Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933303a3a2f32392d3438203d3e203237373137.roa
File:                     323830303a3933303a3a2f32392d3438203d3e203237373137.roa (raw, json)
Hash identifier:          4avxbyOHgv98W75cE/a/nWiI+dI+nQVDDJKEIAM9eC0=
Subject key identifier:   07:1D:A6:7C:C4:44:CC:40:AE:BA:5F:CC:05:1F:20:8C:FC:6D:67:6C
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       0614457D770DC918CB22EB82A024C0D31F931B88
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933303a3a2f32392d3438203d3e203237373137.roa
Signing time:             Mon 01 Jul 2024 17:20:00 +0000
ROA not before:           Mon 01 Jul 2024 17:15:00 +0000
ROA not after:            Mon 30 Jun 2025 17:20:00 +0000
asID:                     27717
IP address blocks:        2800:930::/29 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:14:45:7d:77:0d:c9:18:cb:22:eb:82:a0:24:c0:d3:1f:93:1b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Jul  1 17:15:00 2024 GMT
            Not After : Jun 30 17:20:00 2025 GMT
        Subject: CN=071DA67CC444CC40AEBA5FCC051F208CFC6D676C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:9b:8d:75:41:ce:15:4d:f4:ca:ce:7d:35:
                    ca:99:f5:36:80:4e:ec:67:dd:3e:45:da:6f:96:7b:
                    72:87:c2:34:2b:10:85:20:85:c6:12:69:2c:2f:bf:
                    44:63:7f:e3:23:6b:64:ee:e3:fa:20:57:a9:2e:a4:
                    9c:a2:9e:61:4f:84:5c:37:4f:67:b1:63:7c:03:0b:
                    e3:66:02:8f:ec:32:a1:64:02:41:e4:72:7e:d3:a2:
                    c2:cd:05:d4:8f:a5:4b:d0:3a:e6:fc:d3:99:b4:b4:
                    e8:fd:20:40:91:eb:60:f9:88:a4:cd:59:1e:a4:3e:
                    67:21:da:13:23:cd:e0:21:f7:fa:ec:85:ba:a1:1e:
                    a0:63:a0:37:6e:bb:52:50:94:95:a3:ed:86:4b:74:
                    71:54:09:38:64:10:c3:f0:25:e9:5e:fa:7f:1c:3e:
                    93:af:a2:c0:ca:b7:a3:48:e4:99:37:0f:2a:39:25:
                    db:ff:a2:2b:eb:cc:4c:e4:05:da:ca:45:7a:cc:45:
                    f9:ae:3f:dc:f0:d7:b9:f5:40:c6:77:dd:ff:27:3b:
                    f1:97:b2:c2:a6:14:e6:7e:2b:af:2f:a4:1f:5a:94:
                    ad:df:2c:a6:0a:a7:2f:8d:29:e6:f0:a8:7e:ef:49:
                    0a:0a:fd:42:1e:df:ee:f1:a8:db:6c:82:42:d9:89:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1D:A6:7C:C4:44:CC:40:AE:BA:5F:CC:05:1F:20:8C:FC:6D:67:6C
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/323830303a3933303a3a2f32392d3438203d3e203237373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:930::/29

    Signature Algorithm: sha256WithRSAEncryption
         76:39:24:fc:3e:2c:fa:a9:ff:18:6b:c7:d7:8c:01:be:5e:dd:
