Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/323830333a3938303a3a2f33322d3332203d3e20323633323438.roa
File:                     323830333a3938303a3a2f33322d3332203d3e20323633323438.roa (raw, json)
Hash identifier:          njzmBBcM3ihAGA2K3OqWsEjptG9FdNjFHNesxde5BZc=
Subject key identifier:   23:A1:C4:93:4C:88:13:79:88:D1:99:3E:8B:79:68:28:17:F4:5A:B1
Certificate issuer:       /CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
Certificate serial:       7B26CA5D984C16A906131A400B661A8F7324188B
Authority key identifier: A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/323830333a3938303a3a2f33322d3332203d3e20323633323438.roa
Signing time:             Tue 05 Mar 2024 17:40:51 +0000
ROA not before:           Tue 05 Mar 2024 17:35:51 +0000
ROA not after:            Tue 04 Mar 2025 17:40:51 +0000
asID:                     263248
IP address blocks:        2803:980::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:26:ca:5d:98:4c:16:a9:06:13:1a:40:0b:66:1a:8f:73:24:18:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
        Validity
            Not Before: Mar  5 17:35:51 2024 GMT
            Not After : Mar  4 17:40:51 2025 GMT
        Subject: CN=23A1C4934C88137988D1993E8B79682817F45AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bc:81:77:fa:3b:d5:99:2b:d9:97:2a:54:15:
                    85:9f:65:38:f0:fd:a2:e3:9c:0c:cd:54:a8:7e:de:
                    ab:37:7c:f8:97:54:19:ee:5e:75:90:7e:a9:57:42:
                    f9:f1:ef:1c:ba:34:54:80:46:94:9f:79:e4:fb:b9:
                    f0:54:13:e9:b1:93:2f:f5:81:74:ac:96:99:5a:df:
                    bc:98:db:40:87:b5:4c:99:db:e3:6e:fc:98:03:3b:
                    0d:0c:51:50:82:fb:13:da:31:75:7d:3e:2b:82:b0:
                    37:9d:88:c8:fb:f4:de:b1:33:a5:4d:c9:00:50:1d:
                    48:71:de:f8:61:12:02:60:98:de:4e:b4:d8:f4:df:
                    17:d3:eb:8f:c3:c5:36:e8:58:45:83:39:82:14:72:
                    a6:08:7e:e9:92:e2:a0:0e:69:b4:4f:4b:e4:43:c3:
                    94:90:bc:51:f6:4f:61:d8:77:b8:c2:e4:11:ba:24:
                    f0:3f:0a:53:7a:2f:0f:fd:b1:d7:89:33:bc:d0:90:
                    52:59:58:23:7c:6f:d2:d9:64:2a:5b:55:a4:0e:3b:
                    cf:99:76:9f:bf:84:48:bc:e5:cc:a1:b9:c8:7e:88:
                    2c:0d:52:83:71:5e:51:8c:c9:bc:66:13:ef:10:86:
                    53:8c:e2:91:79:52:1d:b6:03:d4:58:a9:ac:e8:fa:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A1:C4:93:4C:88:13:79:88:D1:99:3E:8B:79:68:28:17:F4:5A:B1
            X509v3 Authority Key Identifier:
                keyid:A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/323830333a3938303a3a2f33322d3332203d3e20323633323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:980::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:b1:ae:0f:c0:24:38:bd:cb:70:28:13:5d:12:7e:33:81:
         9e:b9:7a:bf:6c:d6:c9:3a:23:74:9f:e0:8c:8d:e2:de:e6:57:
         5c:4c:22:f8:8d:e4:e8:93:67:57:b4:06:80:4d:26:85:60:57:
         ce:92:af:48:a6:62:80:a3:03:b8:df:44:98:4d:a4:87:e2:b5:
         54:99:9f:9c:16:7f:a4:fc:94:6a:ab:4d:5c:c1:cc:85:06:04:
         1d:5e:1c:33:25:ac:1a:98:29:46:37:0a:87:e6:0b:c3:20:0a:
         9e:e6:47:20:a1:c2:e1:93:2a:d3:c0:b0:2f:69:c3:69:ef:d2:
         3e:de:75:26:33:25:fa:30:dd:90:24:16:2d:2b:92:57:2a:0d:
         52:ee:20:46:a9:65:9a:79:a3:46:84:a5:05:4f:a8:29:32:a7:
         4b:1b:d6:19:e3:fe:c9:e5:b8:13:6d:9a:5a:f7:c6:3a:79:5f:
         6e:95:91:eb:12:b6:fd:95:b3:31:b9:a5:bd:42:fc:7e:8b:e1:
         8a:67:e4:0e:00:02:e6:09:9e:6a:ab:0a:5a:41:07:40:f0:fd:
         a7:c3:89:70:ee:08:14:e0:c4:ca:e3:97:5c:e7:26:b3:a5:b5:
         7f:c5:b3:c1:e3:74:1d:e4:0b:2c:e3:7b:f4:e2:9f:ad:18:f5:
         b9:e9:cc:f8
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUeybKXZhMFqkGExpAC2Yaj3MkGIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRFQzg0NzVGOTgwMTRCOTY1RjM0QjI1QTJBNjhGNThB
QUVFMTk5QjAeFw0yNDAzMDUxNzM1NTFaFw0yNTAzMDQxNzQwNTFaMDMxMTAvBgNV
BAMTKDIzQTFDNDkzNEM4ODEzNzk4OEQxOTkzRThCNzk2ODI4MTdGNDVBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBvIF3+jvVmSvZlypUFYWfZTjw
/aLjnAzNVKh+3qs3fPiXVBnuXnWQfqlXQvnx7xy6NFSARpSfeeT7ufBUE+mxky/1
gXSslpla37yY20CHtUyZ2+Nu/JgDOw0MUVCC+xPaMXV9PiuCsDediMj79N6xM6VN
yQBQHUhx3vhhEgJgmN5OtNj03xfT64/DxTboWEWDOYIUcqYIfumS4qAOabRPS+RD
w5SQvFH2T2HYd7jC5BG6JPA/ClN6Lw/9sdeJM7zQkFJZWCN8b9LZZCpbVaQOO8+Z
dp+/hEi85cyhuch+iCwNUoNxXlGMybxmE+8QhlOM4pF5Uh22A9RYqazo+nbHAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUI6HEk0yIE3mI0Zk+i3loKBf0WrEwHwYDVR0j
BBgwFoAUpOyEdfmAFLll80sloqaPWKruGZswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQzk2NkFGMkQ2NjdDNzFEQjhGN0RDNkNCRTdBQTNCNTRD
OUExMzQxQUNBODcxQjU3QjQzOERGOEVBQzc2MURDLzAvQTRFQzg0NzVGOTgwMTRC
OTY1RjM0QjI1QTJBNjhGNThBQUVFMTk5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNEVDODQ3NUY5ODAxNEI5NjVG
MzRCMjVBMkE2OEY1OEFBRUUxOTlCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEM5NjZBRjJENjY3QzcxREI4RjdEQzZDQkU3QUEzQjU0QzlBMTM0MUFD
QTg3MUI1N0I0MzhERjhFQUM3NjFEQy8wLzMyMzgzMDMzM2EzOTM4MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzMzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwmAMA0G
CSqGSIb3DQEBCwUAA4IBAQATfLGuD8AkOL3LcCgTXRJ+M4GeuXq/bNbJOiN0n+CM
jeLe5ldcTCL4jeTok2dXtAaATSaFYFfOkq9IpmKAowO430SYTaSH4rVUmZ+cFn+k
/JRqq01cwcyFBgQdXhwzJawamClGNwqH5gvDIAqe5kcgocLhkyrTwLAvacNp79I+
3nUmMyX6MN2QJBYtK5JXKg1S7iBGqWWaeaNGhKUFT6gpMqdLG9YZ4/7J5bgTbZpa
98Y6eV9ulZHrErb9lbMxuaW9Qvx+i+GKZ+QOAALmCZ5qqwpaQQdA8P2nw4lw7ggU
4MTK45dc5yazpbV/xbPB43Qd5Ass43v04p+tGPW56cz4
-----END CERTIFICATE-----