Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/323830303a3164303a3a2f33322d3332203d3e203134313837.roa
File:                     323830303a3164303a3a2f33322d3332203d3e203134313837.roa (raw, json)
Hash identifier:          FlL9X5hl8c4xbGpip7qa7GYlTAc5QpbB9DwAwdHOR7Y=
Subject key identifier:   DB:69:66:78:F1:8A:7E:4E:0D:3F:6B:90:08:A8:0B:37:AA:92:DD:E2
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       23ADA69DDEA940AB32C1B33799727B3BE4B8845E
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/323830303a3164303a3a2f33322d3332203d3e203134313837.roa
Signing time:             Tue 05 Mar 2024 17:42:54 +0000
ROA not before:           Tue 05 Mar 2024 17:37:54 +0000
ROA not after:            Tue 04 Mar 2025 17:42:54 +0000
asID:                     14187
IP address blocks:        2800:1d0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ad:a6:9d:de:a9:40:ab:32:c1:b3:37:99:72:7b:3b:e4:b8:84:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Mar  5 17:37:54 2024 GMT
            Not After : Mar  4 17:42:54 2025 GMT
        Subject: CN=DB696678F18A7E4E0D3F6B9008A80B37AA92DDE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e9:6b:f3:11:c9:b6:82:ff:9c:20:8a:bc:3e:
                    4f:97:55:ea:a9:77:c0:bc:91:46:74:42:3c:88:22:
                    6b:4b:fc:4c:dc:14:f0:db:42:18:08:49:df:ec:56:
                    a6:5f:13:6b:fa:d5:6f:8d:20:a8:2c:0e:59:0a:ea:
                    97:65:4b:4c:90:01:d3:97:34:d1:fe:23:e0:dd:06:
                    0b:34:d4:f2:e2:68:83:2b:2c:e5:f0:5e:29:75:4c:
                    3f:4d:e7:af:9a:5b:ed:f5:5f:f5:fa:41:32:7a:21:
                    57:97:3c:4b:b9:aa:5f:78:da:d6:74:97:a7:97:b6:
                    d6:92:6a:96:0f:93:95:2d:ef:93:9c:53:e1:46:95:
                    96:e8:29:9d:e0:50:e2:c2:df:92:a7:fc:30:15:e3:
                    7d:0d:20:89:22:c7:eb:59:00:3a:16:01:06:bf:99:
                    43:76:1e:5a:2d:51:bd:eb:ea:4f:35:89:76:4a:05:
                    a5:f4:7c:2d:5e:a2:d8:fd:6a:76:78:08:25:02:fb:
                    8a:4a:cd:87:58:63:d4:21:b0:f6:a1:3b:b8:16:2d:
                    ab:0e:a5:29:16:84:8b:82:9b:2b:41:0d:4e:9a:89:
                    01:e8:17:6f:6d:c4:20:5c:04:9c:36:41:5a:79:05:
                    43:39:92:4a:9a:4d:1e:db:84:66:27:75:63:bc:4c:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:69:66:78:F1:8A:7E:4E:0D:3F:6B:90:08:A8:0B:37:AA:92:DD:E2
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/323830303a3164303a3a2f33322d3332203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:b2:10:8c:49:e3:5a:a9:68:20:5c:04:75:08:44:25:72:
         af:b4:2d:35:35:bf:a3:9b:bf:b4:1f:51:85:d2:44:9a:b2:0e:
         a0:8d:af:2b:3e:c8:7b:14:d0:12:a5:3c:60:a2:81:11:30:23:
         40:ab:d9:8e:06:17:d0:ed:d5:3c:b9:e0:a0:8f:4d:c1:ea:c8:
         30:35:22:d8:e6:2b:94:da:06:6e:34:03:6c:66:2a:9c:72:cf:
         0f:e5:30:48:24:1f:c3:25:a7:b0:c7:9a:61:bf:cb:15:a7:7c:
         af:7e:23:5d:19:9d:9e:fc:6a:d1:10:ed:5a:2a:12:69:2b:1e:
         20:11:29:79:30:5b:ae:17:96:c0:8e:5b:5d:7e:62:5b:b7:66:
         08:ed:cd:c7:30:7a:b6:7c:4f:bf:d4:d0:6e:32:1f:ca:9c:35:
         13:bd:19:21:f2:ca:e0:77:61:ec:12:fd:ed:71:ec:fd:9a:ab:
         7f:1a:a4:ea:e6:c7:14:b2:79:ec:4b:eb:0b:99:79:a3:92:67:
         62:73:fb:88:c8:ca:67:48:71:e7:c4:d0:0b:78:84:2e:6c:bc:
         c0:61:54:d3:b1:f4:f1:bf:53:01:a5:6c:e8:d1:f9:ea:77:ae:
         ac:a1:d5:f4:a3:32:3c:36:ce:b1:4f:42:fe:43:10:cf:94:25:
         90:4e:21:70
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUI62mnd6pQKsywbM3mXJ7O+S4hF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGRTM0MjEwNzY0QkNENDJDQjZDMEZDRDkzODI4QTAx
NjYyM0VGMTAeFw0yNDAzMDUxNzM3NTRaFw0yNTAzMDQxNzQyNTRaMDMxMTAvBgNV
BAMTKERCNjk2Njc4RjE4QTdFNEUwRDNGNkI5MDA4QTgwQjM3QUE5MkRERTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz6WvzEcm2gv+cIIq8Pk+XVeqp
d8C8kUZ0QjyIImtL/EzcFPDbQhgISd/sVqZfE2v61W+NIKgsDlkK6pdlS0yQAdOX
NNH+I+DdBgs01PLiaIMrLOXwXil1TD9N56+aW+31X/X6QTJ6IVeXPEu5ql942tZ0
l6eXttaSapYPk5Ut75OcU+FGlZboKZ3gUOLC35Kn/DAV430NIIkix+tZADoWAQa/
mUN2HlotUb3r6k81iXZKBaX0fC1eotj9anZ4CCUC+4pKzYdYY9QhsPahO7gWLasO
pSkWhIuCmytBDU6aiQHoF29txCBcBJw2QVp5BUM5kkqaTR7bhGYndWO8TCYtAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU22lmePGKfk4NP2uQCKgLN6qS3eIwHwYDVR0j
BBgwFoAUzv40IQdkvNQstsD82TgooBZiPvEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTg3ODc1Nzk1RDUwMTU1RkU3NEM0NUVFQjUxMTYwN0JE
MDU0MzU2MEJGRTkxODE0MEYyNUVFMjU0OEIzNEU1LzAvQ0VGRTM0MjEwNzY0QkNE
NDJDQjZDMEZDRDkzODI4QTAxNjYyM0VGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZFMzQyMTA3NjRCQ0Q0MkNC
NkMwRkNEOTM4MjhBMDE2NjIzRUYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U4Nzg3NTc5NUQ1MDE1NUZFNzRDNDVFRUI1MTE2MDdCRDA1NDM1NjBC
RkU5MTgxNDBGMjVFRTI1NDhCMzRFNS8wLzMyMzgzMDMwM2EzMTY0MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMTM0MzEzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAB0DANBgkq
hkiG9w0BAQsFAAOCAQEAkG2yEIxJ41qpaCBcBHUIRCVyr7QtNTW/o5u/tB9RhdJE
mrIOoI2vKz7IexTQEqU8YKKBETAjQKvZjgYX0O3VPLngoI9NwerIMDUi2OYrlNoG
bjQDbGYqnHLPD+UwSCQfwyWnsMeaYb/LFad8r34jXRmdnvxq0RDtWioSaSseIBEp
eTBbrheWwI5bXX5iW7dmCO3NxzB6tnxPv9TQbjIfypw1E70ZIfLK4Hdh7BL97XHs
/Zqrfxqk6ubHFLJ57EvrC5l5o5JnYnP7iMjKZ0hx58TQC3iELmy8wGFU07H08b9T
AaVs6NH56neurKHV9KMyPDbOsU9C/kMQz5QlkE4hcA==
-----END CERTIFICATE-----