Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/323830333a323965303a3a2f33322d3332203d3e20323730303133.roa
File:                     323830333a323965303a3a2f33322d3332203d3e20323730303133.roa (raw, json)
Hash identifier:          kaG/SmAx2B9z1V4Az5+whBM3uF5yXXNybUoi3HQQsRk=
Subject key identifier:   F2:CF:07:F9:C2:2C:D1:D5:74:A1:43:10:CA:34:C9:20:7B:B1:93:C4
Certificate issuer:       /CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
Certificate serial:       4AF0F09764BDCC2CF8AA53ADB2721B2ADBE0789B
Authority key identifier: AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/323830333a323965303a3a2f33322d3332203d3e20323730303133.roa
Signing time:             Tue 05 Mar 2024 17:56:34 +0000
ROA not before:           Tue 05 Mar 2024 17:51:34 +0000
ROA not after:            Tue 04 Mar 2025 17:56:34 +0000
asID:                     270013
IP address blocks:        2803:29e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f0:f0:97:64:bd:cc:2c:f8:aa:53:ad:b2:72:1b:2a:db:e0:78:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
        Validity
            Not Before: Mar  5 17:51:34 2024 GMT
            Not After : Mar  4 17:56:34 2025 GMT
        Subject: CN=F2CF07F9C22CD1D574A14310CA34C9207BB193C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b3:69:eb:bb:d2:ce:3b:1d:f7:e1:b5:ae:d2:
                    2a:e2:f3:68:ba:c3:c2:94:35:8f:d5:65:18:18:c1:
                    f6:96:36:7b:e3:19:1c:79:68:31:36:3b:32:71:be:
                    0d:89:b7:b4:6e:8e:cb:49:45:b7:6e:4a:e7:9f:68:
                    96:73:dd:93:34:9b:19:3b:5b:61:00:37:43:2e:8b:
                    6c:2e:86:fc:d6:b8:ac:aa:29:4e:86:ed:58:70:f7:
                    11:54:d9:71:d5:de:cd:f9:28:27:20:03:a5:62:54:
                    5b:41:43:ba:8a:73:b4:a0:76:aa:45:54:f7:c7:e6:
                    95:c8:da:9c:3f:75:66:46:25:55:17:6d:f3:39:36:
                    7f:49:6c:47:46:e7:db:a7:f3:9a:43:d8:a6:54:b9:
                    8c:d9:9d:f7:de:78:90:f5:f6:25:22:d0:57:b7:5c:
                    45:ef:62:0f:31:90:ff:37:e6:31:c0:ff:47:93:b3:
                    57:ea:7b:e5:6c:f6:d0:2a:01:f4:a0:22:1f:a4:d3:
                    b2:cc:ef:77:95:5b:89:9d:ef:99:1b:ba:c6:d9:f9:
                    16:b3:69:eb:a7:c9:19:cd:65:94:4b:40:95:ad:7f:
                    ca:07:89:25:91:cf:2e:ff:dc:8e:28:ca:96:b1:d3:
                    c3:f9:28:ba:5d:a5:a4:b3:1b:89:af:a8:dd:a3:f3:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CF:07:F9:C2:2C:D1:D5:74:A1:43:10:CA:34:C9:20:7B:B1:93:C4
            X509v3 Authority Key Identifier:
                keyid:AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/323830333a323965303a3a2f33322d3332203d3e20323730303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:29e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         e6:dc:54:5f:11:7c:6b:ef:de:78:5a:5f:fd:bb:ed:a7:5b:87:
         c5:19:34:de:d5:f5:8b:46:47:ae:0f:55:80:62:33:6a:66:9d:
         4a:ce:89:ae:43:eb:22:45:15:30:5b:99:70:16:38:57:64:5e:
         cf:77:a9:3d:22:23:b0:f0:83:62:67:15:f9:a3:39:11:27:5c:
         70:5e:fe:f8:e8:eb:e5:cb:fe:c2:de:82:63:93:66:c3:46:84:
         bd:55:c7:37:cf:61:19:31:1f:e6:e5:80:56:c0:1a:db:fa:95:
         0d:5d:22:37:6d:96:60:8c:af:04:fa:90:19:42:2a:61:d0:71:
         b6:cd:de:d6:be:da:1c:2c:51:3d:7c:f6:27:99:51:3f:6e:66:
         6e:81:69:bb:5c:af:9e:8a:b9:c9:c2:8b:af:d6:d2:1e:43:a4:
         35:27:e8:58:7c:81:e0:33:94:5b:05:b3:51:94:8d:fb:db:0e:
         cc:96:77:e4:78:ed:67:91:ed:d9:9f:eb:93:53:11:79:f5:f4:
         75:a3:f8:86:7e:12:66:d9:8e:25:85:1b:47:64:ce:11:52:7b:
         c8:97:be:9d:19:c9:fd:bc:b9:62:43:4a:7a:c7:8d:d2:c5:05:
         28:b4:60:17:50:78:a2:99:71:a1:82:15:3e:35:9c:58:c6:63:
         fd:b5:7f:0f
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUSvDwl2S9zCz4qlOtsnIbKtvgeJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYyMDY3MDNFQjQwM0I5MEMyQzc2NkYxNTU3RTQzQTBG
MEFDM0MxMTAeFw0yNDAzMDUxNzUxMzRaFw0yNTAzMDQxNzU2MzRaMDMxMTAvBgNV
BAMTKEYyQ0YwN0Y5QzIyQ0QxRDU3NEExNDMxMENBMzRDOTIwN0JCMTkzQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIs2nru9LOOx334bWu0iri82i6
w8KUNY/VZRgYwfaWNnvjGRx5aDE2OzJxvg2Jt7RujstJRbduSuefaJZz3ZM0mxk7
W2EAN0Mui2wuhvzWuKyqKU6G7Vhw9xFU2XHV3s35KCcgA6ViVFtBQ7qKc7SgdqpF
VPfH5pXI2pw/dWZGJVUXbfM5Nn9JbEdG59un85pD2KZUuYzZnffeeJD19iUi0Fe3
XEXvYg8xkP835jHA/0eTs1fqe+Vs9tAqAfSgIh+k07LM73eVW4md75kbusbZ+Raz
aeunyRnNZZRLQJWtf8oHiSWRzy7/3I4oypax08P5KLpdpaSzG4mvqN2j85GDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU8s8H+cIs0dV0oUMQyjTJIHuxk8QwHwYDVR0j
BBgwFoAUryBnA+tAO5DCx2bxVX5DoPCsPBEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNkU2NEUxODIzMzUyOEE1RDA2OEMzRjA0OEMwQjE4ODhD
NUNGREFFQjM2NDc0NTdBQTFCMDlGMUQzNTkzODI3LzAvQUYyMDY3MDNFQjQwM0I5
MEMyQzc2NkYxNTU3RTQzQTBGMEFDM0MxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjIwNjcwM0VCNDAzQjkwQzJD
NzY2RjE1NTdFNDNBMEYwQUMzQzExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDZFNjRFMTgyMzM1MjhBNUQwNjhDM0YwNDhDMEIxODg4QzVDRkRBRUIz
NjQ3NDU3QUExQjA5RjFEMzU5MzgyNy8wLzMyMzgzMDMzM2EzMjM5NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDKeAw
DQYJKoZIhvcNAQELBQADggEBAObcVF8RfGvv3nhaX/277adbh8UZNN7V9YtGR64P
VYBiM2pmnUrOia5D6yJFFTBbmXAWOFdkXs93qT0iI7Dwg2JnFfmjOREnXHBe/vjo
6+XL/sLegmOTZsNGhL1VxzfPYRkxH+blgFbAGtv6lQ1dIjdtlmCMrwT6kBlCKmHQ
cbbN3ta+2hwsUT189ieZUT9uZm6Babtcr56KucnCi6/W0h5DpDUn6Fh8geAzlFsF
s1GUjfvbDsyWd+R47WeR7dmf65NTEXn19HWj+IZ+EmbZjiWFG0dkzhFSe8iXvp0Z
yf28uWJDSnrHjdLFBSi0YBdQeKKZcaGCFT41nFjGY/21fw8=
-----END CERTIFICATE-----