Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/323830303a3566303a3a2f33322d3438203d3e203232373234.roa
File:                     323830303a3566303a3a2f33322d3438203d3e203232373234.roa (raw, json)
Hash identifier:          agXNRNtu6y89BEyGLujiDYFJNVRhjMVPwL9SMgE39GI=
Subject key identifier:   C7:F0:DC:7A:CD:ED:87:2C:1A:02:1F:41:76:C9:DB:48:54:6E:A2:3C
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       1E48D034864B79FEEB3E10FAF500D01C672966FA
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/323830303a3566303a3a2f33322d3438203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 20:07:34 +0000
ROA not before:           Tue 04 Feb 2025 20:02:34 +0000
ROA not after:            Tue 03 Feb 2026 20:07:34 +0000
asID:                     22724
IP address blocks:        2800:5f0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:48:d0:34:86:4b:79:fe:eb:3e:10:fa:f5:00:d0:1c:67:29:66:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:34 2025 GMT
            Not After : Feb  3 20:07:34 2026 GMT
        Subject: CN=C7F0DC7ACDED872C1A021F4176C9DB48546EA23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:80:1e:67:85:e3:02:44:20:13:eb:c2:02:
                    23:e6:c5:e0:b2:84:de:3d:58:34:bb:42:eb:e0:f4:
                    56:50:1e:1c:87:68:c5:1d:cd:fa:02:e2:19:e6:f3:
                    c0:4c:41:9c:29:ee:d4:46:29:e5:9d:cc:9b:2b:99:
                    18:63:8e:a0:3b:4c:4e:fc:dc:12:0a:a0:d1:2d:c8:
                    45:4c:af:9b:e6:d0:24:04:d4:94:98:bb:c8:b5:c1:
                    04:ed:f7:91:4c:b9:58:55:a4:4c:96:8a:0f:a5:76:
                    d5:b4:d1:f0:b3:12:f6:bc:b9:e4:67:09:e7:16:ca:
                    06:38:60:96:b8:f2:c7:eb:bd:de:00:3f:0f:75:64:
                    ff:29:b5:da:4a:4e:92:d4:fc:0d:1a:9e:7d:5d:e4:
                    33:e6:92:b5:a7:bb:8d:40:aa:4e:8e:c8:8b:2c:ad:
                    1e:c4:47:f0:44:34:a3:15:00:00:9b:6d:f4:02:3e:
                    a3:c1:87:7e:ee:af:00:46:2c:dd:15:e8:59:4b:21:
                    22:a4:15:a4:35:4f:f9:fc:98:04:cc:97:ff:c7:59:
                    90:81:56:a5:d1:0d:88:cb:0d:e9:81:a9:9a:a1:39:
                    ec:93:9f:27:67:1a:f6:d8:34:58:d7:b3:83:c8:e9:
                    76:90:3d:dd:e4:cc:f8:08:ab:58:81:0f:99:1b:0b:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:DC:7A:CD:ED:87:2C:1A:02:1F:41:76:C9:DB:48:54:6E:A2:3C
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/323830303a3566303a3a2f33322d3438203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:af:38:b5:a2:a7:53:2e:f7:86:fb:d1:1d:85:8f:21:07:c2:
         99:77:5e:3e:29:db:eb:e8:9a:78:77:78:19:fb:2e:70:ae:e0:
