Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3430303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3430303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          ouwF6J4Kwf8zqIyX41WpUvLtT6l5Xd6pnyi1M7llNIM=
Subject key identifier:   32:9F:13:4C:44:E3:90:72:38:C7:DC:5A:57:D8:82:A3:84:0B:ED:A1
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       22D884D9D4AF07583BDAD15C188962FBB83165D5
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3430303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 05 Mar 2024 17:53:25 +0000
ROA not before:           Tue 05 Mar 2024 17:48:25 +0000
ROA not after:            Tue 04 Mar 2025 17:53:25 +0000
asID:                     272939
IP address blocks:        2803:b190:400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d8:84:d9:d4:af:07:58:3b:da:d1:5c:18:89:62:fb:b8:31:65:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Mar  5 17:48:25 2024 GMT
            Not After : Mar  4 17:53:25 2025 GMT
        Subject: CN=329F134C44E3907238C7DC5A57D882A3840BEDA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:ab:bd:59:fe:6a:aa:b9:73:66:a4:07:99:
                    3d:c9:43:6c:63:32:a0:da:8e:d6:5e:5f:bd:f8:17:
                    55:40:98:a2:11:83:b9:26:61:e1:99:50:c3:6b:bd:
                    e2:ff:da:2e:d4:0c:6e:8d:30:2d:50:a5:05:d5:a9:
                    97:a0:88:68:b2:93:66:53:f3:02:4f:99:41:57:42:
                    dd:d3:2c:2d:b9:2e:f5:57:4f:33:05:6b:31:f2:98:
                    0f:46:b1:0d:f0:b7:69:a4:88:c8:53:e7:c4:ee:29:
                    d0:83:f7:7f:4c:bb:59:5b:b2:41:0d:ba:af:e4:29:
                    ec:6f:dd:c6:9f:0f:b7:7d:a3:62:b7:3b:85:62:9e:
                    69:c1:30:72:02:19:c6:ea:c9:2d:a9:67:0b:31:0b:
                    8d:7e:8f:c4:f4:8d:b8:95:c0:c7:e4:2d:a4:5d:30:
                    92:ad:68:c3:7e:17:cb:7f:75:1f:8b:81:f5:87:38:
                    44:79:12:c6:d9:89:b1:ca:ae:de:01:6d:b8:d2:5d:
                    1e:5e:ad:71:bc:eb:77:ea:cd:c8:63:4f:d9:ac:cc:
                    f6:a6:fa:13:a5:26:06:4b:03:30:35:da:a7:ee:ce:
                    14:c4:a1:bc:c8:5e:58:39:d6:e6:8d:12:b7:ab:50:
                    36:a1:3e:18:c1:ec:64:e6:af:e1:f6:ad:93:8b:da:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9F:13:4C:44:E3:90:72:38:C7:DC:5A:57:D8:82:A3:84:0B:ED:A1
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3430303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:57:5a:cf:46:8c:12:d8:18:3d:ba:02:1e:97:a0:b5:83:fa:
         61:a7:4a:1d:4c:ab:c7:86:d6:78:d3:f9:f6:10:b8:ce:2e:16:
         cf:0a:ea:ec:cd:86:eb:ce:78:fd:0f:39:8d:a7:dd:8d:a9:83:
         fc:0f:2a:bf:6a:02:5f:7f:27:26:4d:a7:c2:c4:8e:11:45:6a:
         35:0d:72:d8:c6:42:1b:50:1d:72:bc:21:2a:ee:54:07:aa:e5:
         10:6d:cb:3c:3a:43:51:54:fb:00:4f:b2:22:00:20:e2:02:d8:
         f1:bf:b9:d7:67:f9:5e:5e:a0:29:64:a1:5f:42:17:88:e2:3f:
         a8:ac:0c:15:8a:08:cf:44:d4:7d:4d:ce:9a:55:b4:42:3e:7c:
         fc:29:e5:47:e2:b8:cd:9d:35:f0:6f:50:67:80:31:9a:e2:be:
         a1:19:9d:66:10:89:59:0e:af:a9:e9:da:aa:d7:d0:d0:aa:b3:
         d4:6d:7d:6a:2e:6e:9f:e0:f8:e1:56:d9:60:f8:91:f5:80:8b:
         79:5d:df:bf:67:5e:98:2d:4b:a1:49:30:bb:85:f7:62:4f:fb:
         42:74:81:ae:75:1d:35:6e:6a:20:db:c4:e8:52:8d:a6:b8:ba:
         2a:fc:0b:0a:8e:5c:08:24:b3:d8:b6:a6:24:28:dc:9b:61:6d:
         4a:59:aa:12
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUItiE2dSvB1g72tFcGIli+7gxZdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVCM0Y0MDMyRkQ2OEVDOUMwNUZBREJBNDM3QzM0NTlF
M0M3QTJBODAeFw0yNDAzMDUxNzQ4MjVaFw0yNTAzMDQxNzUzMjVaMDMxMTAvBgNV
BAMTKDMyOUYxMzRDNDRFMzkwNzIzOEM3REM1QTU3RDg4MkEzODQwQkVEQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHb6u9Wf5qqrlzZqQHmT3JQ2xj
MqDajtZeX734F1VAmKIRg7kmYeGZUMNrveL/2i7UDG6NMC1QpQXVqZegiGiyk2ZT
8wJPmUFXQt3TLC25LvVXTzMFazHymA9GsQ3wt2mkiMhT58TuKdCD939Mu1lbskEN
uq/kKexv3cafD7d9o2K3O4VinmnBMHICGcbqyS2pZwsxC41+j8T0jbiVwMfkLaRd
MJKtaMN+F8t/dR+LgfWHOER5EsbZibHKrt4BbbjSXR5erXG863fqzchjT9mszPam
+hOlJgZLAzA12qfuzhTEobzIXlg51uaNErerUDahPhjB7GTmr+H2rZOL2mhFAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUMp8TTETjkHI4x9xaV9iCo4QL7aEwHwYDVR0j
BBgwFoAU5bP0Ay/WjsnAX626Q3w0WePHoqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjcwOTNGQzJFNjc3NkQxMjU3QjI1MjlDNTdBMjdFQjY4
QzcwMEIyMDMyRTUyRjQ0MDIzRTE3MkI1RTgxRjhDLzAvRTVCM0Y0MDMyRkQ2OEVD
OUMwNUZBREJBNDM3QzM0NTlFM0M3QTJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUIzRjQwMzJGRDY4RUM5QzA1
RkFEQkE0MzdDMzQ1OUUzQzdBMkE4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI3MDkzRkMyRTY3NzZEMTI1N0IyNTI5QzU3QTI3RUI2OEM3MDBCMjAz
MkU1MkY0NDAyM0UxNzJCNUU4MUY4Qy8wLzMyMzgzMDMzM2E2MjMxMzkzMDNhMzQz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzkzMzM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAOxkAQwDQYJKoZIhvcNAQELBQADggEBAHFXWs9GjBLYGD26Ah6XoLWD+mGn
Sh1Mq8eG1njT+fYQuM4uFs8K6uzNhuvOeP0POY2n3Y2pg/wPKr9qAl9/JyZNp8LE
jhFFajUNctjGQhtQHXK8ISruVAeq5RBtyzw6Q1FU+wBPsiIAIOIC2PG/uddn+V5e
oClkoV9CF4jiP6isDBWKCM9E1H1NzppVtEI+fPwp5UfiuM2dNfBvUGeAMZrivqEZ
nWYQiVkOr6np2qrX0NCqs9RtfWoubp/g+OFW2WD4kfWAi3ld379nXpgtS6FJMLuF
92JP+0J0ga51HTVuaiDbxOhSjaa4uir8CwqOXAgks9i2piQo3JthbUpZqhI=
-----END CERTIFICATE-----