         ff:f5:46:47:0d:03:86:f3:d3:f3:16:88:bb:c7:3c:ec:ca:f3:
         76:26:d6:1a:99:8d:13:09:85:85:22:e5:d8:26:73:62:75:1f:
         63:07:c5:4c:3e:8e:b5:3c:95:e7:28:a3:01:c5:a0:0c:95:ca:
         dc:4f:7d:05:f0:64:ce:50:1c:44:6f:ed:f6:33:14:f0:30:00:
         b8:e5:97:1e:00:40:c6:e1:2e:95:ea:5b:5c:66:69:89:3c:86:
         90:e9:d8:4b:0f:e5:e9:50:78:4f:86:a9:1a:58:fd:bc:e0:6d:
         16:ed:e4:d5:83:2f:a8:a6:12:9f:34:bd:d5:f4:3d:9a:2a:b7:
         a1:7f:a8:26:1f:f8:51:6c:1b:69:08:0e:21:74:40:63:53:ec:
         07:23:70:2c:99:da:d6:d8:bb:99:cb:07:76:b5:b0:cd:c8:7e:
         bf:9e:31:19:04:f7:2b:90:72:28:a1:39:10:0b:2a:cb:6f:cd:
         0b:65:c2:af:c5:10:7f:87:db:4d:60:96:93:fd:de:c2:10:d8:
         c5:79:de:c2:79:f2:5d:bb:75:82:79:76:4c:20:38:63:c3:4c:
         57:4c:46:c0:ec:fe:23:b3:a2:24:ce:a5:1f:5b:0b:c3:4c:00:
         4e:40:fb:c0
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUBhRFfXcNyRjLIuuCoCTA0x+TG4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1MkExNkQzQUM1OTcyNjhFNzgyRjQ5MzAxMDFFOTBE
NjY4QTAxMjAeFw0yNDA3MDExNzE1MDBaFw0yNTA2MzAxNzIwMDBaMDMxMTAvBgNV
BAMTKDA3MURBNjdDQzQ0NENDNDBBRUJBNUZDQzA1MUYyMDhDRkM2RDY3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS+JuNdUHOFU30ys59NcqZ9TaA
Tuxn3T5F2m+We3KHwjQrEIUghcYSaSwvv0Rjf+Mja2Tu4/ogV6kupJyinmFPhFw3
T2exY3wDC+NmAo/sMqFkAkHkcn7TosLNBdSPpUvQOub805m0tOj9IECR62D5iKTN
WR6kPmch2hMjzeAh9/rshbqhHqBjoDduu1JQlJWj7YZLdHFUCThkEMPwJele+n8c
PpOvosDKt6NI5Jk3Dyo5Jdv/oivrzEzkBdrKRXrMRfmuP9zw17n1QMZ33f8nO/GX
ssKmFOZ+K68vpB9alK3fLKYKpy+NKebwqH7vSQoK/UIe3+7xqNtsgkLZiRUhAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUBx2mfMREzECuul/MBR8gjPxtZ2wwHwYDVR0j
BBgwFoAUSVKhbTrFlyaOeC9JMBAekNZooBIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQjYxNTExMEFBMDRFMzQzRjVDOEI1RTJFMjNERjE1MERE
MjlGRjUyNjY2MTAwNUJBM0E4NDkzNkIxOTVERjRBLzAvNDk1MkExNkQzQUM1OTcy
NjhFNzgyRjQ5MzAxMDFFOTBENjY4QTAxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTUyQTE2RDNBQzU5NzI2OEU3
ODJGNDkzMDEwMUU5MEQ2NjhBMDEyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUI2MTUxMTBBQTA0RTM0M0Y1QzhCNUUyRTIzREYxNTBERDI5RkY1MjY2
NjEwMDVCQTNBODQ5MzZCMTk1REY0QS8wLzMyMzgzMDMwM2EzOTMzMzAzYTNhMmYz
MjM5MmQzNDM4MjAzZDNlMjAzMjM3MzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKAAJMDANBgkq
hkiG9w0BAQsFAAOCAQEAdjkk/D4s+qn/GGvH14wBvl7d//VGRw0DhvPT8xaIu8c8
7MrzdibWGpmNEwmFhSLl2CZzYnUfYwfFTD6OtTyV5yijAcWgDJXK3E99BfBkzlAc
RG/t9jMU8DAAuOWXHgBAxuEulepbXGZpiTyGkOnYSw/l6VB4T4apGlj9vOBtFu3k
1YMvqKYSnzS91fQ9miq3oX+oJh/4UWwbaQgOIXRAY1PsByNwLJna1ti7mcsHdrWw
zch+v54xGQT3K5ByKKE5EAsqy2/NC2XCr8UQf4fbTWCWk/3ewhDYxXnewnnyXbt1
gnl2TCA4Y8NMV0xGwOz+I7OiJM6lH1sLw0wATkD7wA==
-----END CERTIFICATE-----