Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/323830303a3335303a3a2f32392d3634203d3e203131353536.roa
File:                     323830303a3335303a3a2f32392d3634203d3e203131353536.roa (raw, json)
Hash identifier:          2R/Y8HDKePOBoX6H6DJ+Kjc1q7SBzAF6DZwEk+TPrK4=
Subject key identifier:   7C:46:40:1A:67:E7:84:2F:86:F3:39:AF:8A:D7:D7:5B:7E:A5:5E:E0
Certificate issuer:       /CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
Certificate serial:       23F7ED2F42AC3D1334A1A50C54A190C6E24F0014
Authority key identifier: 78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/323830303a3335303a3a2f32392d3634203d3e203131353536.roa
Signing time:             Tue 05 Mar 2024 17:42:13 +0000
ROA not before:           Tue 05 Mar 2024 17:37:13 +0000
ROA not after:            Tue 04 Mar 2025 17:42:13 +0000
asID:                     11556
IP address blocks:        2800:350::/29 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f7:ed:2f:42:ac:3d:13:34:a1:a5:0c:54:a1:90:c6:e2:4f:00:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
        Validity
            Not Before: Mar  5 17:37:13 2024 GMT
            Not After : Mar  4 17:42:13 2025 GMT
        Subject: CN=7C46401A67E7842F86F339AF8AD7D75B7EA55EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:a9:a1:bb:29:10:f6:0c:28:01:7a:77:ec:
                    ab:28:9c:22:01:35:8a:8e:db:89:47:22:8f:71:bd:
                    65:ad:63:d5:c1:7d:d2:25:9b:2d:4e:eb:86:fb:53:
                    80:a5:a7:15:f1:43:63:68:e6:cd:cb:77:63:4b:b8:
                    2c:04:90:80:ce:ef:00:2e:da:d2:fa:03:4c:d7:7d:
                    2c:07:d1:52:05:2d:6c:96:00:7a:cf:be:fd:79:11:
                    85:6d:61:6a:e8:bd:ba:13:e2:40:c1:34:e8:49:30:
                    2e:28:ce:af:3b:62:ff:87:14:7e:7c:cf:69:d0:6f:
                    30:19:fc:dc:db:f3:42:0a:13:e8:b5:41:f3:24:2c:
                    ed:7f:a8:90:61:29:3b:88:2d:dc:cb:b1:bf:78:fa:
                    75:47:07:e7:30:95:9b:dc:d6:f4:17:35:df:64:a3:
                    62:7f:5d:e2:84:0c:b3:80:c4:60:2f:2e:b3:92:05:
                    c9:a1:d6:f7:dd:33:6d:bd:c2:b9:5f:2b:ad:1e:13:
                    0f:a6:62:cb:2f:7e:4c:e6:31:95:7b:d4:81:ab:c6:
                    16:0a:85:e8:80:ee:72:f8:3f:9a:89:1f:c5:cf:dd:
                    a6:90:8a:de:23:2a:b9:b3:1a:34:83:20:c5:19:0e:
                    c5:fb:87:39:d6:12:ea:e3:6f:87:a1:fe:23:e2:5a:
                    f0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:46:40:1A:67:E7:84:2F:86:F3:39:AF:8A:D7:D7:5B:7E:A5:5E:E0
            X509v3 Authority Key Identifier:
                keyid:78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/323830303a3335303a3a2f32392d3634203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:350::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:ae:38:b7:4b:4a:e6:66:e7:96:1e:07:32:15:c1:20:17:
         c5:5b:52:fd:1b:6d:8c:27:cc:c1:3f:3d:7b:b2:01:98:6e:16:
         98:08:44:0a:e0:ab:2b:9a:3b:1c:d7:85:9c:1d:79:8d:72:38:
         9d:8f:61:4a:60:fd:95:69:cd:8f:12:30:6b:8b:9b:6f:06:67:
         6b:98:e8:10:7d:f8:8d:25:f9:05:d1:87:1d:9a:b8:e0:df:71:
         d8:cc:f4:22:38:11:43:b9:36:59:4d:5f:e0:3e:43:d3:de:f2:
         3a:8b:5e:ca:1f:28:db:e1:35:d3:ab:09:38:3f:fc:be:df:ea:
         8b:a2:54:c2:67:d4:c6:1a:d0:dc:f4:78:8e:c8:4b:22:5c:5a:
         27:48:1e:da:c2:ea:a3:42:5e:b2:ad:b7:3e:43:e6:76:55:59:
         15:6e:e1:c7:5f:fe:8b:4d:c0:a5:1b:32:30:4d:f0:16:9b:cd:
         d3:39:74:ce:17:a5:23:f3:63:9e:1d:e6:c6:72:8b:1e:73:39:
         ac:78:98:d5:86:76:ff:35:39:fe:6a:d5:6d:d5:38:aa:16:30:
         e9:90:34:3d:cd:9a:d1:a4:9b:50:c8:cd:1d:0d:02:7f:e6:a1:
         1a:47:9d:de:ac:72:f5:c8:ad:04:56:78:fc:4b:ea:c4:1a:3f:
         8f:2f:3d:13
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUI/ftL0KsPRM0oaUMVKGQxuJPABQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3NUE4OEJGMjIxMzc3MkEzNjM3QjhCRDFGNzc1RUM5
OEYyMjc1RjAeFw0yNDAzMDUxNzM3MTNaFw0yNTAzMDQxNzQyMTNaMDMxMTAvBgNV
BAMTKDdDNDY0MDFBNjdFNzg0MkY4NkYzMzlBRjhBRDdENzVCN0VBNTVFRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7KmhuykQ9gwoAXp37KsonCIB
NYqO24lHIo9xvWWtY9XBfdIlmy1O64b7U4ClpxXxQ2No5s3Ld2NLuCwEkIDO7wAu
2tL6A0zXfSwH0VIFLWyWAHrPvv15EYVtYWrovboT4kDBNOhJMC4ozq87Yv+HFH58
z2nQbzAZ/Nzb80IKE+i1QfMkLO1/qJBhKTuILdzLsb94+nVHB+cwlZvc1vQXNd9k
o2J/XeKEDLOAxGAvLrOSBcmh1vfdM229wrlfK60eEw+mYssvfkzmMZV71IGrxhYK
heiA7nL4P5qJH8XP3aaQit4jKrmzGjSDIMUZDsX7hznWEurjb4eh/iPiWvCTAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUfEZAGmfnhC+G8zmvitfXW36lXuAwHwYDVR0j
BBgwFoAUeHWoi/IhN3KjY3uL0fd17JjyJ18wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUZDOUU1MURFMjY5RDI4RENERTBCQjIyODM4NzFGMjZE
Nzc4QjgwNDUxMzMzMjc2N0YyRjBBRTM5MUZBOUJELzAvNzg3NUE4OEJGMjIxMzc3
MkEzNjM3QjhCRDFGNzc1RUM5OEYyMjc1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODc1QTg4QkYyMjEzNzcyQTM2
MzdCOEJEMUY3NzVFQzk4RjIyNzVGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVGQzlFNTFERTI2OUQyOERDREUwQkIyMjgzODcxRjI2RDc3OEI4MDQ1
MTMzMzI3NjdGMkYwQUUzOTFGQTlCRC8wLzMyMzgzMDMwM2EzMzM1MzAzYTNhMmYz
MjM5MmQzNjM0MjAzZDNlMjAzMTMxMzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKAADUDANBgkq
hkiG9w0BAQsFAAOCAQEAQ7iuOLdLSuZm55YeBzIVwSAXxVtS/RttjCfMwT89e7IB
mG4WmAhECuCrK5o7HNeFnB15jXI4nY9hSmD9lWnNjxIwa4ubbwZna5joEH34jSX5
BdGHHZq44N9x2Mz0IjgRQ7k2WU1f4D5D097yOoteyh8o2+E106sJOD/8vt/qi6JU
wmfUxhrQ3PR4jshLIlxaJ0ge2sLqo0Jesq23PkPmdlVZFW7hx1/+i03ApRsyME3w
FpvN0zl0zhelI/Njnh3mxnKLHnM5rHiY1YZ2/zU5/mrVbdU4qhYw6ZA0Pc2a0aSb
UMjNHQ0Cf+ahGked3qxy9citBFZ4/EvqxBo/jy89Ew==
-----END CERTIFICATE-----