Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531333a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346531333a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          oGEUoNfBlwmhtTgvXZK8uDYJaR4TeJJlFl5vl5L3C68=
Subject key identifier:   3D:2A:B0:A5:C8:F2:6A:80:D8:E3:77:6D:B1:C5:AF:B5:CD:7A:7C:DE
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       767424C1D806E899E7051468226F549739EE3AD5
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531333a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:22 +0000
ROA not before:           Tue 05 Mar 2024 17:59:22 +0000
ROA not after:            Tue 04 Mar 2025 18:04:22 +0000
asID:                     267848
IP address blocks:        2800:be0:4e13::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:74:24:c1:d8:06:e8:99:e7:05:14:68:22:6f:54:97:39:ee:3a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:22 2024 GMT
            Not After : Mar  4 18:04:22 2025 GMT
        Subject: CN=3D2AB0A5C8F26A80D8E3776DB1C5AFB5CD7A7CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:66:33:f7:1a:ef:6b:ba:6c:80:19:57:dc:
                    34:9a:4d:b9:3d:86:20:2f:b4:f1:2c:18:f1:f1:7b:
                    91:86:f6:93:b9:53:25:da:74:b3:65:9c:c1:b9:27:
                    41:d5:fb:46:ad:11:77:f4:78:84:4e:fc:6e:5b:2b:
                    d6:53:79:cf:88:27:bd:af:9c:72:aa:13:6e:9a:a3:
                    e8:fd:86:b3:b2:ed:6d:0c:68:bb:f0:80:8e:91:b8:
                    0e:dd:ce:61:fc:5e:ba:a4:f6:b4:c3:1d:15:05:5e:
                    63:05:01:61:e0:76:a9:11:fa:b3:7c:2d:f9:db:d1:
                    6f:61:47:03:26:57:98:57:50:d0:55:64:75:8e:b3:
                    9c:8f:f7:aa:3c:18:aa:df:b0:ad:88:16:ca:9a:21:
                    7c:d1:5e:0f:cd:50:3d:2d:bb:c9:54:71:11:a4:c1:
                    4b:04:0e:89:30:ab:ec:fc:ba:9d:eb:4b:a0:ff:9b:
                    7b:4b:f9:b0:90:d1:e1:8c:7b:e9:bd:47:ca:47:f4:
                    46:44:49:97:7d:42:47:1b:f8:ad:77:7c:4d:86:34:
                    65:bc:4c:25:0f:00:f1:6e:00:79:d4:f5:df:1f:c6:
                    27:3a:c7:f2:8b:ea:78:6d:87:11:76:1c:35:db:0f:
                    6c:84:ed:2b:ae:24:db:aa:c1:72:cf:87:50:c6:b1:
                    40:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2A:B0:A5:C8:F2:6A:80:D8:E3:77:6D:B1:C5:AF:B5:CD:7A:7C:DE
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531333a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e13::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:16:37:ea:eb:e8:2f:7d:da:75:79:16:c3:86:e7:b3:99:66:
         74:43:da:83:89:a0:15:5d:14:ee:9c:ec:b3:3f:22:df:cf:f5:
         6c:97:f0:2f:c7:fb:8b:04:8c:95:32:04:96:59:6f:7a:01:84:
         b8:bf:ac:34:9e:6a:5e:49:0a:f2:e0:a2:60:62:b4:8b:d9:9f:
         6c:7d:7a:78:0e:b2:3e:cd:33:35:af:7c:b1:e9:8a:f7:64:ad:
         c3:a7:96:5d:06:df:6e:98:8a:18:e7:c6:ae:d2:a9:dd:2e:45:
         50:10:2d:6f:8c:bb:55:e9:45:3d:77:c5:3c:90:de:28:16:18:
         b1:f2:74:28:2f:c8:e2:26:d4:d2:37:a7:e0:bb:b2:d7:5e:7b:
         76:38:98:95:f9:8c:06:83:a3:a2:cd:24:19:9a:54:33:09:96:
         15:c8:9d:f1:37:ab:6c:54:97:cc:d0:73:94:82:d9:82:f4:2b:
         9d:99:dc:1b:6e:d7:24:6f:91:e4:76:bb:5b:f6:c3:0a:51:c3:
         e1:50:40:42:c1:88:c7:78:84:6d:c2:ff:da:97:42:b6:4e:18:
         64:71:d1:5e:d2:4b:9c:c6:73:77:ea:d5:79:8c:8d:a6:a0:7b:
         db:63:c2:d1:08:a3:01:ef:1f:9c:52:9b:cc:1e:0f:4f:80:1b:
         6f:bc:de:63
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUdnQkwdgG6JnnBRRoIm9UlznuOtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOTNCQjU4MURDRUVFNTIxM0ZEOUU2MzdBOEIzM0Y4
NjA1OEFBRDAeFw0yNDAzMDUxNzU5MjJaFw0yNTAzMDQxODA0MjJaMDMxMTAvBgNV
BAMTKDNEMkFCMEE1QzhGMjZBODBEOEUzNzc2REIxQzVBRkI1Q0Q3QTdDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISWYz9xrva7psgBlX3DSaTbk9
hiAvtPEsGPHxe5GG9pO5UyXadLNlnMG5J0HV+0atEXf0eIRO/G5bK9ZTec+IJ72v
nHKqE26ao+j9hrOy7W0MaLvwgI6RuA7dzmH8Xrqk9rTDHRUFXmMFAWHgdqkR+rN8
Lfnb0W9hRwMmV5hXUNBVZHWOs5yP96o8GKrfsK2IFsqaIXzRXg/NUD0tu8lUcRGk
wUsEDokwq+z8up3rS6D/m3tL+bCQ0eGMe+m9R8pH9EZESZd9Qkcb+K13fE2GNGW8
TCUPAPFuAHnU9d8fxic6x/KL6nhthxF2HDXbD2yE7SuuJNuqwXLPh1DGsUDzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUPSqwpcjyaoDY43dtscWvtc16fN4wHwYDVR0j
BBgwFoAUagk7tYHc7uUhP9nmN6izP4YFiq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTA1NUU5QjczMDBBOTlCNDJDMjYxNDI3NDFBNDIzREMz
NDdDQjYxNkZFQkQ0MUJBMDY2NTVDRDcxNkEwMjBGLzAvNkEwOTNCQjU4MURDRUVF
NTIxM0ZEOUU2MzdBOEIzM0Y4NjA1OEFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5M0JCNTgxRENFRUU1MjEz
RkQ5RTYzN0E4QjMzRjg2MDU4QUFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUwNTVFOUI3MzAwQTk5QjQyQzI2MTQyNzQxQTQyM0RDMzQ3Q0I2MTZG
RUJENDFCQTA2NjU1Q0Q3MTZBMDIwRi8wLzMyMzgzMDMwM2E2MjY1MzAzYTM0NjUz
MTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM3MzgzNDM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKAAL4E4TMA0GCSqGSIb3DQEBCwUAA4IBAQBEFjfq6+gvfdp1eRbDhuezmWZ0
Q9qDiaAVXRTunOyzPyLfz/Vsl/Avx/uLBIyVMgSWWW96AYS4v6w0nmpeSQry4KJg
YrSL2Z9sfXp4DrI+zTM1r3yx6Yr3ZK3Dp5ZdBt9umIoY58au0qndLkVQEC1vjLtV
6UU9d8U8kN4oFhix8nQoL8jiJtTSN6fgu7LXXnt2OJiV+YwGg6OizSQZmlQzCZYV
yJ3xN6tsVJfM0HOUgtmC9Cudmdwbbtckb5Hkdrtb9sMKUcPhUEBCwYjHeIRtwv/a
l0K2ThhkcdFe0kucxnN36tV5jI2moHvbY8LRCKMB7x+cUpvMHg9PgBtvvN5j
-----END CERTIFICATE-----