Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/323830333a666430303a3a2f33322d3332203d3e2038313633.roa
File:                     323830333a666430303a3a2f33322d3332203d3e2038313633.roa (raw, json)
Hash identifier:          wMC6TcYNLaT4vKKiTeZDEoqV/kgx/ulHSJXJzaJ09zU=
Subject key identifier:   11:D3:10:85:16:CD:F1:70:A6:8C:82:38:2A:F5:1A:A3:D4:C5:5A:11
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       010BCE077440CA861547725F4C9472F2A1AEC59B
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/323830333a666430303a3a2f33322d3332203d3e2038313633.roa
Signing time:             Tue 05 Mar 2024 17:43:02 +0000
ROA not before:           Tue 05 Mar 2024 17:38:02 +0000
ROA not after:            Tue 04 Mar 2025 17:43:02 +0000
asID:                     8163
IP address blocks:        2803:fd00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:ce:07:74:40:ca:86:15:47:72:5f:4c:94:72:f2:a1:ae:c5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Mar  5 17:38:02 2024 GMT
            Not After : Mar  4 17:43:02 2025 GMT
        Subject: CN=11D3108516CDF170A68C82382AF51AA3D4C55A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:83:23:06:73:a7:dc:b1:53:1a:a9:b4:0b:
                    8a:5d:4a:e9:74:e7:73:5b:1c:7b:19:56:50:c8:e7:
                    50:57:7a:20:7a:e7:6c:76:90:b5:50:d0:ce:3e:c5:
                    17:a7:f8:e3:d3:fb:84:54:9a:d3:fa:97:56:37:26:
                    11:9b:5e:73:36:78:3f:b2:db:6d:0a:1d:d3:33:b8:
                    60:46:ac:80:2f:7b:20:2a:be:41:d8:99:16:f3:81:
                    3d:0b:af:da:f0:30:03:01:3c:af:2b:0f:c3:4f:07:
                    84:f0:33:60:7c:05:ac:7c:16:88:87:1d:88:48:4f:
                    fb:81:13:c9:54:1c:c4:7c:87:72:a4:2b:5c:a3:2c:
                    5c:90:e9:92:be:59:5b:62:e3:6e:2a:06:f9:66:b3:
                    af:cf:15:83:a1:ce:be:dc:8e:02:66:d8:6d:dd:56:
                    1f:a0:e8:51:80:3d:a1:cc:be:58:dd:7b:56:2d:e9:
                    8e:b4:45:4c:76:f9:1f:c8:12:da:ad:74:e1:4e:d4:
                    e9:b8:60:e5:20:7f:ee:a1:6c:f2:2f:fd:55:01:fa:
                    66:f9:98:19:18:af:2f:f3:3c:5c:10:f0:64:84:76:
                    8a:80:4e:d5:19:61:a5:b9:7a:94:61:ec:87:8e:83:
                    c2:31:dd:e7:a9:78:40:a1:24:e8:4d:57:a0:2b:f4:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D3:10:85:16:CD:F1:70:A6:8C:82:38:2A:F5:1A:A3:D4:C5:5A:11
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/323830333a666430303a3a2f33322d3332203d3e2038313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:64:a6:e8:bb:50:7d:71:a9:56:64:31:56:c3:f0:32:f0:
         bf:c6:c1:00:d9:b0:e3:b8:35:d6:fa:61:bd:82:bd:28:2b:5d:
         9a:8d:73:23:58:43:c9:83:f8:e3:ef:e9:68:4e:63:f4:6b:dc:
         83:6b:1b:0f:be:73:52:96:b6:8c:9a:ef:f3:2c:1f:de:04:fd:
         93:3b:9a:c1:cd:06:9f:5d:a2:a0:9c:32:ea:fb:00:7e:c2:b0:
         fb:37:f8:36:84:3f:30:90:8a:c4:99:55:73:40:8f:87:f4:47:
         f8:c2:ba:ca:ef:5b:28:b3:48:0b:55:d3:5a:f2:29:85:16:64:
         a7:6f:82:da:02:15:c9:27:41:9f:87:83:05:7c:be:d9:ba:86:
         da:5b:e0:3c:81:44:3b:7f:ed:1e:f3:00:33:40:a3:e8:c1:e0:
         9b:1e:fa:d4:44:6e:3b:49:0c:9e:ae:4d:0c:72:40:f9:b3:1e:
         84:94:bb:27:83:2c:dd:26:cc:c1:ef:a8:51:a4:be:63:9c:4e:
         38:d9:f5:38:89:8a:23:a2:61:ff:13:70:7f:6b:6a:59:47:33:
         e0:cb:ce:1a:8f:6d:58:5f:86:7a:6a:92:38:43:5d:5e:0e:dd:
         8d:82:73:75:0e:7e:b6:38:13:c1:6e:a9:dd:aa:8b:0b:38:54:
         dd:10:b3:6f
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUAQvOB3RAyoYVR3JfTJRy8qGuxZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcwMjA0NjFFMTA2RkExOTM5QTc5NTVGMTlFMUY4RUQ4
MkFFODU4OTAeFw0yNDAzMDUxNzM4MDJaFw0yNTAzMDQxNzQzMDJaMDMxMTAvBgNV
BAMTKDExRDMxMDg1MTZDREYxNzBBNjhDODIzODJBRjUxQUEzRDRDNTVBMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyd4MjBnOn3LFTGqm0C4pdSul0
53NbHHsZVlDI51BXeiB652x2kLVQ0M4+xRen+OPT+4RUmtP6l1Y3JhGbXnM2eD+y
220KHdMzuGBGrIAveyAqvkHYmRbzgT0Lr9rwMAMBPK8rD8NPB4TwM2B8Bax8FoiH
HYhIT/uBE8lUHMR8h3KkK1yjLFyQ6ZK+WVti424qBvlms6/PFYOhzr7cjgJm2G3d
Vh+g6FGAPaHMvljde1Yt6Y60RUx2+R/IEtqtdOFO1Om4YOUgf+6hbPIv/VUB+mb5
mBkYry/zPFwQ8GSEdoqATtUZYaW5epRh7IeOg8Ix3eepeEChJOhNV6Ar9LnpAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUEdMQhRbN8XCmjII4KvUao9TFWhEwHwYDVR0j
BBgwFoAUJwIEYeEG+hk5p5VfGeH47YKuhYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNDNBQjQ5OTk1MUIzNkUxNkQ4RTNEMTA0QkZENzdBQkNC
N0NCRTNDOUQ5REU1QTE2ODZCNTA0QzNDNDU3RUQ0LzAvMjcwMjA0NjFFMTA2RkEx
OTM5QTc5NTVGMTlFMUY4RUQ4MkFFODU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzAyMDQ2MUUxMDZGQTE5MzlB
Nzk1NUYxOUUxRjhFRDgyQUU4NTg5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDQzQUI0OTk5NTFCMzZFMTZEOEUzRDEwNEJGRDc3QUJDQjdDQkUzQzlE
OURFNUExNjg2QjUwNEMzQzQ1N0VENC8wLzMyMzgzMDMzM2E2NjY0MzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM4MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP9ADANBgkq
hkiG9w0BAQsFAAOCAQEAPYRkpui7UH1xqVZkMVbD8DLwv8bBANmw47g11vphvYK9
KCtdmo1zI1hDyYP44+/paE5j9Gvcg2sbD75zUpa2jJrv8ywf3gT9kzuawc0Gn12i
oJwy6vsAfsKw+zf4NoQ/MJCKxJlVc0CPh/RH+MK6yu9bKLNIC1XTWvIphRZkp2+C
2gIVySdBn4eDBXy+2bqG2lvgPIFEO3/tHvMAM0Cj6MHgmx761ERuO0kMnq5NDHJA
+bMehJS7J4Ms3SbMwe+oUaS+Y5xOONn1OImKI6Jh/xNwf2tqWUcz4MvOGo9tWF+G
emqSOENdXg7djYJzdQ5+tjgTwW6p3aqLCzhU3RCzbw==
-----END CERTIFICATE-----