Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/323830313a3164653a3a2f34362d3436203d3e20323731393031.roa
File:                     323830313a3164653a3a2f34362d3436203d3e20323731393031.roa (raw, json)
Hash identifier:          sUTvDh7TW0IUATsdKyp+7IN/IdknpBy4w9XCifr6lR8=
Subject key identifier:   DE:B3:57:7D:DC:89:19:70:37:69:89:01:20:CB:F7:AB:FE:4A:76:85
Certificate issuer:       /CN=A1F3766D2325F9984CF9D55467958BC48B7A5165
Certificate serial:       4F5602A501ACCE869152A23166247CAE8EC2D26C
Authority key identifier: A1:F3:76:6D:23:25:F9:98:4C:F9:D5:54:67:95:8B:C4:8B:7A:51:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/323830313a3164653a3a2f34362d3436203d3e20323731393031.roa
Signing time:             Tue 05 Mar 2024 18:19:26 +0000
ROA not before:           Tue 05 Mar 2024 18:14:26 +0000
ROA not after:            Tue 04 Mar 2025 18:19:26 +0000
asID:                     271901
IP address blocks:        2801:1de::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:56:02:a5:01:ac:ce:86:91:52:a2:31:66:24:7c:ae:8e:c2:d2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F3766D2325F9984CF9D55467958BC48B7A5165
        Validity
            Not Before: Mar  5 18:14:26 2024 GMT
            Not After : Mar  4 18:19:26 2025 GMT
        Subject: CN=DEB3577DDC8919703769890120CBF7ABFE4A7685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:9f:df:15:7d:e7:12:14:de:9d:56:fb:6d:
                    ba:db:e5:b7:42:20:fc:59:d8:46:1c:c0:25:3f:f5:
                    4c:67:e1:b5:41:ee:2b:ca:39:1e:a3:81:e6:3e:fa:
                    4d:3b:46:52:c3:03:ce:f0:26:ef:38:c6:96:cd:2b:
                    4b:8e:ac:d0:34:b7:e9:4b:7f:eb:6f:46:42:ef:9f:
                    13:28:ef:e1:4c:90:83:ab:87:e3:07:1f:0f:ed:71:
                    71:ae:a9:ce:ff:87:07:41:ae:2d:ce:a6:f7:a9:26:
                    08:9d:a0:4e:58:42:7f:c7:01:6f:0f:70:e7:ba:9a:
                    a0:a4:60:9a:67:92:ca:d2:84:ca:5d:6e:c3:01:31:
                    ba:78:4a:d3:6b:7a:46:f9:5e:20:27:fe:45:55:1c:
                    80:91:46:00:4a:1a:fe:b9:4b:03:26:75:f0:f6:2a:
                    40:09:be:f7:02:fc:a8:27:90:d9:2f:c1:74:1e:3f:
                    db:1b:9a:e1:7a:27:c0:05:64:0c:8f:2b:a8:36:4c:
                    96:58:c9:52:a3:fc:9b:26:7d:58:c9:b2:de:93:74:
                    2c:f3:a2:bb:c0:0e:f8:57:9e:a3:bf:eb:7c:ca:20:
                    39:0f:87:ac:6b:83:6f:6c:a8:a9:2a:72:73:0b:3f:
                    da:2f:c3:28:96:9b:83:4e:4c:4e:bf:0e:44:f0:cf:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B3:57:7D:DC:89:19:70:37:69:89:01:20:CB:F7:AB:FE:4A:76:85
            X509v3 Authority Key Identifier:
                keyid:A1:F3:76:6D:23:25:F9:98:4C:F9:D5:54:67:95:8B:C4:8B:7A:51:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F3766D2325F9984CF9D55467958BC48B7A5165.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDA8FB790B63C187A19EEF06778C61D274E1FA2DFDE30ACA816526C916E8436/0/323830313a3164653a3a2f34362d3436203d3e20323731393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1de::/46

