Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa
File:                     323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa (raw, json)
Hash identifier:          TQjwUeU9IEf54EqydZNO2PXK/tqeNWAQA+oGk+2vIH8=
Subject key identifier:   14:83:6D:74:5E:09:C3:03:E4:91:35:9E:0B:B5:C1:D8:04:CA:B4:A2
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       03EE7791DD8B62382019770274C8B979EF6D9F68
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa
Signing time:             Tue 14 May 2024 13:10:00 +0000
ROA not before:           Tue 14 May 2024 13:05:00 +0000
ROA not after:            Tue 13 May 2025 13:10:00 +0000
asID:                     52404
IP address blocks:        2001:13c7:6013::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ee:77:91:dd:8b:62:38:20:19:77:02:74:c8:b9:79:ef:6d:9f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: May 14 13:05:00 2024 GMT
            Not After : May 13 13:10:00 2025 GMT
        Subject: CN=14836D745E09C303E491359E0BB5C1D804CAB4A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:be:6a:73:a2:c0:54:69:82:59:e3:fd:35:
                    e5:fb:a7:ad:0b:6b:e7:0e:b9:b6:59:e6:f7:d4:ad:
                    dd:af:44:e5:93:3e:f2:4d:65:6d:c5:54:28:b6:59:
                    96:e2:12:54:d1:ee:79:81:bd:3c:0f:fa:97:75:ce:
                    0e:41:9c:be:6d:30:b5:e3:6a:8d:62:1a:bc:a1:45:
                    d2:c5:e2:f5:6d:4b:12:5c:aa:5c:e9:d3:41:c3:ef:
                    42:f4:ef:b4:44:a1:c4:3b:ac:18:87:02:08:3d:a3:
                    bd:01:83:43:40:f9:ae:37:f8:52:cd:55:30:05:9d:
                    bc:19:a9:62:df:43:54:2a:76:87:c9:cf:d2:aa:10:
                    e2:50:0f:dc:08:1a:9c:13:01:b8:fa:b9:82:cc:f8:
                    42:ac:28:f7:18:2f:b0:e9:85:b8:bd:85:45:89:a2:
                    23:df:2f:de:9f:b2:8c:4b:98:58:46:4c:27:74:db:
                    d9:69:3b:26:d5:d3:2b:f2:65:6e:37:da:6e:dd:c3:
                    5f:70:8d:d5:b0:20:2b:29:6f:da:4a:ad:06:e5:e2:
                    a9:2d:3d:04:3f:91:3d:9b:b5:b7:4b:ea:eb:7f:e3:
                    86:d1:2f:ab:99:0d:16:3f:57:ad:79:80:8a:c7:74:
                    f4:fe:91:44:08:0d:c8:f8:db:c3:92:7e:ae:87:ab:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:83:6D:74:5E:09:C3:03:E4:91:35:9E:0B:B5:C1:D8:04:CA:B4:A2
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363031333a3a2f34382d3634203d3e203532343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6013::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:b5:a0:7f:32:42:0d:c1:04:25:ec:0f:77:f8:ed:62:7e:d6:
         e7:72:19:76:92:ef:53:af:20:e6:d9:7b:32:b1:2a:40:6a:65:
         f4:8e:31:af:c0:e3:3d:e7:a0:ee:11:8e:ab:a6:17:e9:89:c5:
         c4:56:84:80:17:7a:fc:91:31:ec:c8:39:e0:f1:14:1a:ba:a3:
         0b:b2:ba:c2:45:a3:50:a8:3a:8d:bd:c2:ad:47:72:86:3d:bc:
         54:a2:40:e7:ba:85:ab:cf:20:65:12:ed:fd:61:38:da:12:a3:
         40:d5:dc:c8:80:9b:d7:b0:da:00:ac:08:9c:08:97:21:88:12:
         cb:cb:c6:bf:27:ac:9d:b2:ed:d3:d7:69:5e:35:7b:f0:93:2d:
         60:c3:fe:17:48:f4:80:1b:98:9f:19:48:41:1d:a7:50:cc:69:
         a6:d9:a6:12:98:c9:cc:88:26:4c:ac:6a:7e:4b:cf:8f:bd:74:
         66:96:2b:26:c6:08:d7:13:8f:b5:a9:2c:3c:75:90:58:3d:1e:
         90:6f:4f:36:f2:dc:e9:d6:9e:da:4c:82:63:21:6d:51:b2:3e:
         36:8a:ec:1f:6b:ce:f7:74:fd:14:04:18:6e:2d:fa:37:63:37:
         23:1b:47:c9:82:6d:0c:aa:4d:6a:76:25:5b:42:af:2b:46:d4:
         a5:c0:6b:bc
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUA+53kd2LYjggGXcCdMi5ee9tn2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNDA1MTQxMzA1MDBaFw0yNTA1MTMxMzEwMDBaMDMxMTAvBgNV
BAMTKDE0ODM2RDc0NUUwOUMzMDNFNDkxMzU5RTBCQjVDMUQ4MDRDQUI0QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrx75qc6LAVGmCWeP9NeX7p60L
a+cOubZZ5vfUrd2vROWTPvJNZW3FVCi2WZbiElTR7nmBvTwP+pd1zg5BnL5tMLXj
ao1iGryhRdLF4vVtSxJcqlzp00HD70L077REocQ7rBiHAgg9o70Bg0NA+a43+FLN
VTAFnbwZqWLfQ1QqdofJz9KqEOJQD9wIGpwTAbj6uYLM+EKsKPcYL7Dphbi9hUWJ
oiPfL96fsoxLmFhGTCd029lpOybV0yvyZW432m7dw19wjdWwICspb9pKrQbl4qkt
PQQ/kT2btbdL6ut/44bRL6uZDRY/V615gIrHdPT+kUQIDcj428OSfq6Hq7AvAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUFINtdF4JwwPkkTWeC7XB2ATKtKIwHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzYz
MDMxMzMzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzNTMyMzQzMDM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAIAETx2ATMA0GCSqGSIb3DQEBCwUAA4IBAQCXtaB/MkINwQQl7A93+O1iftbn
chl2ku9TryDm2XsysSpAamX0jjGvwOM956DuEY6rphfpicXEVoSAF3r8kTHsyDng
8RQauqMLsrrCRaNQqDqNvcKtR3KGPbxUokDnuoWrzyBlEu39YTjaEqNA1dzIgJvX
sNoArAicCJchiBLLy8a/J6ydsu3T12leNXvwky1gw/4XSPSAG5ifGUhBHadQzGmm
2aYSmMnMiCZMrGp+S8+PvXRmlismxgjXE4+1qSw8dZBYPR6Qb0828tzp1p7aTIJj
IW1Rsj42iuwfa873dP0UBBhuLfo3YzcjG0fJgm0Mqk1qdiVbQq8rRtSlwGu8
-----END CERTIFICATE-----