Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/323030313a313335383a3a2f33322d3332203d3e203131393630.roa
File:                     323030313a313335383a3a2f33322d3332203d3e203131393630.roa (raw, json)
Hash identifier:          7elp7iRMVTBxPMG0rLdw5NIw+AdLsK8ckomFM+0T/Tk=
Subject key identifier:   C1:16:37:AA:F6:DE:CC:0F:0C:65:C2:16:A3:AC:A6:3F:9B:35:DB:FF
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       69A8975B6EB550C39F5BA7CA1D3ABF4E0B2CF478
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/323030313a313335383a3a2f33322d3332203d3e203131393630.roa
Signing time:             Tue 05 Mar 2024 18:04:56 +0000
ROA not before:           Tue 05 Mar 2024 17:59:56 +0000
ROA not after:            Tue 04 Mar 2025 18:04:56 +0000
asID:                     11960
IP address blocks:        2001:1358::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a8:97:5b:6e:b5:50:c3:9f:5b:a7:ca:1d:3a:bf:4e:0b:2c:f4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Mar  5 17:59:56 2024 GMT
            Not After : Mar  4 18:04:56 2025 GMT
        Subject: CN=C11637AAF6DECC0F0C65C216A3ACA63F9B35DBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5b:12:8e:71:41:0e:a7:0c:17:85:7b:57:b9:
                    62:a9:b8:b7:5c:8c:98:5c:fb:2e:d5:23:99:2e:4d:
                    d1:3f:2a:20:ac:6d:55:94:8f:17:fa:ed:a3:75:1d:
                    46:a8:16:d7:be:4b:45:15:88:4c:59:aa:7a:fa:34:
                    69:00:10:82:fa:83:02:18:ec:65:45:1a:4b:36:18:
                    b3:1c:d6:56:33:63:25:71:74:9c:ca:2a:0d:1c:33:
                    a5:bb:81:c7:4c:bb:0d:5c:21:48:0a:3c:b4:f6:9a:
                    42:59:49:71:60:75:41:ac:c3:c4:0b:51:2f:35:17:
                    bd:3f:9d:bd:4e:6e:aa:9f:40:f5:2e:cb:88:92:b0:
                    d8:7f:fe:ec:5b:92:31:5e:47:1e:fb:1d:da:bd:eb:
                    ce:95:bd:06:52:c5:23:30:a1:e1:4c:e0:d0:5e:ab:
                    f6:cd:b2:6e:32:ae:81:99:b2:8a:ed:17:fc:8e:74:
                    d9:97:e5:85:3d:4c:da:93:16:81:59:97:e3:3e:da:
                    e6:b2:1d:65:17:c6:b0:30:39:d4:b7:94:12:db:05:
                    69:92:bd:0e:e0:48:a7:c1:b4:ad:9e:35:e8:fb:e9:
                    14:b3:8e:c8:c6:0d:30:c6:68:66:86:13:54:8c:eb:
                    cb:5f:b2:1d:3b:c6:ec:f5:99:b1:21:54:6a:3d:17:
                    45:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:16:37:AA:F6:DE:CC:0F:0C:65:C2:16:A3:AC:A6:3F:9B:35:DB:FF
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/323030313a313335383a3a2f33322d3332203d3e203131393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1358::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:70:2c:af:e0:69:72:25:54:d0:2b:88:f1:fb:be:d4:82:f2:
