Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3434203d3e20323639393337.roa
File:                     323830313a3136613a3a2f34342d3434203d3e20323639393337.roa (raw, json)
Hash identifier:          xOD8G7VPVZoFtIYfWwaDYBsxYTo2+8EA14gjA6adDjk=
Subject key identifier:   E8:D4:F9:CC:B5:B4:D6:52:2A:9D:0D:47:27:B8:62:77:ED:65:01:3E
Certificate issuer:       /CN=0E0ABB0790B81B6265D0B9EBD17135E99E976D76
Certificate serial:       7797B7BD5AF3B34E56206256DCA866483279D223
Authority key identifier: 0E:0A:BB:07:90:B8:1B:62:65:D0:B9:EB:D1:71:35:E9:9E:97:6D:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3434203d3e20323639393337.roa
Signing time:             Mon 17 Feb 2025 13:20:00 +0000
ROA not before:           Mon 17 Feb 2025 13:15:00 +0000
ROA not after:            Mon 16 Feb 2026 13:20:00 +0000
asID:                     269937
IP address blocks:        2801:16a::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:97:b7:bd:5a:f3:b3:4e:56:20:62:56:dc:a8:66:48:32:79:d2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0ABB0790B81B6265D0B9EBD17135E99E976D76
        Validity
            Not Before: Feb 17 13:15:00 2025 GMT
            Not After : Feb 16 13:20:00 2026 GMT
        Subject: CN=E8D4F9CCB5B4D6522A9D0D4727B86277ED65013E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:88:20:e1:2a:7f:b7:7b:32:5f:42:94:69:
                    0c:aa:a5:7f:ed:02:0e:d5:d2:c6:1b:66:b4:96:5a:
                    2b:16:d6:9d:5f:12:9e:9f:56:0d:c1:5d:87:a4:40:
                    40:48:41:2a:a8:5d:81:76:9a:51:3b:cc:9c:c9:d6:
                    91:29:0e:98:05:bc:9f:ab:c8:78:ff:bc:43:17:f5:
                    b1:ce:5e:84:5a:0b:d3:90:dd:96:a2:ef:13:d8:f7:
                    44:7d:a3:00:6c:7d:06:1b:fa:be:0d:70:33:f0:51:
                    74:56:85:43:c5:11:4e:62:17:a6:fa:f7:62:97:bb:
                    21:5a:5f:a0:07:b0:02:ac:59:24:d2:13:73:1f:22:
                    f1:06:77:f5:cb:9e:b5:2d:e4:0c:ed:0c:a8:9a:4c:
                    c5:29:b7:01:ce:7a:75:71:6f:4f:82:33:79:95:6e:
                    64:22:62:6c:d0:9a:72:dc:b7:2d:f6:d7:cd:cd:0d:
                    92:d1:0e:1a:fc:da:bb:78:2c:82:be:6b:7b:32:fb:
                    73:79:b9:bc:0b:90:a4:6e:f5:f2:11:af:d9:41:0e:
                    df:6b:35:ad:bd:50:00:13:56:1b:ed:8e:6b:87:8c:
                    38:e4:59:9b:0c:7c:e2:69:25:7f:6d:dd:e7:6a:a9:
                    4c:0a:5b:cf:18:79:94:9a:0f:81:5a:ae:56:0b:a1:
                    a1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D4:F9:CC:B5:B4:D6:52:2A:9D:0D:47:27:B8:62:77:ED:65:01:3E
            X509v3 Authority Key Identifier:
                keyid:0E:0A:BB:07:90:B8:1B:62:65:D0:B9:EB:D1:71:35:E9:9E:97:6D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0ABB0790B81B6265D0B9EBD17135E99E976D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D5DB8767225181B40B870882A2504ACA660D95952CD9190C6FECDB7902F9C47/0/323830313a3136613a3a2f34342d3434203d3e20323639393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16a::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:bb:6d:cb:33:22:49:f0:34:28:a3:ab:c0:53:95:8d:df:
         b4:3d:17:8d:b1:84:71:05:a4:7e:b3:eb:1b:f8:f8:77:e8:7c:
         35:3a:d5:79:8f:ed:94:56:74:ed:30:1f:2e:85:a9:7f:36:12:
         76:ca:eb:83:31:ec:49:c5:ac:67:98:8c:04:72:d0:cb:9c:5d:
         f4:be:e4:c8:fa:a4:43:c7:e3:e4:2c:b3:38:8d:22:ed:f5:72:
         da:94:06:f6:17:ad:0d:39:b0:16:28:0b:ab:35:e0:c4:84:96:
         24:92:83:5a:1c:fc:bd:63:b0:aa:29:63:ff:9f:55:10:66:ec:
         71:18:75:aa:a7:0c:90:1c:87:48:6e:f4:a2:32:31:f9:28:5b:
         a1:82:fd:cc:dc:16:6c:80:06:6d:0c:a4:1d:96:2f:08:44:01:
         5c:9c:fa:37:f5:13:35:9d:db:3a:e1:3f:1a:2f:f9:a2:35:ff:
         7c:1b:5a:59:1b:ad:34:15:7b:e2:3f:b7:99:34:5e:31:30:67:
         d3:cf:93:21:94:51:ff:4e:bc:32:35:74:00:44:82:86:fb:37:
         98:02:00:24:16:b7:4f:a7:a5:e8:bf:5a:02:92:18:c1:99:53:
         d4:3c:c9:ba:e6:82:45:87:c5:80:a1:a4:d9:6c:b9:bc:e4:81:
         6b:6a:9d:2a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUd5e3vVrzs05WIGJW3KhmSDJ50iMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUwQUJCMDc5MEI4MUI2MjY1RDBCOUVCRDE3MTM1RTk5
RTk3NkQ3NjAeFw0yNTAyMTcxMzE1MDBaFw0yNjAyMTYxMzIwMDBaMDMxMTAvBgNV
BAMTKEU4RDRGOUNDQjVCNEQ2NTIyQTlEMEQ0NzI3Qjg2Mjc3RUQ2NTAxM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqR4gg4Sp/t3syX0KUaQyqpX/t
Ag7V0sYbZrSWWisW1p1fEp6fVg3BXYekQEBIQSqoXYF2mlE7zJzJ1pEpDpgFvJ+r
yHj/vEMX9bHOXoRaC9OQ3Zai7xPY90R9owBsfQYb+r4NcDPwUXRWhUPFEU5iF6b6
92KXuyFaX6AHsAKsWSTSE3MfIvEGd/XLnrUt5AztDKiaTMUptwHOenVxb0+CM3mV
bmQiYmzQmnLcty32183NDZLRDhr82rt4LIK+a3sy+3N5ubwLkKRu9fIRr9lBDt9r
Na29UAATVhvtjmuHjDjkWZsMfOJpJX9t3edqqUwKW88YeZSaD4FarlYLoaETAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU6NT5zLW01lIqnQ1HJ7hid+1lAT4wHwYDVR0j
BBgwFoAUDgq7B5C4G2Jl0Lnr0XE16Z6XbXYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RDVEQjg3NjcyMjUxODFCNDBCODcwODgyQTI1MDRBQ0E2
NjBEOTU5NTJDRDkxOTBDNkZFQ0RCNzkwMkY5QzQ3LzAvMEUwQUJCMDc5MEI4MUI2
MjY1RDBCOUVCRDE3MTM1RTk5RTk3NkQ3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTBBQkIwNzkwQjgxQjYyNjVE
MEI5RUJEMTcxMzVFOTlFOTc2RDc2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEQ1REI4NzY3MjI1MTgxQjQwQjg3MDg4MkEyNTA0QUNBNjYwRDk1OTUy
Q0Q5MTkwQzZGRUNEQjc5MDJGOUM0Ny8wLzMyMzgzMDMxM2EzMTM2NjEzYTNhMmYz
NDM0MmQzNDM0MjAzZDNlMjAzMjM2MzkzOTMzMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQFqAAAw
DQYJKoZIhvcNAQELBQADggEBAKvUu23LMyJJ8DQoo6vAU5WN37Q9F42xhHEFpH6z
6xv4+HfofDU61XmP7ZRWdO0wHy6FqX82EnbK64Mx7EnFrGeYjARy0MucXfS+5Mj6
pEPH4+QssziNIu31ctqUBvYXrQ05sBYoC6s14MSEliSSg1oc/L1jsKopY/+fVRBm
7HEYdaqnDJAch0hu9KIyMfkoW6GC/czcFmyABm0MpB2WLwhEAVyc+jf1EzWd2zrh
Pxov+aI1/3wbWlkbrTQVe+I/t5k0XjEwZ9PPkyGUUf9OvDI1dABEgob7N5gCACQW
t0+npei/WgKSGMGZU9Q8ybrmgkWHxYChpNlsubzkgWtqnSo=
-----END CERTIFICATE-----