Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e203131383330.roa
File:                     323830303a643330303a3a2f32392d3438203d3e203131383330.roa (raw, json)
Hash identifier:          yRjIfDcfotOmb9Qbiy5QtAxEvyJdHV0F6VmKzh2HH9A=
Subject key identifier:   BC:D8:86:11:56:3C:90:3D:48:78:C6:60:86:E7:F2:29:53:1D:C7:78
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       02FBEC1DEC02472BD64323D79A509B4EE4384974
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:36:36 +0000
ROA not before:           Tue 04 Feb 2025 18:31:36 +0000
ROA not after:            Tue 03 Feb 2026 18:36:36 +0000
asID:                     11830
IP address blocks:        2800:d300::/29 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fb:ec:1d:ec:02:47:2b:d6:43:23:d7:9a:50:9b:4e:e4:38:49:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:36 2025 GMT
            Not After : Feb  3 18:36:36 2026 GMT
        Subject: CN=BCD88611563C903D4878C66086E7F229531DC778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:b7:90:27:9b:47:56:fb:ac:ac:3b:b6:e2:
                    2d:20:4c:c8:3a:59:c6:23:7d:b4:cd:39:af:e6:c9:
                    12:28:1f:fc:07:41:4e:e2:9c:05:91:fd:38:8e:93:
                    b0:4b:4a:3d:18:69:6c:dc:c7:3f:22:b8:31:87:c7:
                    0b:38:e0:75:af:6e:18:30:e2:1d:0f:72:76:8e:a6:
                    95:b0:30:29:57:65:0c:fb:a3:22:3f:2b:a7:77:86:
                    5f:36:b9:c8:82:7a:3a:54:6f:52:2d:f7:21:cc:23:
                    58:f7:f7:a9:c2:f5:b2:3d:a5:4d:10:99:94:5a:f9:
                    b6:8f:aa:99:6d:3c:56:48:18:9a:17:64:e6:20:ab:
                    0d:e6:0b:2e:b1:0d:3e:6d:67:af:d3:f8:8a:90:77:
                    f4:11:19:eb:8b:93:4e:06:18:78:e5:a8:a3:fe:e7:
                    7d:e6:01:a0:31:2a:f7:57:73:e1:fd:fb:f0:26:2c:
                    d8:d9:b5:2c:54:0a:d7:ad:c4:aa:04:fe:ca:d8:7f:
                    c7:ee:61:45:55:d3:50:5d:cb:74:61:da:08:6c:6a:
                    8a:e2:52:98:44:ba:f4:af:13:67:88:84:10:6b:21:
                    3c:c7:a0:db:a2:04:fd:40:5e:c7:68:23:e0:97:d1:
                    3a:7d:a2:27:c7:bc:aa:b4:a8:e0:17:3c:c6:36:9a:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D8:86:11:56:3C:90:3D:48:78:C6:60:86:E7:F2:29:53:1D:C7:78
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d300::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:51:ae:7b:7c:52:5c:03:f8:d0:58:b3:3b:75:15:80:27:4b:
         db:01:31:da:9c:b3:cb:5c:dc:69:af:f0:2e:49:6b:45:29:45:
         d6:3b:52:40:2e:24:28:4a:50:da:6a:a5:e8:e3:76:ee:c9:59:
         77:2e:4d:62:60:8c:be:1e:b7:bd:1a:54:02:ef:98:7b:2c:30:
         08:67:c1:5e:7c:c4:65:aa:2e:43:a7:5e:ed:5d:c7:8f:49:13:
         bf:ef:bf:c0:ad:0a:37:ea:4f:d9:c3:9c:06:08:64:3d:a0:88:
         2f:2a:a4:d6:92:e0:f7:18:5f:e3:ac:28:f0:ce:30:4e:ee:50:
         b8:7a:b8:08:4d:33:fe:4b:bb:8c:1b:92:07:8a:0f:14:01:94:
         5f:ff:2e:76:fc:94:a1:50:65:17:9a:b1:44:9d:fb:20:8a:33:
         9b:7a:9a:c3:7f:55:a2:fd:88:3c:18:64:d1:99:90:94:87:97:
         b0:bc:3d:d4:a7:62:7c:9d:88:38:7b:57:6b:05:76:40:71:9a:
         37:d2:83:b1:15:11:a8:c3:01:a5:6b:66:97:c5:93:fc:c9:7d:
         b4:b0:54:41:86:98:f4:d5:e4:63:48:99:a3:14:d3:56:ba:f5:
         55:80:70:94:a6:c6:2a:f4:3b:34:f9:1f:4f:6b:2d:83:6c:77:
         51:04:f2:b6
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUAvvsHewCRyvWQyPXmlCbTuQ4SXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNTAyMDQxODMxMzZaFw0yNjAyMDMxODM2MzZaMDMxMTAvBgNV
BAMTKEJDRDg4NjExNTYzQzkwM0Q0ODc4QzY2MDg2RTdGMjI5NTMxREM3NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1reQJ5tHVvusrDu24i0gTMg6
WcYjfbTNOa/myRIoH/wHQU7inAWR/TiOk7BLSj0YaWzcxz8iuDGHxws44HWvbhgw
4h0PcnaOppWwMClXZQz7oyI/K6d3hl82uciCejpUb1It9yHMI1j396nC9bI9pU0Q
mZRa+baPqpltPFZIGJoXZOYgqw3mCy6xDT5tZ6/T+IqQd/QRGeuLk04GGHjlqKP+
533mAaAxKvdXc+H9+/AmLNjZtSxUCtetxKoE/srYf8fuYUVV01Bdy3Rh2ghsaori
UphEuvSvE2eIhBBrITzHoNuiBP1AXsdoI+CX0Tp9oifHvKq0qOAXPMY2mgVxAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUvNiGEVY8kD1IeMZghufyKVMdx3gwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzgzMDMwM2E2NDMzMzAzMDNhM2Ey
ZjMyMzkyZDM0MzgyMDNkM2UyMDMxMzEzODMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMoANMAMA0G
CSqGSIb3DQEBCwUAA4IBAQCOUa57fFJcA/jQWLM7dRWAJ0vbATHanLPLXNxpr/Au
SWtFKUXWO1JALiQoSlDaaqXo43buyVl3Lk1iYIy+Hre9GlQC75h7LDAIZ8FefMRl
qi5Dp17tXcePSRO/77/ArQo36k/Zw5wGCGQ9oIgvKqTWkuD3GF/jrCjwzjBO7lC4
ergITTP+S7uMG5IHig8UAZRf/y52/JShUGUXmrFEnfsgijObeprDf1Wi/Yg8GGTR
mZCUh5ewvD3Up2J8nYg4e1drBXZAcZo30oOxFRGowwGla2aXxZP8yX20sFRBhpj0
1eRjSJmjFNNWuvVVgHCUpsYq9Ds0+R9Pay2DbHdRBPK2
-----END CERTIFICATE-----