:ed:da:1f:bf:
                    b9:5b:64:b7:91:5a:ef:d8:5e:df:91:88:8d:c6:a4:
                    17:df:b9:39:17:09:a2:66:38:63:8b:22:0b:5a:00:
                    9c:81:f9:44:7a:f0:11:27:30:fe:90:94:b1:2a:21:
                    06:2b:3c:cb:5a:87:0e:41:44:6f:9d:5e:c2:4c:33:
                    5e:d2:44:14:5f:e4:65:33:d3:e4:23:90:4b:cc:ea:
                    db:9d:bd:a7:71:67:e7:63:5a:17:5c:84:e0:6a:1c:
                    6f:ee:b4:4e:88:52:f8:e0:da:16:55:06:15:1c:67:
                    63:2a:40:cd:71:72:97:ce:e4:7e:42:55:c4:a1:f6:
                    45:29:ae:4e:a9:bd:fa:91:3d:b9:40:bd:37:0c:d3:
                    f6:36:d6:7e:e0:55:73:d2:25:af:1e:69:f5:07:20:
                    f3:91:5f:b5:a4:1c:c1:ba:be:cd:37:10:9a:49:e5:
                    41:01:ba:59:1c:55:63:c3:de:39:e6:7a:df:42:18:
                    c4:63:9b:33:35:fb:c1:2c:c0:33:cf:c6:6a:e2:05:
                    38:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:37:9E:AB:0D:B0:94:0E:05:FD:22:2E:CA:64:1E:F7:5E:8B:EF:24
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/323830303a3162303a3a2f33322d3336203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:a6:6f:8f:78:0f:2a:5e:8d:02:61:d0:f7:6a:3d:d5:f6:ba:
         fe:ad:40:7d:df:81:c0:7c:fd:7d:ee:59:e5:1f:4a:f6:e6:fd:
         8b:bb:fe:03:c1:52:f8:db:dd:83:93:2f:c5:6a:11:17:6d:0f:
         ea:4e:19:77:67:7f:61:12:9a:12:d9:14:20:07:7f:6a:b9:9c:
         cc:29:e4:51:0b:ad:be:e0:1c:14:77:6f:83:98:9b:b9:1e:a2:
         35:5d:ca:d5:54:eb:0b:c2:e5:c4:ed:e4:77:4e:5b:2e:50:e5:
         f4:1b:09:3d:cb:36:6e:07:95:df:bd:4d:9e:ee:ac:be:fb:3d:
         4e:8b:b4:d0:d4:18:83:ac:f3:bd:ff:9d:7a:e0:98:d8:30:e4:
         6e:87:5f:94:b0:af:6b:d9:3c:a6:3c:45:e5:4f:41:8e:df:0d:
         a4:96:8e:4f:50:70:dd:18:88:dd:ce:6e:56:32:47:a4:ef:6a:
         5d:18:ae:4f:b7:2e:5a:d8:f9:83:ef:f7:44:1b:14:99:b6:4c:
         eb:ff:30:e8:68:3f:3b:fe:da:f2:dc:55:e1:27:c7:40:03:ce:
         69:bd:5b:17:f3:5c:00:ee:52:8d:74:01:48:01:c8:42:58:ce:
         08:ac:eb:24:31:ea:79:df:c4:09:16:f8:5f:09:71:1f:90:c8:
         28:ac:5d:63
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUAe98qpJFTPsTe+RjtwUKxx//MbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3NTMyQUJBMEFDQTVBMTE0NzQzN0UxN0E3NkQzQzEx
MEMxOTNDNDAeFw0yNDExMjgxNjM1MDBaFw0yNTExMjcxNjQwMDBaMDMxMTAvBgNV
BAMTKEY0Mzc5RUFCMERCMDk0MEUwNUZEMjIyRUNBNjQxRUY3NUU4QkVGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnIq2eNw34Ax0Z0dYBZhYowh/6
nJMrBOlFjzDyv4tbN4dg+cLHgMv48CLQknjkpclka4kUj4nC7dofv7lbZLeRWu/Y
Xt+RiI3GpBffuTkXCaJmOGOLIgtaAJyB+UR68BEnMP6QlLEqIQYrPMtahw5BRG+d
XsJMM17SRBRf5GUz0+QjkEvM6tudvadxZ+djWhdchOBqHG/utE6IUvjg2hZVBhUc
Z2MqQM1xcpfO5H5CVcSh9kUprk6pvfqRPblAvTcM0/Y21n7gVXPSJa8eafUHIPOR
X7WkHMG6vs03EJpJ5UEBulkcVWPD3jnmet9CGMRjmzM1+8EswDPPxmriBTgHAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU9Deeqw2wlA4F/SIuymQe916L7yQwHwYDVR0j
BBgwFoAUw3Uyq6CspaEUdDfhenbTwRDBk8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjM2MzM5MTA5NkUyMUM3OTFENkQ2Mzg2OEM0NkVBRjNB
ODlGODY0RTE3OTA3RkJDOTIxMjA0MjI4OUEyQjJBLzAvQzM3NTMyQUJBMEFDQTVB
MTE0NzQzN0UxN0E3NkQzQzExMEMxOTNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzc1MzJBQkEwQUNBNUExMTQ3
NDM3RTE3QTc2RDNDMTEwQzE5M0M0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYzNjMzOTEwOTZFMjFDNzkxRDZENjM4NjhDNDZFQUYzQTg5Rjg2NEUx
NzkwN0ZCQzkyMTIwNDIyODlBMkIyQS8wLzMyMzgzMDMwM2EzMTYyMzAzYTNhMmYz
MzMyMmQzMzM2MjAzZDNlMjAzMjMwMzEzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAABsDANBgkq
hkiG9w0BAQsFAAOCAQEAfaZvj3gPKl6NAmHQ92o91fa6/q1Afd+BwHz9fe5Z5R9K
9ub9i7v+A8FS+Nvdg5MvxWoRF20P6k4Zd2d/YRKaEtkUIAd/armczCnkUQutvuAc
FHdvg5ibuR6iNV3K1VTrC8LlxO3kd05bLlDl9BsJPcs2bgeV371Nnu6svvs9Tou0
0NQYg6zzvf+deuCY2DDkbodflLCva9k8pjxF5U9Bjt8NpJaOT1Bw3RiI3c5uVjJH
pO9qXRiuT7cuWtj5g+/3RBsUmbZM6/8w6Gg/O/7a8txV4SfHQAPOab1bF/NcAO5S
jXQBSAHIQljOCKzrJDHqed/ECRb4XwlxH5DIKKxdYw==
-----END CERTIFICATE-----