Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/323830303a3834303a3a2f33322d3438203d3e203139343232.roa
File:                     323830303a3834303a3a2f33322d3438203d3e203139343232.roa (raw, json)
Hash identifier:          eaofxaXU72AXw5SbZLJ+aGpJLaCkVE0Q9xvQTFrJaDs=
Subject key identifier:   4C:F9:69:26:CD:0E:22:0A:28:CC:2B:81:36:64:CE:35:2C:44:A4:08
Certificate issuer:       /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial:       5CF4394174640EAC35416CC5188B8B780BA3A017
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/323830303a3834303a3a2f33322d3438203d3e203139343232.roa
Signing time:             Fri 22 Mar 2024 14:35:00 +0000
ROA not before:           Fri 22 Mar 2024 14:30:00 +0000
ROA not after:            Fri 21 Mar 2025 14:35:00 +0000
asID:                     19422
IP address blocks:        2800:840::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f4:39:41:74:64:0e:ac:35:41:6c:c5:18:8b:8b:78:0b:a3:a0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
        Validity
            Not Before: Mar 22 14:30:00 2024 GMT
            Not After : Mar 21 14:35:00 2025 GMT
        Subject: CN=4CF96926CD0E220A28CC2B813664CE352C44A408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:e4:50:7d:85:44:b0:c2:9a:72:b6:aa:3a:
                    04:dc:65:79:54:50:2b:f4:96:11:f6:e3:d6:47:9a:
                    24:13:ef:9e:3d:6b:cd:52:ab:31:46:ed:19:35:ce:
                    58:ca:8f:61:8b:b0:95:dd:40:4f:62:6f:ee:4f:cb:
                    a8:02:6e:c2:d3:78:69:14:d7:fc:4d:cc:d5:5b:c3:
                    c2:0e:cf:d2:53:28:5b:b9:e4:b2:3c:2b:f5:04:4d:
                    a9:51:97:c2:de:c6:6e:06:04:03:e0:cd:01:eb:d7:
                    a1:f2:0f:eb:30:f9:83:28:f9:b6:18:88:b8:eb:14:
                    40:6f:ac:df:8c:88:23:bd:36:33:2a:99:1b:45:73:
                    66:3d:1f:30:2d:d9:3d:86:65:4f:cd:d4:6b:0b:21:
                    57:fb:6e:cb:4e:75:a9:98:8f:eb:88:fb:77:46:d5:
                    7e:6f:03:3c:b7:26:ac:5b:d0:24:f2:ec:c3:76:1a:
                    d0:74:70:48:b7:f3:cd:c2:13:09:2d:6d:f5:30:c4:
                    9e:e0:2e:b1:56:a9:a6:f5:0c:8e:43:30:0e:98:c2:
                    32:d7:a0:70:1a:51:f9:1e:34:c2:cf:bd:58:0b:5b:
                    d1:3a:aa:21:3f:6f:7d:a8:ab:99:fc:39:25:f5:37:
                    8b:ec:cf:ca:f1:76:1a:a8:60:1c:37:6d:27:73:13:
                    9e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F9:69:26:CD:0E:22:0A:28:CC:2B:81:36:64:CE:35:2C:44:A4:08
            X509v3 Authority Key Identifier:
                keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/323830303a3834303a3a2f33322d3438203d3e203139343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:c9:bc:1a:cc:3d:2d:ae:50:56:58:ef:52:12:02:f9:07:dc:
         3c:73:80:d5:71:19:ac:58:85:a3:61:d7:37:dc:73:db:18:95:
         b3:c0:25:09:8f:89:d3:2f:1d:d0:6a:f5:82:91:0a:70:9a:89:
         1a:61:80:1c:c7:6d:97:bb:64:bb:86:72:b4:3e:8b:84:91:53:
         ef:54:d6:b4:1d:3a:9f:0a:da:e0:24:a1:f3:5d:c3:45:31:15:
         55:34:0e:bb:27:8b:a0:cc:1d:ae:96:d5:43:b4:7d:25:e5:89:
         53:67:e4:a6:08:25:01:5e:bd:cf:f9:30:21:27:76:3f:d8:5a:
         94:54:5a:93:9b:fe:82:04:d6:90:2f:a8:3d:57:82:f8:ca:40:
         4b:01:89:59:18:4b:15:93:c6:cd:1d:6f:12:31:ab:f5:00:d5:
         4f:6d:11:bb:05:71:27:50:5b:69:72:e5:74:e2:89:b1:4d:d7:
         d7:6c:6c:79:94:95:fe:0b:21:7a:6d:4f:fc:cf:24:1e:b8:78:
         b2:5b:30:50:85:17:16:a9:6f:b4:7c:5c:97:fe:7c:07:23:b8:
         c7:82:3e:1e:e7:2f:96:16:45:e5:3c:24:ed:b6:8f:7f:34:82:
         1b:4d:ec:af:55:c1:1b:4d:f3:49:e0:c5:fb:a5:f4:24:24:f8:
         3c:5c:f2:cd
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXPQ5QXRkDqw1QWzFGIuLeAujoBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgwNDFGMTUzNjVBNDIzQkMwOEY5MkJDNjlBNUY5MDk2
NDQwNDJDMjAeFw0yNDAzMjIxNDMwMDBaFw0yNTAzMjExNDM1MDBaMDMxMTAvBgNV
BAMTKDRDRjk2OTI2Q0QwRTIyMEEyOENDMkI4MTM2NjRDRTM1MkM0NEE0MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4eRQfYVEsMKacraqOgTcZXlU
UCv0lhH249ZHmiQT7549a81SqzFG7Rk1zljKj2GLsJXdQE9ib+5Py6gCbsLTeGkU
1/xNzNVbw8IOz9JTKFu55LI8K/UETalRl8Lexm4GBAPgzQHr16HyD+sw+YMo+bYY
iLjrFEBvrN+MiCO9NjMqmRtFc2Y9HzAt2T2GZU/N1GsLIVf7bstOdamYj+uI+3dG
1X5vAzy3Jqxb0CTy7MN2GtB0cEi3883CEwktbfUwxJ7gLrFWqab1DI5DMA6YwjLX
oHAaUfkeNMLPvVgLW9E6qiE/b32oq5n8OSX1N4vsz8rxdhqoYBw3bSdzE56bAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUTPlpJs0OIgoozCuBNmTONSxEpAgwHwYDVR0j
BBgwFoAUiAQfFTZaQjvAj5K8aaX5CWRAQsIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOUY0Mzg1QThERjg4NzY4QkE2QzVBQjlCOUFFQkM5QjEw
ODgzMzJDRDU2QkU1OUE5RTJFQjUzMDIxNzEyNjY4LzAvODgwNDFGMTUzNjVBNDIz
QkMwOEY5MkJDNjlBNUY5MDk2NDQwNDJDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODA0MUYxNTM2NUE0MjNCQzA4
RjkyQkM2OUE1RjkwOTY0NDA0MkMyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTlGNDM4NUE4REY4ODc2OEJBNkM1QUI5QjlBRUJDOUIxMDg4MzMyQ0Q1
NkJFNTlBOUUyRUI1MzAyMTcxMjY2OC8wLzMyMzgzMDMwM2EzODM0MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMTM5MzQzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAIQDANBgkq
hkiG9w0BAQsFAAOCAQEAbMm8Gsw9La5QVljvUhIC+QfcPHOA1XEZrFiFo2HXN9xz
2xiVs8AlCY+J0y8d0Gr1gpEKcJqJGmGAHMdtl7tku4ZytD6LhJFT71TWtB06nwra
4CSh813DRTEVVTQOuyeLoMwdrpbVQ7R9JeWJU2fkpgglAV69z/kwISd2P9halFRa
k5v+ggTWkC+oPVeC+MpASwGJWRhLFZPGzR1vEjGr9QDVT20RuwVxJ1BbaXLldOKJ
sU3X12xseZSV/gshem1P/M8kHrh4slswUIUXFqlvtHxcl/58ByO4x4I+HucvlhZF
5Twk7baPfzSCG03sr1XBG03zSeDF+6X0JCT4PFzyzQ==
-----END CERTIFICATE-----