    Signature Algorithm: sha256WithRSAEncryption
         ac:73:12:7c:36:b8:e2:13:68:dd:e2:83:a6:80:79:e2:07:bb:
         da:73:86:55:21:52:4f:a9:f6:b0:33:75:8c:d9:90:74:df:e1:
         e5:0d:48:c6:79:05:f5:64:a5:52:e4:9f:a1:4e:1a:e6:56:5d:
         82:aa:73:a2:18:ca:24:f2:60:78:23:a6:12:2e:b0:7c:cd:18:
         29:43:2f:69:ea:4c:3b:0a:d3:18:53:e6:b8:ab:fd:46:26:07:
         9f:eb:0d:7a:34:4b:e6:42:3d:b1:df:78:eb:11:e5:45:98:8d:
         c7:c2:d7:09:e3:4d:f3:f7:26:f7:24:22:12:4f:90:f0:51:63:
         bf:9b:c1:12:44:74:a0:0f:1e:e8:a2:90:4d:2d:a2:09:b5:60:
         90:8a:d7:38:25:9e:77:a4:9e:8f:47:9f:02:63:f5:f7:13:cd:
         13:4e:e8:39:85:a6:3c:b7:ef:f7:48:26:04:8a:53:39:93:b4:
         00:45:e9:c1:49:fd:ff:01:b0:b0:25:2d:24:38:83:9e:df:04:
         1d:bb:aa:d9:9e:11:c1:3a:a3:52:ba:78:06:2c:4b:08:b9:bd:
         3e:43:f9:76:d8:90:c7:6e:81:0e:a2:97:94:70:86:5a:44:32:
         6f:fa:b2:9b:cf:f5:da:21:b3:ae:b9:42:0b:75:bb:77:fe:80:
         0d:f7:d3:6f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUT1YCpQGszoaRUqIxZiR8ro7C0mwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFGMzc2NkQyMzI1Rjk5ODRDRjlENTU0Njc5NThCQzQ4
QjdBNTE2NTAeFw0yNDAzMDUxODE0MjZaFw0yNTAzMDQxODE5MjZaMDMxMTAvBgNV
BAMTKERFQjM1NzdEREM4OTE5NzAzNzY5ODkwMTIwQ0JGN0FCRkU0QTc2ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfZ/fFX3nEhTenVb7bbrb5bdC
IPxZ2EYcwCU/9Uxn4bVB7ivKOR6jgeY++k07RlLDA87wJu84xpbNK0uOrNA0t+lL
f+tvRkLvnxMo7+FMkIOrh+MHHw/tcXGuqc7/hwdBri3OpvepJgidoE5YQn/HAW8P
cOe6mqCkYJpnksrShMpdbsMBMbp4StNrekb5XiAn/kVVHICRRgBKGv65SwMmdfD2
KkAJvvcC/KgnkNkvwXQeP9sbmuF6J8AFZAyPK6g2TJZYyVKj/JsmfVjJst6TdCzz
orvADvhXnqO/63zKIDkPh6xrg29sqKkqcnMLP9ovwyiWm4NOTE6/DkTwz+s7AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU3rNXfdyJGXA3aYkBIMv3q/5KdoUwHwYDVR0j
BBgwFoAUofN2bSMl+ZhM+dVUZ5WLxIt6UWUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkRBOEZCNzkwQjYzQzE4N0ExOUVFRjA2Nzc4QzYxRDI3
NEUxRkEyREZERTMwQUNBODE2NTI2QzkxNkU4NDM2LzAvQTFGMzc2NkQyMzI1Rjk5
ODRDRjlENTU0Njc5NThCQzQ4QjdBNTE2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMUYzNzY2RDIzMjVGOTk4NENG
OUQ1NTQ2Nzk1OEJDNDhCN0E1MTY1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JEQThGQjc5MEI2M0MxODdBMTlFRUYwNjc3OEM2MUQyNzRFMUZBMkRG
REUzMEFDQTgxNjUyNkM5MTZFODQzNi8wLzMyMzgzMDMxM2EzMTY0NjUzYTNhMmYz
NDM2MmQzNDM2MjAzZDNlMjAzMjM3MzEzOTMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIoAQHeAAAw
DQYJKoZIhvcNAQELBQADggEBAKxzEnw2uOITaN3ig6aAeeIHu9pzhlUhUk+p9rAz
dYzZkHTf4eUNSMZ5BfVkpVLkn6FOGuZWXYKqc6IYyiTyYHgjphIusHzNGClDL2nq
TDsK0xhT5rir/UYmB5/rDXo0S+ZCPbHfeOsR5UWYjcfC1wnjTfP3JvckIhJPkPBR
Y7+bwRJEdKAPHuiikE0togm1YJCK1zglnnekno9HnwJj9fcTzRNO6DmFpjy37/dI
JgSKUzmTtABF6cFJ/f8BsLAlLSQ4g57fBB27qtmeEcE6o1K6eAYsSwi5vT5D+XbY
kMdugQ6il5RwhlpEMm/6spvP9dohs665Qgt1u3f+gA33028=
-----END CERTIFICATE-----