Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a373a3a2f34382d3438203d3e203236353036.roa
File:                     323830313a3131343a373a3a2f34382d3438203d3e203236353036.roa (raw, json)
Hash identifier:          dzQ5VDcfOtZ0NettJ4V+PP9DoWX4GQfwKycOUvKl+tc=
Subject key identifier:   14:7D:B9:3B:17:FC:6D:64:97:06:A8:D8:48:74:8F:4A:7A:45:64:6C
Certificate issuer:       /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial:       3FE0539113E7E810DA098A0772D324CAF1A8701E
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a373a3a2f34382d3438203d3e203236353036.roa
Signing time:             Tue 04 Feb 2025 18:18:44 +0000
ROA not before:           Tue 04 Feb 2025 18:13:44 +0000
ROA not after:            Tue 03 Feb 2026 18:18:44 +0000
asID:                     26506
IP address blocks:        2801:114:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e0:53:91:13:e7:e8:10:da:09:8a:07:72:d3:24:ca:f1:a8:70:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
        Validity
            Not Before: Feb  4 18:13:44 2025 GMT
            Not After : Feb  3 18:18:44 2026 GMT
        Subject: CN=147DB93B17FC6D649706A8D848748F4A7A45646C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:76:ff:df:ab:c4:20:db:b3:7d:66:88:61:
                    df:af:f3:f3:64:73:8f:f9:e4:d3:19:84:d1:8f:95:
                    99:15:1a:13:f6:02:96:d0:de:7c:9b:93:1f:d0:91:
                    eb:70:26:74:d3:48:53:bf:9f:21:33:b2:0c:a1:a6:
                    32:8e:03:ca:b7:30:f9:91:98:72:96:14:a3:ea:91:
                    42:a3:69:77:61:7b:13:f7:69:39:52:82:aa:4c:69:
                    28:2e:74:52:d9:4b:8d:96:32:76:51:f8:72:66:2a:
                    1b:19:ec:87:7a:c4:f6:e9:a9:c3:c5:80:95:d0:10:
                    c7:32:d6:db:2b:25:3f:cf:5f:04:06:9c:20:33:f5:
                    18:87:cd:8e:12:43:4d:8b:0e:04:7e:36:e3:ab:19:
                    9f:73:d0:6d:2c:f7:23:9e:3a:9d:dc:05:65:c3:1b:
                    77:88:44:88:75:9a:f6:55:59:16:a2:e2:b0:ec:f1:
                    4a:7b:b4:f1:e2:cb:4f:61:03:63:a4:bc:ce:99:df:
                    1a:a6:2c:bb:d7:5a:32:8b:97:c7:02:23:46:7f:0a:
                    10:74:33:d6:71:2e:42:e5:cc:53:8c:f5:00:ae:a2:
                    f5:70:04:79:40:d2:f3:e1:a7:32:bf:eb:12:44:a4:
                    c8:0e:a5:2d:aa:e7:de:20:99:3e:6e:7e:5c:ea:0b:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7D:B9:3B:17:FC:6D:64:97:06:A8:D8:48:74:8F:4A:7A:45:64:6C
            X509v3 Authority Key Identifier:
                keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830313a3131343a373a3a2f34382d3438203d3e203236353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:114:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:d0:a4:72:7c:a8:74:8f:89:dd:64:7f:4d:3b:da:41:64:32:
         1b:90:e2:eb:7e:e3:00:18:b8:bf:95:c3:3a:4f:25:ff:2e:7b:
         e0:32:86:11:db:4c:b9:2f:bd:f0:bf:3d:08:14:6e:c0:af:a2:
         a0:6c:ea:d5:03:49:5a:7c:30:b9:b7:c5:ae:c1:80:1b:e6:4a:
         7a:6d:9b:a4:c4:75:7a:7d:8f:5b:e5:5c:95:30:d6:e2:11:fa:
         ae:59:99:42:81:03:67:38:6b:53:2f:b8:c6:55:7a:50:80:c8:
         c3:86:fe:71:a5:a5:5e:fd:fe:92:ad:c2:33:49:56:b0:b1:22:
         cc:9f:07:74:ac:83:a6:b9:8c:49:f7:4d:86:4f:96:3b:f2:38:
         d5:d7:34:e5:9e:e9:a8:6c:fe:af:5c:22:22:21:4e:55:1e:5e:
         c7:38:18:7c:72:cf:d9:30:d9:d1:b5:e2:94:fa:9e:87:b9:0b:
         7f:1d:a8:31:9f:2c:af:df:9c:01:3c:3f:32:d9:19:0c:12:58:
         10:2d:20:f4:91:59:49:2f:9b:6f:42:1f:7a:2b:fa:4a:f4:e6:
         6e:1e:56:9b:56:29:f9:d8:fd:ce:67:6f:64:c0:02:d9:8b:32:
         40:15:91:12:11:70:bb:14:32:2c:89:b8:ba:92:1d:2b:19:b9:
         e6:e7:11:ae
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUP+BTkRPn6BDaCYoHctMkyvGocB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxQUUxRTE0QzVBMzNFREVERTk3NzI4NUM3QjEwN0U1
MzQ1MDRFQTAeFw0yNTAyMDQxODEzNDRaFw0yNjAyMDMxODE4NDRaMDMxMTAvBgNV
BAMTKDE0N0RCOTNCMTdGQzZENjQ5NzA2QThEODQ4NzQ4RjRBN0E0NTY0NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxHb/36vEINuzfWaIYd+v8/Nk
c4/55NMZhNGPlZkVGhP2ApbQ3nybkx/QketwJnTTSFO/nyEzsgyhpjKOA8q3MPmR
mHKWFKPqkUKjaXdhexP3aTlSgqpMaSgudFLZS42WMnZR+HJmKhsZ7Id6xPbpqcPF
gJXQEMcy1tsrJT/PXwQGnCAz9RiHzY4SQ02LDgR+NuOrGZ9z0G0s9yOeOp3cBWXD
G3eIRIh1mvZVWRai4rDs8Up7tPHiy09hA2OkvM6Z3xqmLLvXWjKLl8cCI0Z/ChB0
M9ZxLkLlzFOM9QCuovVwBHlA0vPhpzK/6xJEpMgOpS2q594gmT5uflzqC2r7AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUFH25Oxf8bWSXBqjYSHSPSnpFZGwwHwYDVR0j
BBgwFoAU+xrh4UxaM+3t6XcoXHsQflNFBOowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMTA4RUY3NzEwOENCNDNFRTFGMzBGNUM5Qzc2RkJERjI3
Nzc5RkNFM0UyOUE4NDI2MjNEODI5NjhCMzYxNkRCLzAvRkIxQUUxRTE0QzVBMzNF
REVERTk3NzI4NUM3QjEwN0U1MzQ1MDRFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjFBRTFFMTRDNUEzM0VERURF
OTc3Mjg1QzdCMTA3RTUzNDUwNEVBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjEwOEVGNzcxMDhDQjQzRUUxRjMwRjVDOUM3NkZCREYyNzc3OUZDRTNF
MjlBODQyNjIzRDgyOTY4QjM2MTZEQi8wLzMyMzgzMDMxM2EzMTMxMzQzYTM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM1MzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBARQA
BzANBgkqhkiG9w0BAQsFAAOCAQEALtCkcnyodI+J3WR/TTvaQWQyG5Di637jABi4
v5XDOk8l/y574DKGEdtMuS+98L89CBRuwK+ioGzq1QNJWnwwubfFrsGAG+ZKem2b
pMR1en2PW+VclTDW4hH6rlmZQoEDZzhrUy+4xlV6UIDIw4b+caWlXv3+kq3CM0lW
sLEizJ8HdKyDprmMSfdNhk+WO/I41dc05Z7pqGz+r1wiIiFOVR5exzgYfHLP2TDZ
0bXilPqeh7kLfx2oMZ8sr9+cATw/MtkZDBJYEC0g9JFZSS+bb0Ifeiv6SvTmbh5W
m1Yp+dj9zmdvZMAC2YsyQBWREhFwuxQyLIm4upIdKxm55ucRrg==
-----END CERTIFICATE-----