Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/323830363a3265643a3a2f33322d3332203d3e203238333938.roa
File:                     323830363a3265643a3a2f33322d3332203d3e203238333938.roa (raw, json)
Hash identifier:          t1mriO/l/CEGKcg9PAx3APwnM6pB8lPOwJ6kyTc6cZw=
Subject key identifier:   8C:2F:E2:7A:70:77:B7:09:47:B4:4A:46:3F:87:9C:7C:03:1D:A1:38
Certificate issuer:       /CN=2944F2D96674AA0C160B60053EA3A61E1232E82C
Certificate serial:       22EB8A8915EDF14863A2D110E86C28CD6A75761D
Authority key identifier: 29:44:F2:D9:66:74:AA:0C:16:0B:60:05:3E:A3:A6:1E:12:32:E8:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/323830363a3265643a3a2f33322d3332203d3e203238333938.roa
Signing time:             Tue 05 Mar 2024 17:42:41 +0000
ROA not before:           Tue 05 Mar 2024 17:37:41 +0000
ROA not after:            Tue 04 Mar 2025 17:42:41 +0000
asID:                     28398
IP address blocks:        2806:2ed::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:eb:8a:89:15:ed:f1:48:63:a2:d1:10:e8:6c:28:cd:6a:75:76:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2944F2D96674AA0C160B60053EA3A61E1232E82C
        Validity
            Not Before: Mar  5 17:37:41 2024 GMT
            Not After : Mar  4 17:42:41 2025 GMT
        Subject: CN=8C2FE27A7077B70947B44A463F879C7C031DA138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:9f:4b:e1:22:1c:43:41:39:7d:f4:66:17:
                    33:00:75:7e:a3:da:8c:a2:18:ff:4a:3b:90:76:e9:
                    96:8f:f0:b1:60:d4:65:2f:be:34:86:74:69:0a:5e:
                    df:cd:f7:42:60:a3:97:0d:a9:76:2d:61:aa:54:18:
                    c7:fb:bd:73:7d:ff:70:8f:40:21:54:05:20:33:4e:
                    15:c9:83:36:df:7a:23:c1:e1:d5:98:bf:ec:20:8f:
                    3d:22:5f:c0:5b:aa:bb:dd:17:02:88:4f:c7:b7:37:
                    eb:87:b2:25:15:cb:9a:be:02:7c:f2:90:9d:b2:6e:
                    65:b7:93:64:47:4e:ac:3e:30:c0:be:fe:d6:35:1c:
                    fa:cf:00:0d:1b:49:7b:6c:0c:a7:ff:76:83:4d:66:
                    db:79:8e:30:c6:46:3f:0e:b8:5e:da:fe:08:1a:0e:
                    63:ad:92:8a:8d:b1:6b:7e:65:90:d7:88:65:54:02:
                    2e:21:62:1a:79:69:1f:6d:c3:e8:9c:31:c4:32:fa:
                    6d:a1:b0:b1:a6:d9:61:93:b0:51:88:f2:7b:f9:24:
                    54:82:a9:e8:d8:7e:cb:2c:41:3d:63:34:8d:a4:54:
                    ac:c1:19:55:57:c1:a6:05:df:92:01:cb:ad:09:f0:
                    01:65:a4:27:b4:d9:01:0f:d9:ef:5a:1f:94:36:c4:
                    1f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2F:E2:7A:70:77:B7:09:47:B4:4A:46:3F:87:9C:7C:03:1D:A1:38
            X509v3 Authority Key Identifier:
                keyid:29:44:F2:D9:66:74:AA:0C:16:0B:60:05:3E:A3:A6:1E:12:32:E8:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/323830363a3265643a3a2f33322d3332203d3e203238333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2ed::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:56:42:09:bc:bd:3b:df:85:bf:cb:21:f6:ed:03:13:2a:
         57:0e:db:b4:ae:11:d1:cd:98:e6:a8:9d:1c:8d:d3:af:c6:94:
         22:e0:ba:64:47:92:2e:2d:74:f8:2d:42:8d:89:21:43:3d:75:
         74:94:40:b9:49:94:12:2b:01:0a:78:b0:14:36:09:80:e5:21:
         ac:0b:98:73:7c:4f:07:63:09:63:6a:70:91:2e:9f:c5:a2:5e:
         6a:cc:98:55:fb:4d:60:a1:3c:65:13:8e:c1:6d:b3:e3:06:55:
         27:c8:49:20:b3:20:ba:f7:c5:93:d3:e6:1b:3a:cc:1d:3b:d2:
         f7:0a:0e:5d:43:fe:60:75:13:9b:f5:52:2d:50:a4:37:1c:e3:
         08:d7:b7:9f:5b:73:fd:69:ed:c1:c7:00:7c:ce:bb:54:81:5c:
         1c:e1:e5:b5:0a:61:16:91:f0:b2:82:c9:cf:5f:0b:ac:c4:cb:
         ed:bf:5c:e3:0f:20:00:a2:a3:5a:61:a5:db:d0:2a:b5:81:80:
         27:ba:7b:3b:71:d0:e4:0b:26:66:85:6a:1c:51:6d:a6:51:32:
         61:b3:e9:42:2d:c4:ab:c3:76:c7:d5:11:d2:9b:37:99:78:8a:
         ab:37:e3:78:6d:19:71:b2:24:7e:e9:73:cb:95:b0:7a:83:1a:
         06:a8:1a:ec
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUIuuKiRXt8UhjotEQ6GwozWp1dh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0NEYyRDk2Njc0QUEwQzE2MEI2MDA1M0VBM0E2MUUx
MjMyRTgyQzAeFw0yNDAzMDUxNzM3NDFaFw0yNTAzMDQxNzQyNDFaMDMxMTAvBgNV
BAMTKDhDMkZFMjdBNzA3N0I3MDk0N0I0NEE0NjNGODc5QzdDMDMxREExMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1J9L4SIcQ0E5ffRmFzMAdX6j
2oyiGP9KO5B26ZaP8LFg1GUvvjSGdGkKXt/N90Jgo5cNqXYtYapUGMf7vXN9/3CP
QCFUBSAzThXJgzbfeiPB4dWYv+wgjz0iX8BbqrvdFwKIT8e3N+uHsiUVy5q+Anzy
kJ2ybmW3k2RHTqw+MMC+/tY1HPrPAA0bSXtsDKf/doNNZtt5jjDGRj8OuF7a/gga
DmOtkoqNsWt+ZZDXiGVUAi4hYhp5aR9tw+icMcQy+m2hsLGm2WGTsFGI8nv5JFSC
qejYfsssQT1jNI2kVKzBGVVXwaYF35IBy60J8AFlpCe02QEP2e9aH5Q2xB9HAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUjC/ienB3twlHtEpGP4ecfAMdoTgwHwYDVR0j
BBgwFoAUKUTy2WZ0qgwWC2AFPqOmHhIy6CwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRjFDNEZCNTQ0MTdGNDU5OTRGMDAyRjZFQjgzQjdDQUY1
QTNGMzY4M0IzMzc2RUVBNjIzRTIyRkFBMTcyMTM0LzAvMjk0NEYyRDk2Njc0QUEw
QzE2MEI2MDA1M0VBM0E2MUUxMjMyRTgyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTQ0RjJEOTY2NzRBQTBDMTYw
QjYwMDUzRUEzQTYxRTEyMzJFODJDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUYxQzRGQjU0NDE3RjQ1OTk0RjAwMkY2RUI4M0I3Q0FGNUEzRjM2ODNC
MzM3NkVFQTYyM0UyMkZBQTE3MjEzNC8wLzMyMzgzMDM2M2EzMjY1NjQzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM4MzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYC7TANBgkq
hkiG9w0BAQsFAAOCAQEALzJWQgm8vTvfhb/LIfbtAxMqVw7btK4R0c2Y5qidHI3T
r8aUIuC6ZEeSLi10+C1CjYkhQz11dJRAuUmUEisBCniwFDYJgOUhrAuYc3xPB2MJ
Y2pwkS6fxaJeasyYVftNYKE8ZROOwW2z4wZVJ8hJILMguvfFk9PmGzrMHTvS9woO
XUP+YHUTm/VSLVCkNxzjCNe3n1tz/WntwccAfM67VIFcHOHltQphFpHwsoLJz18L
rMTL7b9c4w8gAKKjWmGl29AqtYGAJ7p7O3HQ5AsmZoVqHFFtplEyYbPpQi3Eq8N2
x9UR0ps3mXiKqzfjeG0ZcbIkfulzy5WweoMaBqga7A==
-----END CERTIFICATE-----