Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/323830333a633663303a3a2f33322d3332203d3e20323635363436.roa
File:                     323830333a633663303a3a2f33322d3332203d3e20323635363436.roa (raw, json)
Hash identifier:          bnMfA/Hdw1jq1I81lrL2RpzjTBAtfBrb18mEr+U6Hbc=
Subject key identifier:   A1:CA:7F:09:F4:86:FF:4C:B5:17:A8:73:12:38:6B:FB:A1:19:09:D0
Certificate issuer:       /CN=125312172ACB5206FC23726C19566C8F6B3F0B99
Certificate serial:       76B250B15E277A87D025DED8F14F3A0981982463
Authority key identifier: 12:53:12:17:2A:CB:52:06:FC:23:72:6C:19:56:6C:8F:6B:3F:0B:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/323830333a633663303a3a2f33322d3332203d3e20323635363436.roa
Signing time:             Tue 05 Mar 2024 18:22:18 +0000
ROA not before:           Tue 05 Mar 2024 18:17:18 +0000
ROA not after:            Tue 04 Mar 2025 18:22:18 +0000
asID:                     265646
IP address blocks:        2803:c6c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b2:50:b1:5e:27:7a:87:d0:25:de:d8:f1:4f:3a:09:81:98:24:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125312172ACB5206FC23726C19566C8F6B3F0B99
        Validity
            Not Before: Mar  5 18:17:18 2024 GMT
            Not After : Mar  4 18:22:18 2025 GMT
        Subject: CN=A1CA7F09F486FF4CB517A87312386BFBA11909D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a5:01:59:69:28:1b:ba:16:bb:40:e0:78:81:
                    9b:bb:fc:86:35:64:b8:8c:c0:61:44:0c:21:27:8f:
                    26:de:21:e5:23:8a:9e:cd:71:7c:01:64:40:1e:2a:
                    69:f1:b5:0e:1c:ca:9a:48:1a:43:1b:e4:ca:80:be:
                    f1:4b:b1:03:cd:bb:65:fc:e5:cd:8a:8f:48:77:b6:
                    04:be:e4:65:bf:e1:6c:ce:d1:80:45:af:c6:a1:05:
                    fe:ee:6e:35:52:6f:5e:d0:33:4e:97:8b:6f:0b:9f:
                    9c:7b:42:74:84:25:e3:1b:04:e2:8c:d0:59:c4:a9:
                    50:d5:96:29:79:0d:c8:8c:da:f6:bb:70:03:ea:97:
                    0c:7c:96:5b:db:6f:4a:54:b6:cd:a0:54:2f:3f:06:
                    28:45:8a:18:fa:e6:09:29:3d:dc:19:dd:3c:b4:e1:
                    4d:47:e6:2c:f3:56:bf:56:46:6c:54:52:00:3a:a9:
                    f3:bd:1c:d5:90:ab:07:ff:a3:61:3d:fa:16:88:c3:
                    f8:75:fe:65:63:64:db:bc:e5:9e:a1:d1:d8:a6:8e:
                    1a:a7:a2:fb:78:4e:96:95:41:e0:32:df:5d:67:be:
                    37:56:d6:5d:01:db:e1:e7:95:08:89:79:a5:39:e3:
                    fc:34:ed:82:6c:1c:12:86:c4:6b:f9:cb:d4:cf:29:
                    bf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CA:7F:09:F4:86:FF:4C:B5:17:A8:73:12:38:6B:FB:A1:19:09:D0
            X509v3 Authority Key Identifier:
                keyid:12:53:12:17:2A:CB:52:06:FC:23:72:6C:19:56:6C:8F:6B:3F:0B:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/323830333a633663303a3a2f33322d3332203d3e20323635363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:f1:3e:64:fc:29:04:6e:ee:ec:ea:90:0f:1c:12:95:a5:
