Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/323830363a3265613a3a2f33322d3332203d3e20313339323335.roa
File:                     323830363a3265613a3a2f33322d3332203d3e20313339323335.roa (raw, json)
Hash identifier:          F39Vj/DTKYLvniyC7EunjBmLJe/7IsiVQMCmVWzRjZ8=
Subject key identifier:   53:F7:F8:58:71:8D:E1:21:D7:C5:8E:43:EA:7A:53:00:5F:26:EF:E5
Certificate issuer:       /CN=A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41
Certificate serial:       455FEB97385C91C5B8975EABC5810B56A5FAE350
Authority key identifier: A8:DE:9D:1A:4E:99:DC:F1:91:4B:91:6B:9F:E6:68:2E:D4:71:EC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/323830363a3265613a3a2f33322d3332203d3e20313339323335.roa
Signing time:             Tue 05 Mar 2024 17:48:32 +0000
ROA not before:           Tue 05 Mar 2024 17:43:32 +0000
ROA not after:            Tue 04 Mar 2025 17:48:32 +0000
asID:                     139235
IP address blocks:        2806:2ea::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5f:eb:97:38:5c:91:c5:b8:97:5e:ab:c5:81:0b:56:a5:fa:e3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41
        Validity
            Not Before: Mar  5 17:43:32 2024 GMT
            Not After : Mar  4 17:48:32 2025 GMT
        Subject: CN=53F7F858718DE121D7C58E43EA7A53005F26EFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:83:47:ad:06:71:42:47:2c:b2:31:65:55:
                    8c:de:0e:90:7c:7d:8d:31:3f:96:7d:53:a7:c2:f4:
                    86:67:85:2a:c2:46:98:e1:31:9c:b3:2a:2c:79:51:
                    b3:e9:2d:b0:03:cb:d8:a8:a0:91:54:1d:7b:52:0a:
                    e8:6f:1b:da:e9:d9:62:33:ac:36:6b:90:19:e9:b6:
                    c2:ba:f0:d9:ee:bd:27:47:27:a6:b1:c7:81:ee:1e:
                    a9:4d:c3:b3:a6:4f:82:c9:4c:d1:cb:3f:0e:02:50:
                    4e:74:d4:d9:39:9f:f1:19:b5:05:57:73:ef:5f:bf:
                    98:d1:7b:82:2a:9a:e7:f2:94:76:f7:e5:f0:3f:f1:
                    d6:24:9e:3d:3c:5c:07:0c:fe:39:16:f9:89:80:6e:
                    2f:60:7a:9f:5a:13:1c:72:d4:78:79:f4:0b:bb:4a:
                    01:50:97:44:64:29:e8:bb:42:3e:e6:ba:c3:fc:07:
                    25:93:f0:06:71:d6:30:3d:28:8d:a0:b4:00:cc:2d:
                    fd:92:37:9b:6b:e4:43:9d:6c:88:1e:41:60:22:fe:
                    41:fc:c8:b9:d2:16:64:34:98:27:e9:7b:0b:b9:8c:
                    bf:db:12:ca:6e:8b:b4:07:ab:4b:02:89:4d:93:aa:
                    0f:67:49:8f:36:82:8e:7c:8d:b1:fb:e4:d8:23:b0:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F7:F8:58:71:8D:E1:21:D7:C5:8E:43:EA:7A:53:00:5F:26:EF:E5
            X509v3 Authority Key Identifier:
                keyid:A8:DE:9D:1A:4E:99:DC:F1:91:4B:91:6B:9F:E6:68:2E:D4:71:EC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/323830363a3265613a3a2f33322d3332203d3e20313339323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2ea::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:ed:87:e5:55:3b:63:52:d3:c3:45:e9:03:c6:c0:ea:68:
         95:bb:5d:5e:ab:86:51:47:22:ac:1f:49:61:1d:64:c0:ac:19:
         38:08:e3:e8:f3:3d:09:e2:9b:d1:b5:da:64:ae:af:fc:a1:51:
         4a:fe:24:9e:8d:6c:a7:71:bd:80:9e:07:5e:03:1f:36:58:a6:
         29:2f:3e:28:4c:8c:99:c6:cf:5e:a0:d0:32:21:ec:7c:dd:f3:
         7b:d5:2c:08:11:67:a3:ad:b2:b6:31:dd:02:65:47:19:c1:6a:
         cd:09:c5:f2:7b:ba:ae:ae:3f:4c:14:f3:d5:34:21:2e:16:7b:
         cb:ee:b6:5d:d7:88:68:96:73:e2:e0:99:59:82:16:39:ee:fa:
         a9:2f:90:60:5e:e8:3d:3a:61:2f:7d:16:ca:83:c0:12:e1:10:
         a5:9d:34:bd:be:48:59:f9:d7:ac:06:ee:39:3f:99:0e:ff:b7:
         58:0a:d7:41:27:e2:5b:3d:f0:b6:c3:05:c3:cc:18:92:f7:6b:
         61:2b:0d:1b:74:56:e3:c7:47:9a:19:03:64:09:7d:53:ee:db:
         41:3e:e0:c1:00:3e:6a:85:22:c1:56:c3:8b:b4:82:e5:ca:0f:
         4e:c2:44:69:5c:2f:ae:1c:2d:aa:7b:4c:8b:df:b8:05:0e:a7:
         39:ab:be:d8
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIURV/rlzhckcW4l16rxYELVqX641AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThERTlEMUE0RTk5RENGMTkxNEI5MTZCOUZFNjY4MkVE
NDcxRUM0MTAeFw0yNDAzMDUxNzQzMzJaFw0yNTAzMDQxNzQ4MzJaMDMxMTAvBgNV
BAMTKDUzRjdGODU4NzE4REUxMjFEN0M1OEU0M0VBN0E1MzAwNUYyNkVGRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhYNHrQZxQkcssjFlVYzeDpB8
fY0xP5Z9U6fC9IZnhSrCRpjhMZyzKix5UbPpLbADy9iooJFUHXtSCuhvG9rp2WIz
rDZrkBnptsK68NnuvSdHJ6axx4HuHqlNw7OmT4LJTNHLPw4CUE501Nk5n/EZtQVX
c+9fv5jRe4IqmufylHb35fA/8dYknj08XAcM/jkW+YmAbi9gep9aExxy1Hh59Au7
SgFQl0RkKei7Qj7musP8ByWT8AZx1jA9KI2gtADMLf2SN5tr5EOdbIgeQWAi/kH8
yLnSFmQ0mCfpewu5jL/bEspui7QHq0sCiU2Tqg9nSY82go58jbH75NgjsPWjAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUU/f4WHGN4SHXxY5D6npTAF8m7+UwHwYDVR0j
BBgwFoAUqN6dGk6Z3PGRS5Frn+ZoLtRx7EEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjk4QjE3NjZEN0RCQkM0NDYwMjVGNjgxNjgxMjhCMDQw
MzZEQzE5NDFGMUYwNEU3NTgxQzI1Q0ExNjYwRjFBLzAvQThERTlEMUE0RTk5RENG
MTkxNEI5MTZCOUZFNjY4MkVENDcxRUM0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOERFOUQxQTRFOTlEQ0YxOTE0
QjkxNkI5RkU2NjgyRUQ0NzFFQzQxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTY5OEIxNzY2RDdEQkJDNDQ2MDI1RjY4MTY4MTI4QjA0MDM2REMxOTQx
RjFGMDRFNzU4MUMyNUNBMTY2MEYxQS8wLzMyMzgzMDM2M2EzMjY1NjEzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMTMzMzkzMjMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgLqMA0G
CSqGSIb3DQEBCwUAA4IBAQAwb+2H5VU7Y1LTw0XpA8bA6miVu11eq4ZRRyKsH0lh
HWTArBk4COPo8z0J4pvRtdpkrq/8oVFK/iSejWyncb2AngdeAx82WKYpLz4oTIyZ
xs9eoNAyIex83fN71SwIEWejrbK2Md0CZUcZwWrNCcXye7qurj9MFPPVNCEuFnvL
7rZd14holnPi4JlZghY57vqpL5BgXug9OmEvfRbKg8AS4RClnTS9vkhZ+desBu45
P5kO/7dYCtdBJ+JbPfC2wwXDzBiS92thKw0bdFbjx0eaGQNkCX1T7ttBPuDBAD5q
hSLBVsOLtILlyg9OwkRpXC+uHC2qe0yL37gFDqc5q77Y
-----END CERTIFICATE-----