         19:7d:51:27:aa:d4:ef:06:ce:d3:08:a9:13:1e:ca:97:e2:60:
         c3:47:40:bf:4f:7d:d4:b6:a5:5e:36:cd:ba:f3:59:7d:0e:de:
         a7:5b:5b:da:76:99:50:31:a9:44:52:a4:aa:58:80:97:29:bb:
         36:bb:ef:a8:f8:20:25:af:d6:7f:b6:a9:99:05:3f:8c:e6:59:
         fc:36:d3:f0:b3:18:fe:5b:ad:92:df:d3:18:e7:83:57:28:dd:
         2d:bb:c3:36:c6:75:77:26:26:1f:9b:df:6c:9f:7d:66:04:8c:
         6b:b6:21:55:91:f4:aa:f8:c7:09:2d:92:77:07:e6:b7:30:33:
         93:46:ed:ff:84:b2:c1:67:3d:40:a2:88:0c:d3:ba:d7:cb:5e:
         76:08:e3:a4:38:a9:09:1a:16:f8:33:c3:95:fa:f5:a2:12:5f:
         4d:e2:9d:40:63:44:d7:36:5f:21:0b:df:9b:41:96:5f:de:a0:
         60:0f:42:b0:dd:45:c7:13:1c:0e:0d:89:7d:df:67:57:e1:fd:
         5f:8f:dc:ce:ed:11:9f:ca:13:0e:3f:6f:66:50:44:e0:0d:27:
         87:5e:32:ef
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUHkjQNIZLef7rPhD69QDQHGcpZvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzQzVENjE0NjY1MUVDREI5ODVCRkE5REI4MjQ3NDRF
RDQ0OTk0MjAeFw0yNTAyMDQyMDAyMzRaFw0yNjAyMDMyMDA3MzRaMDMxMTAvBgNV
BAMTKEM3RjBEQzdBQ0RFRDg3MkMxQTAyMUY0MTc2QzlEQjQ4NTQ2RUEyM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRIAeZ4XjAkQgE+vCAiPmxeCy
hN49WDS7Quvg9FZQHhyHaMUdzfoC4hnm88BMQZwp7tRGKeWdzJsrmRhjjqA7TE78
3BIKoNEtyEVMr5vm0CQE1JSYu8i1wQTt95FMuVhVpEyWig+ldtW00fCzEva8ueRn
CecWygY4YJa48sfrvd4APw91ZP8ptdpKTpLU/A0ann1d5DPmkrWnu41Aqk6OyIss
rR7ER/BENKMVAACbbfQCPqPBh37urwBGLN0V6FlLISKkFaQ1T/n8mATMl//HWZCB
VqXRDYjLDemBqZqhOeyTnydnGvbYNFjXs4PI6XaQPd3kzPgIq1iBD5kbC+6vAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUx/Dces3thywaAh9BdsnbSFRuojwwHwYDVR0j
BBgwFoAU7zxdYUZlHs25hb+p24JHRO1EmUIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUNBNjE0MEVENzc4MDRBMDRDRjNGOTIzM0JFQTVFMzQ5
NDI3MDE3MUIyRjY5QUNDRkQxN0ExN0I4OUVFRTI2LzAvRUYzQzVENjE0NjY1MUVD
REI5ODVCRkE5REI4MjQ3NDRFRDQ0OTk0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNDNUQ2MTQ2NjUxRUNEQjk4
NUJGQTlEQjgyNDc0NEVENDQ5OTQyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FDQTYxNDBFRDc3ODA0QTA0Q0YzRjkyMzNCRUE1RTM0OTQyNzAxNzFC
MkY2OUFDQ0ZEMTdBMTdCODlFRUUyNi8wLzMyMzgzMDMwM2EzNTY2MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjMyMzczMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAF8DANBgkq
hkiG9w0BAQsFAAOCAQEAJa84taKnUy73hvvRHYWPIQfCmXdePinb6+iaeHd4Gfsu
cK7gGX1RJ6rU7wbO0wipEx7Kl+Jgw0dAv0991LalXjbNuvNZfQ7ep1tb2naZUDGp
RFKkqliAlym7NrvvqPggJa/Wf7apmQU/jOZZ/DbT8LMY/lutkt/TGOeDVyjdLbvD
NsZ1dyYmH5vfbJ99ZgSMa7YhVZH0qvjHCS2SdwfmtzAzk0bt/4SywWc9QKKIDNO6
18tedgjjpDipCRoW+DPDlfr1ohJfTeKdQGNE1zZfIQvfm0GWX96gYA9CsN1FxxMc
Dg2Jfd9nV+H9X4/czu0Rn8oTDj9vZlBE4A0nh14y7w==
-----END CERTIFICATE-----