Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20333935313631.roa
File:                     323830303a6261303a3a2f33322d3438203d3e20333935313631.roa (raw, json)
Hash identifier:          bJ1qnuF9XEZV92LWJBy70AhLEZJ3voAufHl3E5VcggI=
Subject key identifier:   FC:A0:17:C7:F6:C8:56:B3:21:3F:7C:5B:56:E5:92:94:8C:9B:A9:34
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       245D7B3C028F172992BBC581AC3CFDC5B057E629
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20333935313631.roa
Signing time:             Tue 04 Feb 2025 18:52:37 +0000
ROA not before:           Tue 04 Feb 2025 18:47:37 +0000
ROA not after:            Tue 03 Feb 2026 18:52:37 +0000
asID:                     395161
IP address blocks:        2800:ba0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5d:7b:3c:02:8f:17:29:92:bb:c5:81:ac:3c:fd:c5:b0:57:e6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Feb  4 18:47:37 2025 GMT
            Not After : Feb  3 18:52:37 2026 GMT
        Subject: CN=FCA017C7F6C856B3213F7C5B56E592948C9BA934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:68:5d:31:4d:4b:97:ad:94:8b:b0:d3:84:
                    06:a6:e6:bf:41:ad:eb:b2:ed:f8:19:ac:29:6c:cd:
                    e8:65:15:ef:ec:fd:8a:f2:19:cd:48:fb:fa:08:c3:
                    07:65:35:62:c2:24:2e:d4:40:e1:ae:d7:ec:d4:f6:
                    50:92:03:9d:4b:85:15:d2:f1:3a:a8:29:fb:e7:77:
                    f8:7b:31:11:bb:61:83:4c:4a:06:55:8e:87:c7:6d:
                    56:47:94:11:92:7b:80:d6:1d:b8:b7:e2:b1:dc:d3:
                    45:61:ea:bf:d8:53:36:57:7f:20:bd:aa:7d:39:f8:
                    27:78:fb:a3:c9:fc:8f:60:df:18:c7:9f:b6:da:c2:
                    0e:ae:68:47:82:c3:d1:a6:0a:b9:8b:1b:e9:d0:3a:
                    1e:1c:a6:39:b3:97:57:13:14:fd:1f:a0:9f:83:3e:
                    c8:9a:17:98:d0:b9:5c:65:90:de:44:38:d0:96:bd:
                    0d:18:17:9c:e3:45:78:a1:e5:05:b7:45:a2:f5:67:
                    91:3e:19:89:ec:ec:87:a9:71:75:e5:8a:b1:0a:23:
                    20:81:93:3c:cc:5c:88:64:94:5c:da:1c:d6:da:b5:
                    bd:04:cf:e1:c7:4f:89:8f:d5:55:23:45:cc:f1:cc:
                    05:b9:f7:dc:8a:4d:90:78:1d:9d:c1:80:05:f0:a7:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A0:17:C7:F6:C8:56:B3:21:3F:7C:5B:56:E5:92:94:8C:9B:A9:34
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:f2:9b:ab:ef:eb:ba:83:49:76:78:8e:5c:86:69:fa:14:
         61:64:ce:29:dd:9a:74:28:11:85:1f:7f:b8:e8:ca:72:8f:94:
         1c:87:3d:28:1d:0f:52:07:ca:3c:d8:d8:ce:f8:54:69:cb:db:
         71:0e:f1:07:de:ba:c0:8f:66:e3:a1:f2:16:c3:00:b5:dd:c9:
         3b:04:cb:7d:9a:7c:d1:30:42:7f:6e:78:23:d3:8e:b1:c7:5c:
         6f:c5:e7:c7:50:76:cc:47:08:18:62:c9:2a:ca:a0:36:73:fc:
         18:07:7b:1f:40:ff:56:0e:2c:4a:fd:6b:18:6a:60:c0:75:be:
         50:f2:bc:37:d8:62:dd:33:bb:d0:3a:6f:0a:26:34:ca:73:55:
         92:00:62:ab:b7:99:9e:14:51:54:2e:5f:2b:eb:f0:6c:a1:fa:
         9e:ca:f5:07:cf:af:ac:da:0f:58:6c:33:76:7d:fe:1b:e3:59:
         30:44:8a:a8:17:cb:60:f7:53:36:54:1d:11:32:22:50:d2:0f:
         53:bd:7c:f7:e5:40:e3:0b:bc:c6:77:ca:7a:f4:21:7f:6c:b8:
         c9:78:c0:81:a4:b1:10:21:cb:ea:93:72:57:0e:b5:f2:a0:da:
         8d:c5:25:20:ab:51:43:f5:a5:3d:d1:a2:39:1c:34:dc:54:93:
         72:68:3a:e2
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUJF17PAKPFymSu8WBrDz9xbBX5ikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwOTdCMUQ5NUJCNTFDOUY1MTNGQzUzNDI5RjMwRUEy
MDdDMTU0OTAeFw0yNTAyMDQxODQ3MzdaFw0yNjAyMDMxODUyMzdaMDMxMTAvBgNV
BAMTKEZDQTAxN0M3RjZDODU2QjMyMTNGN0M1QjU2RTU5Mjk0OEM5QkE5MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3GhdMU1Ll62Ui7DThAam5r9B
reuy7fgZrClszehlFe/s/YryGc1I+/oIwwdlNWLCJC7UQOGu1+zU9lCSA51LhRXS
8TqoKfvnd/h7MRG7YYNMSgZVjofHbVZHlBGSe4DWHbi34rHc00Vh6r/YUzZXfyC9
qn05+Cd4+6PJ/I9g3xjHn7bawg6uaEeCw9GmCrmLG+nQOh4cpjmzl1cTFP0foJ+D
PsiaF5jQuVxlkN5EONCWvQ0YF5zjRXih5QW3RaL1Z5E+GYns7IepcXXlirEKIyCB
kzzMXIhklFzaHNbatb0Ez+HHT4mP1VUjRczxzAW599yKTZB4HZ3BgAXwp7KNAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU/KAXx/bIVrMhP3xbVuWSlIybqTQwHwYDVR0j
BBgwFoAU2wl7HZW7Ucn1E/xTQp8w6iB8FUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjFFOTM3NTYwMUYxMjE4MTA4OTRGMDQ2QjNEM0NFQ0VB
NEVDODE2Q0Q1MzAwOTBBMEU5NzE3QjA5M0VCRjQ3LzAvREIwOTdCMUQ5NUJCNTFD
OUY1MTNGQzUzNDI5RjMwRUEyMDdDMTU0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA5N0IxRDk1QkI1MUM5RjUx
M0ZDNTM0MjlGMzBFQTIwN0MxNTQ5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUIxRTkzNzU2MDFGMTIxODEwODk0RjA0NkIzRDNDRUNFQTRFQzgxNkNE
NTMwMDkwQTBFOTcxN0IwOTNFQkY0Ny8wLzMyMzgzMDMwM2E2MjYxMzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMzM5MzUzMTM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAugMA0G
CSqGSIb3DQEBCwUAA4IBAQAN//Kbq+/ruoNJdniOXIZp+hRhZM4p3Zp0KBGFH3+4
6Mpyj5Qchz0oHQ9SB8o82NjO+FRpy9txDvEH3rrAj2bjofIWwwC13ck7BMt9mnzR
MEJ/bngj046xx1xvxefHUHbMRwgYYskqyqA2c/wYB3sfQP9WDixK/WsYamDAdb5Q
8rw32GLdM7vQOm8KJjTKc1WSAGKrt5meFFFULl8r6/BsofqeyvUHz6+s2g9YbDN2
ff4b41kwRIqoF8tg91M2VB0RMiJQ0g9TvXz35UDjC7zGd8p69CF/bLjJeMCBpLEQ
Icvqk3JXDrXyoNqNxSUgq1FD9aU90aI5HDTcVJNyaDri
-----END CERTIFICATE-----