         71:78:e3:ec:68:fd:96:bd:b6:8b:af:71:a3:9c:e6:0e:4a:44:
         b2:14:30:a1:e0:c9:84:4a:d0:19:b9:12:40:fb:52:12:a5:36:
         4a:06:6a:1e:d0:38:91:87:23:4b:7e:5e:09:d1:47:b4:59:fc:
         4c:08:4c:fd:5e:05:0e:81:61:bb:b8:c6:94:98:9a:55:25:6b:
         c7:63:3e:6e:63:ba:c1:e7:5f:47:57:ea:10:00:1f:34:31:eb:
         a6:b6:3e:a8:3e:7f:bb:6e:95:90:1c:f9:3a:33:6d:f4:5b:1c:
         58:d0:b1:66:4a:0b:de:1c:4f:d2:ef:e4:46:97:8a:e4:b5:f6:
         37:15:bb:d1:c6:aa:27:0d:a8:36:06:ef:52:dd:5e:8e:de:95:
         e0:46:16:3f:9e:bc:21:73:d4:d4:2b:b1:ad:14:77:80:ea:72:
         b3:57:ae:4c:60:ea:94:17:06:1b:69:0e:57:79:a8:43:0e:ad:
         7e:df:7e:cc:88:56:66:b6:0b:e1:b2:be:97:4e:db:c4:19:c2:
         1f:95:3c:01:9a:4c:db:13:c3:6e:28:e8:ca:ba:2d:c5:96:fb:
         17:1b:27:6b:86:4e:65:fb:c1:6a:43:10:85:6a:9d:de:66:7a:
         1e:f7:95:53
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUaaiXW261UMOfW6fKHTq/Tgss9HgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYxOTIxODUxRkFGMTc5RUM1QTU3ODRFQ0E5MTcwNERD
RDFCNjZDNzAeFw0yNDAzMDUxNzU5NTZaFw0yNTAzMDQxODA0NTZaMDMxMTAvBgNV
BAMTKEMxMTYzN0FBRjZERUNDMEYwQzY1QzIxNkEzQUNBNjNGOUIzNURCRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiWxKOcUEOpwwXhXtXuWKpuLdc
jJhc+y7VI5kuTdE/KiCsbVWUjxf67aN1HUaoFte+S0UViExZqnr6NGkAEIL6gwIY
7GVFGks2GLMc1lYzYyVxdJzKKg0cM6W7gcdMuw1cIUgKPLT2mkJZSXFgdUGsw8QL
US81F70/nb1ObqqfQPUuy4iSsNh//uxbkjFeRx77Hdq9686VvQZSxSMwoeFM4NBe
q/bNsm4yroGZsortF/yOdNmX5YU9TNqTFoFZl+M+2uayHWUXxrAwOdS3lBLbBWmS
vQ7gSKfBtK2eNej76RSzjsjGDTDGaGaGE1SM68tfsh07xuz1mbEhVGo9F0VzAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUwRY3qvbezA8MZcIWo6ymP5s12/8wHwYDVR0j
BBgwFoAU9hkhhR+vF57FpXhOypFwTc0bZscwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERERBNUZGQzdDQzAxRTU2RkJDNUU0NzgxOUIzNUFFREI3
Q0JDMUYzMzMyRTU0NTI4MDNGMUE4N0I1MDE4MTZBLzAvRjYxOTIxODUxRkFGMTc5
RUM1QTU3ODRFQ0E5MTcwNERDRDFCNjZDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNjE5MjE4NTFGQUYxNzlFQzVB
NTc4NEVDQTkxNzA0RENEMUI2NkM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREREQTVGRkM3Q0MwMUU1NkZCQzVFNDc4MTlCMzVBRURCN0NCQzFGMzMz
MkU1NDUyODAzRjFBODdCNTAxODE2QS8wLzMyMzAzMDMxM2EzMTMzMzUzODNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzEzOTM2MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARNYMA0G
CSqGSIb3DQEBCwUAA4IBAQCZcCyv4GlyJVTQK4jx+77UgvJxeOPsaP2WvbaLr3Gj
nOYOSkSyFDCh4MmEStAZuRJA+1ISpTZKBmoe0DiRhyNLfl4J0Ue0WfxMCEz9XgUO
gWG7uMaUmJpVJWvHYz5uY7rB519HV+oQAB80Meumtj6oPn+7bpWQHPk6M230WxxY
0LFmSgveHE/S7+RGl4rktfY3FbvRxqonDag2Bu9S3V6O3pXgRhY/nrwhc9TUK7Gt
FHeA6nKzV65MYOqUFwYbaQ5XeahDDq1+337MiFZmtgvhsr6XTtvEGcIflTwBmkzb
E8NuKOjKui3FlvsXGydrhk5l+8FqQxCFap3eZnoe95VT
-----END CERTIFICATE-----