         b6:3e:71:a8:aa:6c:b9:ae:c0:dc:85:ca:dd:c9:0c:7e:6f:2f:
         fc:6f:69:df:a7:7c:33:de:00:bd:81:27:8c:89:19:9e:7f:0b:
         e2:78:0e:9e:00:e0:71:99:bf:a7:ac:77:b4:50:0a:44:1a:42:
         da:34:da:21:0a:a2:5f:04:35:8e:25:e2:25:d1:ec:46:f0:26:
         e2:96:d2:01:89:82:2f:fc:b7:1d:80:46:d4:c2:4d:c0:0d:31:
         44:6b:8f:fe:a2:90:a2:05:71:16:d6:98:55:66:7e:41:5a:3e:
         bf:04:9b:ee:69:88:61:0e:b1:e7:21:4e:3d:16:5c:74:84:ea:
         f6:3b:bc:85:89:3a:0c:67:51:46:e6:96:59:be:5b:d0:df:28:
         10:93:16:75:95:21:76:fc:39:f4:ac:d5:4a:c4:d9:c6:23:82:
         b2:44:13:7f:15:43:4a:d4:cb:81:91:3c:93:af:e4:bb:94:55:
         b2:21:e2:e3:60:05:36:91:4d:1d:83:39:42:30:73:d7:d4:91:
         a5:fa:d3:d9:29:12:1b:b9:68:b2:f0:b7:f3:04:12:08:5a:a5:
         1b:2a:1b:6e:c1:48:b2:7e:91:9b:78:fb:3f:02:33:63:78:94:
         1f:53:e4:46
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUdrJQsV4neofQJd7Y8U86CYGYJGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1MzEyMTcyQUNCNTIwNkZDMjM3MjZDMTk1NjZDOEY2
QjNGMEI5OTAeFw0yNDAzMDUxODE3MThaFw0yNTAzMDQxODIyMThaMDMxMTAvBgNV
BAMTKEExQ0E3RjA5RjQ4NkZGNENCNTE3QTg3MzEyMzg2QkZCQTExOTA5RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPpQFZaSgbuha7QOB4gZu7/IY1
ZLiMwGFEDCEnjybeIeUjip7NcXwBZEAeKmnxtQ4cyppIGkMb5MqAvvFLsQPNu2X8
5c2Kj0h3tgS+5GW/4WzO0YBFr8ahBf7ubjVSb17QM06Xi28Ln5x7QnSEJeMbBOKM
0FnEqVDVlil5DciM2va7cAPqlwx8llvbb0pUts2gVC8/BihFihj65gkpPdwZ3Ty0
4U1H5izzVr9WRmxUUgA6qfO9HNWQqwf/o2E9+haIw/h1/mVjZNu85Z6h0dimjhqn
ovt4TpaVQeAy311nvjdW1l0B2+HnlQiJeaU54/w07YJsHBKGxGv5y9TPKb8XAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUocp/CfSG/0y1F6hzEjhr+6EZCdAwHwYDVR0j
BBgwFoAUElMSFyrLUgb8I3JsGVZsj2s/C5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOUY5RTBBMEZBNkY5QUM2NkExMzNEOEE4RUVDNTY4NkFG
MDM2RTNERjA5MzMxQTkwRUMxRjk5QjAyRDk0MDg4LzAvMTI1MzEyMTcyQUNCNTIw
NkZDMjM3MjZDMTk1NjZDOEY2QjNGMEI5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjUzMTIxNzJBQ0I1MjA2RkMy
MzcyNkMxOTU2NkM4RjZCM0YwQjk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDlGOUUwQTBGQTZGOUFDNjZBMTMzRDhBOEVFQzU2ODZBRjAzNkUzREYw
OTMzMUE5MEVDMUY5OUIwMkQ5NDA4OC8wLzMyMzgzMDMzM2E2MzM2NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM2MzQzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDxsAw
DQYJKoZIhvcNAQELBQADggEBAFxL8T5k/CkEbu7s6pAPHBKVpbY+caiqbLmuwNyF
yt3JDH5vL/xvad+nfDPeAL2BJ4yJGZ5/C+J4Dp4A4HGZv6esd7RQCkQaQto02iEK
ol8ENY4l4iXR7EbwJuKW0gGJgi/8tx2ARtTCTcANMURrj/6ikKIFcRbWmFVmfkFa
Pr8Em+5piGEOsechTj0WXHSE6vY7vIWJOgxnUUbmllm+W9DfKBCTFnWVIXb8OfSs
1UrE2cYjgrJEE38VQ0rUy4GRPJOv5LuUVbIh4uNgBTaRTR2DOUIwc9fUkaX609kp
Ehu5aLLwt/MEEghapRsqG27BSLJ+kZt4+z8CM2N4lB9T5EY=
-----END CERTIFICATE-----