Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/323830313a31633a373830303a3a2f34382d3438203d3e203130323939.roa
File:                     323830313a31633a373830303a3a2f34382d3438203d3e203130323939.roa (raw, json)
Hash identifier:          3UJy3xJG96B9wFdpCcXZGrNXe27plYsvXb4rH7Mbrgg=
Subject key identifier:   82:A8:1F:59:AF:D5:1C:21:EC:5E:30:14:88:D3:A4:05:DF:10:3F:68
Certificate issuer:       /CN=242C1430601FCC8B8B1006AA2B46A28528735333
Certificate serial:       7191907D0830D80265EDAFF7B0A29C1B3891C5E6
Authority key identifier: 24:2C:14:30:60:1F:CC:8B:8B:10:06:AA:2B:46:A2:85:28:73:53:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242C1430601FCC8B8B1006AA2B46A28528735333.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/323830313a31633a373830303a3a2f34382d3438203d3e203130323939.roa
Signing time:             Fri 24 May 2024 20:15:00 +0000
ROA not before:           Fri 24 May 2024 20:10:00 +0000
ROA not after:            Fri 23 May 2025 20:15:00 +0000
asID:                     10299
IP address blocks:        2801:1c:7800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:91:90:7d:08:30:d8:02:65:ed:af:f7:b0:a2:9c:1b:38:91:c5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=242C1430601FCC8B8B1006AA2B46A28528735333
        Validity
            Not Before: May 24 20:10:00 2024 GMT
            Not After : May 23 20:15:00 2025 GMT
        Subject: CN=82A81F59AFD51C21EC5E301488D3A405DF103F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2b:31:db:50:b4:23:ab:df:9a:e0:61:e1:68:
                    2a:74:50:fe:c2:af:bb:2a:9c:63:17:0f:88:6b:b7:
                    68:61:75:55:7c:f1:20:a3:7c:a7:e3:87:22:20:88:
                    e2:4d:7e:99:58:ba:6f:f4:38:f0:f9:f9:b1:7c:04:
                    e4:a4:51:5e:71:f3:62:f9:b4:55:3e:5d:ba:65:97:
                    cb:d1:d0:cc:e7:e7:8c:22:bd:94:9f:e1:32:1c:1c:
                    aa:7f:d2:12:5b:97:ec:a6:5a:e3:41:8a:34:57:d2:
                    83:f3:3b:d7:87:4c:4b:c5:4d:a9:84:0b:3e:31:a9:
                    08:f9:6d:6e:ce:c3:e0:f9:0c:00:91:6d:32:e0:5d:
                    f9:61:a0:70:af:44:46:44:dd:73:91:35:95:e0:3f:
                    f1:b6:86:11:16:53:e8:47:38:c3:09:e2:fa:2c:38:
                    28:0f:28:bb:65:6c:f6:e6:c4:43:12:ea:73:ce:af:
                    5a:56:b7:a1:41:31:89:67:2b:8c:03:93:ac:01:21:
                    dd:8e:04:d7:87:81:a1:41:79:35:4c:94:bb:aa:54:
                    39:0e:3c:dd:c3:d1:31:78:f3:2d:af:93:6d:6e:a6:
                    b9:73:20:ba:25:1b:58:39:af:dc:c8:dd:6b:0c:f7:
                    fb:5a:b4:f1:ed:53:3f:e1:47:6f:33:18:e5:a0:ba:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A8:1F:59:AF:D5:1C:21:EC:5E:30:14:88:D3:A4:05:DF:10:3F:68
            X509v3 Authority Key Identifier:
                keyid:24:2C:14:30:60:1F:CC:8B:8B:10:06:AA:2B:46:A2:85:28:73:53:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/242C1430601FCC8B8B1006AA2B46A28528735333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242C1430601FCC8B8B1006AA2B46A28528735333.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93851F55E4B727C2750D771BACB7FFF55ED8FBD97320C49F3B2493D4BB47F79C/0/323830313a31633a373830303a3a2f34382d3438203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:45:8c:97:43:f3:10:a1:89:bd:5b:11:4f:79:92:9b:59:9a:
         77:50:9c:e1:b1:26:e3:80:57:3a:7d:81:af:23:99:b7:0f:cf:
         cd:6f:cd:42:d0:fb:3c:21:fd:3b:73:3a:3f:82:27:01:85:99:
         c5:21:eb:a1:d0:3e:a9:0c:33:56:a3:a8:19:d6:d3:9b:e6:9c:
         8c:79:32:0e:f4:04:75:30:b0:0d:ba:b6:45:45:6e:12:8f:c2:
         18:ab:28:1c:87:ce:40:57:e9:47:14:7a:b1:d5:2b:f3:a9:1c:
         9b:1f:2d:ff:96:76:8d:d4:8e:cd:32:d3:3c:8d:a9:63:3f:d5:
         50:c0:83:33:d7:11:4c:38:fb:07:91:d3:79:8a:cb:8a:3f:29:
         fa:b7:5f:86:51:94:fe:16:25:10:b0:24:e5:04:3c:6f:42:44:
         a8:4c:34:95:be:ec:00:bd:8d:c0:73:af:b6:e3:4e:09:54:4b:
         d4:0d:2a:dc:c2:10:02:9a:fc:f8:61:06:5e:91:d3:e5:6c:b1:
         37:df:20:88:63:43:07:c8:8a:3e:8b:bb:83:92:62:a5:78:5c:
         55:ea:33:e6:89:cf:a3:38:5a:c5:bf:c1:ce:c1:ad:e5:c6:01:
         f6:3b:db:24:a8:f9:0d:c1:7a:34:fd:87:23:5e:b3:b6:6a:d2:
         61:08:d2:27
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUcZGQfQgw2AJl7a/3sKKcGziRxeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQyQzE0MzA2MDFGQ0M4QjhCMTAwNkFBMkI0NkEyODUy
ODczNTMzMzAeFw0yNDA1MjQyMDEwMDBaFw0yNTA1MjMyMDE1MDBaMDMxMTAvBgNV
BAMTKDgyQTgxRjU5QUZENTFDMjFFQzVFMzAxNDg4RDNBNDA1REYxMDNGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUKzHbULQjq9+a4GHhaCp0UP7C
r7sqnGMXD4hrt2hhdVV88SCjfKfjhyIgiOJNfplYum/0OPD5+bF8BOSkUV5x82L5
tFU+Xbpll8vR0Mzn54wivZSf4TIcHKp/0hJbl+ymWuNBijRX0oPzO9eHTEvFTamE
Cz4xqQj5bW7Ow+D5DACRbTLgXflhoHCvREZE3XORNZXgP/G2hhEWU+hHOMMJ4vos
OCgPKLtlbPbmxEMS6nPOr1pWt6FBMYlnK4wDk6wBId2OBNeHgaFBeTVMlLuqVDkO
PN3D0TF48y2vk21uprlzILolG1g5r9zI3WsM9/tatPHtUz/hR28zGOWgumBdAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUgqgfWa/VHCHsXjAUiNOkBd8QP2gwHwYDVR0j
BBgwFoAUJCwUMGAfzIuLEAaqK0aihShzUzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Mzg1MUY1NUU0QjcyN0MyNzUwRDc3MUJBQ0I3RkZGNTVF
RDhGQkQ5NzMyMEM0OUYzQjI0OTNENEJCNDdGNzlDLzAvMjQyQzE0MzA2MDFGQ0M4
QjhCMTAwNkFBMkI0NkEyODUyODczNTMzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDJDMTQzMDYwMUZDQzhCOEIx
MDA2QUEyQjQ2QTI4NTI4NzM1MzMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTM4NTFGNTVFNEI3MjdDMjc1MEQ3NzFCQUNCN0ZGRjU1RUQ4RkJEOTcz
MjBDNDlGM0IyNDkzRDRCQjQ3Rjc5Qy8wLzMyMzgzMDMxM2EzMTYzM2EzNzM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzAzMjM5Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAceAAwDQYJKoZIhvcNAQELBQADggEBACVFjJdD8xChib1bEU95kptZmndQnOGx
JuOAVzp9ga8jmbcPz81vzULQ+zwh/TtzOj+CJwGFmcUh66HQPqkMM1ajqBnW05vm
nIx5Mg70BHUwsA26tkVFbhKPwhirKByHzkBX6UcUerHVK/OpHJsfLf+Wdo3Ujs0y
0zyNqWM/1VDAgzPXEUw4+weR03mKy4o/Kfq3X4ZRlP4WJRCwJOUEPG9CRKhMNJW+
7AC9jcBzr7bjTglUS9QNKtzCEAKa/PhhBl6R0+VssTffIIhjQwfIij6Lu4OSYqV4
XFXqM+aJz6M4WsW/wc7BreXGAfY72ySo+Q3BejT9hyNes7Zq0mEI0ic=
-----END CERTIFICATE-----