Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a34303a3a2f34382d3438203d3e203236323130.roa
File:                     323830303a38383a34303a3a2f34382d3438203d3e203236323130.roa (raw, json)
Hash identifier:          qNd5SV9WYdbwQ2WmLy2iV1fFvw7/QQd7KVi71QY/36E=
Subject key identifier:   A2:C9:21:C2:2E:80:8C:C0:23:54:08:0B:45:47:F5:DD:D6:A2:AD:9C
Certificate issuer:       /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial:       5965FA0FCF06011B461C53A1D84824EA517E3F83
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a34303a3a2f34382d3438203d3e203236323130.roa
Signing time:             Tue 05 Mar 2024 18:17:09 +0000
ROA not before:           Tue 05 Mar 2024 18:12:09 +0000
ROA not after:            Tue 04 Mar 2025 18:17:09 +0000
asID:                     26210
IP address blocks:        2800:88:40::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:65:fa:0f:cf:06:01:1b:46:1c:53:a1:d8:48:24:ea:51:7e:3f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Validity
            Not Before: Mar  5 18:12:09 2024 GMT
            Not After : Mar  4 18:17:09 2025 GMT
        Subject: CN=A2C921C22E808CC02354080B4547F5DDD6A2AD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:f3:1e:bf:e7:dc:d5:0a:10:64:d3:fe:eb:
                    a9:6e:bf:0c:67:9a:fe:93:6a:2f:a4:a1:31:1c:91:
                    af:6c:d8:35:95:8a:39:de:ef:34:f3:45:7f:3f:cd:
                    74:46:a1:35:6f:2c:30:eb:ad:4b:ad:24:43:5b:a4:
                    90:ba:3d:b1:9f:eb:1d:a0:fe:0d:4c:cd:d6:60:26:
                    ba:5f:c6:ac:d9:7b:55:ca:61:72:de:e9:d0:c1:7b:
                    75:d3:a7:fe:d7:17:5d:8d:2c:17:66:9d:6f:fe:25:
                    a4:52:b8:09:cb:a0:31:48:bb:6c:4e:8c:fe:5b:40:
                    83:b9:2a:89:62:c6:a4:8b:25:e4:32:e6:5e:e3:9b:
                    39:43:a3:b8:f5:44:f9:ad:9f:76:07:f8:af:f4:90:
                    ef:fb:6a:8b:d8:b2:ee:64:84:77:fe:55:dd:0b:89:
                    86:c2:4e:90:92:0c:21:92:26:86:88:0c:d5:c4:77:
                    5f:e0:7c:17:9b:9e:c3:d9:e6:5a:de:38:56:b9:c9:
                    e0:85:65:57:3a:28:a1:91:d5:77:cd:df:dd:04:76:
                    f1:e1:49:27:ee:50:45:e4:1f:d1:68:80:94:4f:84:
                    77:89:e7:ea:01:a1:85:d7:92:ae:3b:15:47:29:a1:
                    1c:b1:14:6a:d7:4f:79:0a:ab:09:5d:88:f7:07:10:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C9:21:C2:2E:80:8C:C0:23:54:08:0B:45:47:F5:DD:D6:A2:AD:9C
            X509v3 Authority Key Identifier:
                keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a34303a3a2f34382d3438203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:88:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:56:2e:40:31:a6:56:c0:8d:59:71:4e:1e:8c:26:37:41:23:
