Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33332d3333203d3e20323633373530.roa
File:                     323830333a613034303a383030303a3a2f33332d3333203d3e20323633373530.roa (raw, json)
Hash identifier:          rwOAJ8J8g8IVVZb4DdmVflGodXQ4AuIZ527zElqn72M=
Subject key identifier:   4D:ED:0B:D7:33:27:E5:80:AC:BD:15:E2:B2:F4:F1:C3:03:40:B8:AD
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       7B6477EAB2FDD4DF1C1DD85F0808718FADFCFF4E
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33332d3333203d3e20323633373530.roa
Signing time:             Tue 08 Oct 2024 13:30:00 +0000
ROA not before:           Tue 08 Oct 2024 13:25:00 +0000
ROA not after:            Tue 07 Oct 2025 13:30:00 +0000
asID:                     263750
IP address blocks:        2803:a040:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:64:77:ea:b2:fd:d4:df:1c:1d:d8:5f:08:08:71:8f:ad:fc:ff:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Oct  8 13:25:00 2024 GMT
            Not After : Oct  7 13:30:00 2025 GMT
        Subject: CN=4DED0BD73327E580ACBD15E2B2F4F1C30340B8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:38:1f:be:bb:90:ef:65:12:39:d1:2d:d5:
                    86:c5:e0:53:ac:8a:d0:14:35:fc:9c:6b:35:70:48:
                    fa:10:43:bb:41:fd:b3:59:8e:8e:39:00:f6:54:ad:
                    90:2b:fd:71:dc:3b:e1:6a:a0:40:82:d3:5f:42:09:
                    7b:49:5d:82:f6:59:8a:34:7a:49:bc:cc:49:91:8c:
                    ca:41:31:33:07:b5:81:00:f7:49:a0:77:36:33:5a:
                    bf:db:8d:05:b7:37:d9:97:9b:0d:4f:d5:d2:37:ca:
                    1a:4a:26:ab:4a:bf:9b:73:05:53:b8:3f:b7:0e:b5:
                    e7:32:55:93:87:0d:f3:5f:b4:54:0a:a5:df:0a:03:
                    17:ff:ac:1c:be:85:3f:4f:37:03:41:29:9b:ed:48:
                    be:b2:f2:4f:d9:04:a6:72:05:09:b0:ee:ce:99:7c:
                    f9:88:31:84:6d:cc:a1:50:0b:c0:68:fd:d7:a9:77:
                    25:3f:5c:78:a7:88:76:68:96:d0:80:9d:1a:da:32:
                    6b:0f:20:1e:6f:b4:16:ac:9f:e7:58:ac:db:34:f2:
                    dd:e0:d1:91:5a:c6:d4:21:46:ec:a9:a9:a3:0c:d9:
                    74:c1:5f:b6:78:42:06:1a:c0:06:71:d2:36:6b:ec:
                    fb:01:ad:e2:f9:15:70:3f:6e:d5:d4:1d:12:87:aa:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:ED:0B:D7:33:27:E5:80:AC:BD:15:E2:B2:F4:F1:C3:03:40:B8:AD
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33332d3333203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a040:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7a:f2:14:b6:da:68:ee:2c:7f:c6:ef:7f:c8:c0:aa:33:4a:f9:
         71:52:e5:07:db:17:c5:4e:b8:7e:6f:18:a7:39:a6:3f:54:b3:
         bc:75:bc:c6:8c:69:b1:eb:1a:76:75:29:27:ca:97:6f:2a:46:
         54:8a:78:f0:d9:da:aa:7a:e0:90:8d:f0:77:56:01:91:2c:90:
         92:4e:9e:7f:d8:cd:cf:a0:d7:df:d7:42:89:84:e2:56:9e:c2:
         44:23:19:0f:51:72:2b:d9:9e:d2:3e:9d:4a:e8:c7:7e:34:e9:
         0f:11:37:39:93:1d:2d:a7:6a:17:e8:71:be:68:61:b5:6b:8a:
         b0:7d:4c:59:d5:8a:72:52:8f:2d:cc:0f:83:11:af:28:af:43:
         99:d4:f0:42:9b:4d:d1:de:cb:24:66:ad:57:b3:bb:5f:c2:6c:
         ad:72:08:97:6e:63:4e:51:b1:3f:d8:66:c0:61:d3:3c:7e:c4:
         e1:56:04:62:fa:e0:0c:43:5e:b8:43:3c:2d:a2:78:0a:77:85:
         cd:88:d8:ca:f5:77:92:bd:b2:b1:ea:c9:8f:b2:85:ee:64:d7:
         5f:3f:93:83:13:65:ed:17:dc:f1:56:db:68:e8:ee:31:dd:a0:
         d2:53:5f:0e:92:80:50:af:26:ec:4d:61:a7:24:25:85:c8:2c:
         9b:44:6c:a9
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUe2R36rL91N8cHdhfCAhxj638/04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZCNDdCQTAyQURCQzE2MTNEQjIwRjFCNUVDM0ExQUM3
NEM1MjUwOTAeFw0yNDEwMDgxMzI1MDBaFw0yNTEwMDcxMzMwMDBaMDMxMTAvBgNV
BAMTKDRERUQwQkQ3MzMyN0U1ODBBQ0JEMTVFMkIyRjRGMUMzMDM0MEI4QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hzgfvruQ72USOdEt1YbF4FOs
itAUNfycazVwSPoQQ7tB/bNZjo45APZUrZAr/XHcO+FqoECC019CCXtJXYL2WYo0
ekm8zEmRjMpBMTMHtYEA90mgdzYzWr/bjQW3N9mXmw1P1dI3yhpKJqtKv5tzBVO4
P7cOtecyVZOHDfNftFQKpd8KAxf/rBy+hT9PNwNBKZvtSL6y8k/ZBKZyBQmw7s6Z
fPmIMYRtzKFQC8Bo/depdyU/XHiniHZoltCAnRraMmsPIB5vtBasn+dYrNs08t3g
0ZFaxtQhRuypqaMM2XTBX7Z4QgYawAZx0jZr7PsBreL5FXA/btXUHRKHqp3TAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUTe0L1zMn5YCsvRXisvTxwwNAuK0wHwYDVR0j
BBgwFoAUL7R7oCrbwWE9sg8bXsOhrHTFJQkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTc3MkE1RUEyNTI2MjQwNDQ4NDM4MThBQjhEQUI5REZG
Q0I3MzQ2QzlEMkUxRTVDQTkzRkRFOUJBQUE5MkI0LzAvMkZCNDdCQTAyQURCQzE2
MTNEQjIwRjFCNUVDM0ExQUM3NEM1MjUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkI0N0JBMDJBREJDMTYxM0RC
MjBGMUI1RUMzQTFBQzc0QzUyNTA5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkE3NzJBNUVBMjUyNjI0MDQ0ODQzODE4QUI4REFCOURGRkNCNzM0NkM5
RDJFMUU1Q0E5M0ZERTlCQUFBOTJCNC8wLzMyMzgzMDMzM2E2MTMwMzQzMDNhMzgz
MDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM2MzMzNzM1MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgcoA6BAgDANBgkqhkiG9w0BAQsFAAOCAQEAevIUttpo7ix/xu9/yMCqM0r5
cVLlB9sXxU64fm8YpzmmP1SzvHW8xoxpsesadnUpJ8qXbypGVIp48NnaqnrgkI3w
d1YBkSyQkk6ef9jNz6DX39dCiYTiVp7CRCMZD1FyK9me0j6dSujHfjTpDxE3OZMd
LadqF+hxvmhhtWuKsH1MWdWKclKPLcwPgxGvKK9DmdTwQptN0d7LJGatV7O7X8Js
rXIIl25jTlGxP9hmwGHTPH7E4VYEYvrgDENeuEM8LaJ4CneFzYjYyvV3kr2yserJ
j7KF7mTXXz+TgxNl7Rfc8VbbaOjuMd2g0lNfDpKAUK8m7E1hpyQlhcgsm0RsqQ==
-----END CERTIFICATE-----