Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a363a3a2f34382d3438203d3e203230393430.roa
File:                     323830303a3135303a363a3a2f34382d3438203d3e203230393430.roa (raw, json)
Hash identifier:          sOdohXWFl1NZynrDu2aR0lRStGANBuAH8hrn4WFF/Ms=
Subject key identifier:   BC:1E:30:3D:2E:51:14:7D:84:07:B7:06:EC:78:0C:2E:BC:3C:4B:58
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       09B0512A14430DD78B229D8827C20E417131B53B
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a363a3a2f34382d3438203d3e203230393430.roa
Signing time:             Tue 04 Feb 2025 18:19:13 +0000
ROA not before:           Tue 04 Feb 2025 18:14:13 +0000
ROA not after:            Tue 03 Feb 2026 18:19:13 +0000
asID:                     20940
IP address blocks:        2800:150:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b0:51:2a:14:43:0d:d7:8b:22:9d:88:27:c2:0e:41:71:31:b5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Feb  4 18:14:13 2025 GMT
            Not After : Feb  3 18:19:13 2026 GMT
        Subject: CN=BC1E303D2E51147D8407B706EC780C2EBC3C4B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:d0:2b:2f:04:ac:d0:31:ef:87:df:b8:6e:
                    52:bc:73:4e:0c:21:69:08:79:d3:b6:81:84:50:ea:
                    d3:4e:52:3f:37:ab:99:5a:6f:2d:b0:90:47:b0:4e:
                    d3:ba:0c:be:f5:9d:35:da:ca:a9:44:1e:51:88:b9:
                    2f:30:07:f7:96:60:2b:5c:b1:d8:43:cd:13:41:16:
                    4f:17:d8:1e:c2:36:44:ca:19:93:fe:8c:05:a8:f7:
                    9a:79:15:78:39:ae:ca:17:57:9b:67:39:28:bf:da:
                    98:ae:31:97:dc:12:29:19:1c:e7:c7:d9:fd:4f:68:
                    4a:3b:d3:31:37:f9:97:15:32:83:6e:3f:50:01:03:
                    cb:1d:2d:5e:51:80:9e:d0:c0:d0:8c:7d:48:c1:4c:
                    f0:dc:b7:df:23:61:53:d2:f0:04:56:69:01:d4:1a:
                    10:3a:df:d4:bc:2e:51:1e:a2:7f:e6:c9:7e:80:6c:
                    a3:26:59:4b:e7:31:ea:bd:58:e7:f2:b2:5f:86:55:
                    01:9d:a6:3b:ba:bb:75:71:ce:49:69:a2:a2:5c:eb:
                    3b:5a:3e:f7:18:4b:3d:ac:85:37:9f:df:04:78:7d:
                    87:da:c9:5e:af:0a:68:f6:c1:d2:57:75:cd:81:44:
                    50:4d:c1:69:19:9d:f7:93:ce:4a:b8:8f:e6:ec:81:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1E:30:3D:2E:51:14:7D:84:07:B7:06:EC:78:0C:2E:BC:3C:4B:58
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a363a3a2f34382d3438203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:150:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:73:5c:7b:b4:b3:3c:c9:27:5c:f6:70:17:a6:b1:26:d7:b3:
         ae:36:94:13:99:bb:62:9e:c4:9a:b2:0a:07:8c:44:da:92:48:
         f9:5d:05:0e:ab:d5:cf:d6:1a:7d:1b:bb:f4:58:7f:45:b0:42:
         fa:45:34:71:eb:8d:62:a2:b7:d6:0d:02:c2:05:66:ae:32:d4:
         3b:45:d3:7e:30:95:8e:bd:63:e3:83:a9:37:95:df:10:a2:ff:
         22:48:e2:38:78:72:bd:a0:25:1d:41:49:22:95:f2:c5:a5:f0:
         5c:e1:77:d6:07:34:b1:9b:fe:b7:58:4e:1d:ff:5e:61:a1:dc:
         a9:22:b2:27:3c:5b:86:d4:19:b7:05:54:4a:d8:80:bb:66:31:
         67:ae:59:12:b0:76:9a:d7:67:5b:49:d8:10:03:f2:da:13:fc:
         c4:a2:8e:b6:33:d5:96:66:0b:35:cf:40:c1:18:97:b8:ab:77:
         72:50:cf:d1:6c:ea:32:1e:12:da:44:cc:3a:44:e4:18:6f:da:
         e4:e3:5b:dd:68:39:7b:6d:27:63:3a:ad:af:69:18:4b:54:fd:
         dc:f9:75:6f:7e:bb:a0:d0:bf:b0:87:0a:69:82:d0:ca:03:e2:
         e4:59:c7:f8:65:57:7f:e7:fe:21:ed:3a:7d:0c:ab:66:10:82:
         7a:c6:99:93
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUCbBRKhRDDdeLIp2IJ8IOQXExtTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDODVBN0I3MkJCMzg1RTlDQkQxNDRBNTg1ODMxMkUw
Nzk3MDM2RjAeFw0yNTAyMDQxODE0MTNaFw0yNjAyMDMxODE5MTNaMDMxMTAvBgNV
BAMTKEJDMUUzMDNEMkU1MTE0N0Q4NDA3QjcwNkVDNzgwQzJFQkMzQzRCNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3NArLwSs0DHvh9+4blK8c04M
IWkIedO2gYRQ6tNOUj83q5laby2wkEewTtO6DL71nTXayqlEHlGIuS8wB/eWYCtc
sdhDzRNBFk8X2B7CNkTKGZP+jAWo95p5FXg5rsoXV5tnOSi/2piuMZfcEikZHOfH
2f1PaEo70zE3+ZcVMoNuP1ABA8sdLV5RgJ7QwNCMfUjBTPDct98jYVPS8ARWaQHU
GhA639S8LlEeon/myX6AbKMmWUvnMeq9WOfysl+GVQGdpju6u3VxzklpoqJc6zta
PvcYSz2shTef3wR4fYfayV6vCmj2wdJXdc2BRFBNwWkZnfeTzkq4j+bsgbW9AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUvB4wPS5RFH2EB7cG7HgMLrw8S1gwHwYDVR0j
BBgwFoAU9chae3K7OF6cvRRKWFgxLgeXA28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OTQ0MTgzNjVEMzM0MDc0QTU0ODgzNkMxMUMwNjdBMzEy
Rjk5Q0E4NEMzMENDMjkzQUZGQTUyNjI1QjM1ODVELzAvRjVDODVBN0I3MkJCMzg1
RTlDQkQxNDRBNTg1ODMxMkUwNzk3MDM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNUM4NUE3QjcyQkIzODVFOUNC
RDE0NEE1ODU4MzEyRTA3OTcwMzZGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzk0NDE4MzY1RDMzNDA3NEE1NDg4MzZDMTFDMDY3QTMxMkY5OUNBODRD
MzBDQzI5M0FGRkE1MjYyNUIzNTg1RC8wLzMyMzgzMDMwM2EzMTM1MzAzYTM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM5MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgAAVAA
BjANBgkqhkiG9w0BAQsFAAOCAQEAXHNce7SzPMknXPZwF6axJtezrjaUE5m7Yp7E
mrIKB4xE2pJI+V0FDqvVz9YafRu79Fh/RbBC+kU0ceuNYqK31g0CwgVmrjLUO0XT
fjCVjr1j44OpN5XfEKL/IkjiOHhyvaAlHUFJIpXyxaXwXOF31gc0sZv+t1hOHf9e
YaHcqSKyJzxbhtQZtwVUStiAu2YxZ65ZErB2mtdnW0nYEAPy2hP8xKKOtjPVlmYL
Nc9AwRiXuKt3clDP0WzqMh4S2kTMOkTkGG/a5ONb3Wg5e20nYzqtr2kYS1T93Pl1
b367oNC/sIcKaYLQygPi5FnH+GVXf+f+Ie06fQyrZhCCesaZkw==
-----END CERTIFICATE-----