         c9:cc:5e:30:24:5b:00:ad:2b:0b:42:30:dd:82:85:43:6f:88:
         8d:b5:63:15:2f:18:87:a4:b5:01:b5:c6:58:65:06:b0:c9:80:
         93:0e:f6:69:c3:0e:03:13:bd:ee:ee:02:60:20:b2:07:69:48:
         ed:43:8a:3c:5c:d1:6e:d3:fa:2f:83:58:35:4c:e6:21:7b:46:
         23:ad:4d:7c:13:09:48:9d:c0:09:35:84:c1:d6:45:b8:77:bc:
         55:46:f2:50:a9:6d:61:15:3c:76:fa:af:37:d6:af:d8:69:9c:
         ea:c1:3e:9b:6b:99:da:d4:f5:e5:c2:9a:db:62:d2:c2:b8:d4:
         b7:a9:1a:f9:63:43:84:98:19:5d:bc:a2:65:ae:38:d4:d5:ba:
         bd:97:a3:72:52:d5:a3:df:fa:52:8e:1f:83:f7:06:17:15:19:
         04:c6:8f:1a:37:50:ee:ac:30:09:f4:97:7d:2f:1a:05:0e:1f:
         6e:32:de:3a:ef:8a:7a:10:d3:d1:36:64:3c:b0:70:88:92:b3:
         54:43:b9:6f:5c:0f:c6:a0:50:2c:ea:48:80:6d:05:57:18:74:
         2b:c1:60:04:15:bd:62:21:8f:c1:96:1e:24:83:27:4d:37:16:
         21:77:6b:57
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUWWX6D88GARtGHFOh2Egk6lF+P4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUyMzk4RTIyOENBRjgyNjNENjU0QzFGMzVBMTU1MjEz
NjM0Qjg0MDAeFw0yNDAzMDUxODEyMDlaFw0yNTAzMDQxODE3MDlaMDMxMTAvBgNV
BAMTKEEyQzkyMUMyMkU4MDhDQzAyMzU0MDgwQjQ1NDdGNURERDZBMkFEOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dfMev+fc1QoQZNP+66luvwxn
mv6Tai+koTEcka9s2DWVijne7zTzRX8/zXRGoTVvLDDrrUutJENbpJC6PbGf6x2g
/g1MzdZgJrpfxqzZe1XKYXLe6dDBe3XTp/7XF12NLBdmnW/+JaRSuAnLoDFIu2xO
jP5bQIO5KolixqSLJeQy5l7jmzlDo7j1RPmtn3YH+K/0kO/7aovYsu5khHf+Vd0L
iYbCTpCSDCGSJoaIDNXEd1/gfBebnsPZ5lreOFa5yeCFZVc6KKGR1XfN390EdvHh
SSfuUEXkH9FogJRPhHeJ5+oBoYXXkq47FUcpoRyxFGrXT3kKqwldiPcHEL9NAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUoskhwi6AjMAjVAgLRUf13dairZwwHwYDVR0j
BBgwFoAUDiOY4ijK+CY9ZUwfNaFVITY0uEAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRUNERTc1MDQ3QUFEMTM1QzBBNDdGRTFERTZENkIwRDNG
RTFCMDY3MUREQjVFRjkzQTEyNTQ0NDk3Qzk0NDE1LzAvMEUyMzk4RTIyOENBRjgy
NjNENjU0QzFGMzVBMTU1MjEzNjM0Qjg0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTIzOThFMjI4Q0FGODI2M0Q2
NTRDMUYzNUExNTUyMTM2MzRCODQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0VDREU3NTA0N0FBRDEzNUMwQTQ3RkUxREU2RDZCMEQzRkUxQjA2NzFE
REI1RUY5M0ExMjU0NDQ5N0M5NDQxNS8wLzMyMzgzMDMwM2EzODM4M2EzNDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgAAIgA
QDANBgkqhkiG9w0BAQsFAAOCAQEAW1YuQDGmVsCNWXFOHowmN0EjycxeMCRbAK0r
C0Iw3YKFQ2+IjbVjFS8Yh6S1AbXGWGUGsMmAkw72acMOAxO97u4CYCCyB2lI7UOK
PFzRbtP6L4NYNUzmIXtGI61NfBMJSJ3ACTWEwdZFuHe8VUbyUKltYRU8dvqvN9av
2Gmc6sE+m2uZ2tT15cKa22LSwrjUt6ka+WNDhJgZXbyiZa441NW6vZejclLVo9/6
Uo4fg/cGFxUZBMaPGjdQ7qwwCfSXfS8aBQ4fbjLeOu+KehDT0TZkPLBwiJKzVEO5
b1wPxqBQLOpIgG0FVxh0K8FgBBW9YiGPwZYeJIMnTTcWIXdrVw==
-----END CERTIFICATE-----