Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa
File:                     323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa (raw, json)
Hash identifier:          QP6i7J9bAhA4bH88G6QZRPVMK3vF6Claz8E3oc2afK4=
Subject key identifier:   05:85:40:69:D6:46:4A:F9:8C:CD:E2:A8:6E:A3:42:E3:D1:CD:D3:D1
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       62EEC8EA47BCD2E798DB207B8C7E33C676BC334E
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:51:20 +0000
ROA not before:           Tue 05 Mar 2024 17:46:20 +0000
ROA not after:            Tue 04 Mar 2025 17:51:20 +0000
asID:                     52468
IP address blocks:        2803:4580:9100::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ee:c8:ea:47:bc:d2:e7:98:db:20:7b:8c:7e:33:c6:76:bc:33:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Mar  5 17:46:20 2024 GMT
            Not After : Mar  4 17:51:20 2025 GMT
        Subject: CN=05854069D6464AF98CCDE2A86EA342E3D1CDD3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:55:fc:33:db:b6:3f:3d:a8:b5:05:13:9d:
                    ca:2a:26:1c:7c:c7:da:c9:b4:eb:15:66:06:57:b6:
                    54:bf:aa:a7:4e:95:ce:3d:c3:b0:18:39:d3:80:55:
                    44:f1:7e:08:dc:c2:0d:f8:39:77:c4:ce:46:67:b3:
                    47:c5:e3:5e:e5:2e:b6:15:ac:af:7f:9e:a1:9a:c8:
                    bd:66:8c:9b:9b:cc:aa:cc:ca:dc:aa:bc:8d:c5:ae:
                    c3:71:f2:76:4e:4a:94:6e:3c:37:6d:e7:0c:1d:ed:
                    90:ec:d9:13:9b:e9:b0:7a:74:7d:3c:c4:4b:ff:00:
                    f3:b4:b0:6d:06:e3:23:2d:e5:b0:52:ac:b0:b4:e6:
                    3a:ec:d5:a1:da:dd:90:a2:e9:83:53:2c:9e:07:dc:
                    d6:f8:c0:f2:fe:7f:98:3f:95:47:f3:3b:51:86:1d:
                    9c:da:28:c5:a8:14:ad:df:3b:6a:72:08:6f:26:85:
                    44:b2:58:46:58:ef:b1:a1:cb:48:2c:56:f3:e5:98:
                    a7:b5:23:49:75:f0:66:46:72:b0:40:cc:44:8e:4c:
                    11:af:83:d9:e1:f6:fa:bb:40:46:76:23:fa:1a:95:
                    b5:74:70:b5:74:da:ec:61:22:29:68:3c:76:96:6f:
                    87:b3:3b:7d:6d:7b:47:0a:3d:f4:0c:d9:0d:6d:fb:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:85:40:69:D6:46:4A:F9:8C:CD:E2:A8:6E:A3:42:E3:D1:CD:D3:D1
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580:9100::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:8b:3c:21:9c:48:d2:bc:bf:28:78:66:08:79:85:a6:01:25:
         a2:8a:c5:90:a1:39:23:47:c5:d8:ce:56:64:65:9b:06:e9:f9:
         4d:20:92:0b:12:20:06:7c:b9:10:54:f8:b2:6a:64:38:65:11:
         ce:eb:5c:b5:b8:81:d9:27:84:c6:18:c7:27:99:a8:6d:ef:91:
         ac:73:d4:56:e0:75:3c:2f:ff:c2:da:d4:df:e5:56:c0:0b:75:
         70:7c:1c:34:bc:46:74:d3:b9:eb:3c:8a:52:57:84:a7:2f:b7:
         5c:d1:05:25:64:f1:da:14:6e:9b:64:28:ce:78:d6:d2:cb:2b:
         86:ac:9d:27:92:f7:55:5b:4f:3b:3f:92:a8:0c:2d:61:05:4b:
         a6:68:e0:a5:7f:ce:3c:95:bf:b7:6c:3a:ab:63:6e:cf:d6:13:
         3c:5a:44:c7:22:9d:6c:8c:67:50:f8:81:d5:4c:a3:42:2a:c7:
         b2:29:c9:6b:69:2e:84:5f:1e:8d:fb:62:a2:07:8c:74:71:28:
         6d:3c:ff:9a:ab:f6:e1:09:53:db:ae:4e:bb:0e:e1:be:36:cc:
         2f:6e:e4:47:fd:52:b4:36:1c:56:38:1e:3a:d2:3a:47:92:a9:
         e8:a0:fd:a4:b1:02:9a:79:fc:2d:11:66:8f:fe:31:a2:df:ee:
         39:55:37:4e
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUYu7I6ke80ueY2yB7jH4zxna8M04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDOUE0ODhEMDc5QUVFN0ZFMEIyMTY2NEExQTRBRUUx
Qzg5OUZEQzAeFw0yNDAzMDUxNzQ2MjBaFw0yNTAzMDQxNzUxMjBaMDMxMTAvBgNV
BAMTKDA1ODU0MDY5RDY0NjRBRjk4Q0NERTJBODZFQTM0MkUzRDFDREQzRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7FX8M9u2Pz2otQUTncoqJhx8
x9rJtOsVZgZXtlS/qqdOlc49w7AYOdOAVUTxfgjcwg34OXfEzkZns0fF417lLrYV
rK9/nqGayL1mjJubzKrMytyqvI3FrsNx8nZOSpRuPDdt5wwd7ZDs2ROb6bB6dH08
xEv/APO0sG0G4yMt5bBSrLC05jrs1aHa3ZCi6YNTLJ4H3Nb4wPL+f5g/lUfzO1GG
HZzaKMWoFK3fO2pyCG8mhUSyWEZY77Ghy0gsVvPlmKe1I0l18GZGcrBAzESOTBGv
g9nh9vq7QEZ2I/oalbV0cLV02uxhIiloPHaWb4ezO31te0cKPfQM2Q1t+6ArAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUBYVAadZGSvmMzeKobqNC49HN09EwHwYDVR0j
BBgwFoAUzsmkiNB5ruf+CyFmShpK7hyJn9wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUVBNTdFRENGQjhEM0M1NTVCN0IwOUQyRTVENjU4RTZE
MjQxMkJDODlGMUJDN0E1NDc3N0ZEQzE1QzkzODczLzAvQ0VDOUE0ODhEMDc5QUVF
N0ZFMEIyMTY2NEExQTRBRUUxQzg5OUZEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUM5QTQ4OEQwNzlBRUU3RkUw
QjIxNjY0QTFBNEFFRTFDODk5RkRDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVFQTU3RURDRkI4RDNDNTU1QjdCMDlEMkU1RDY1OEU2RDI0MTJCQzg5
RjFCQzdBNTQ3NzdGREMxNUM5Mzg3My8wLzMyMzgzMDMzM2EzNDM1MzgzMDNhMzkz
MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANFgJEwDQYJKoZIhvcNAQELBQADggEBAJmLPCGcSNK8vyh4Zgh5haYBJaKK
xZChOSNHxdjOVmRlmwbp+U0gkgsSIAZ8uRBU+LJqZDhlEc7rXLW4gdknhMYYxyeZ
qG3vkaxz1FbgdTwv/8La1N/lVsALdXB8HDS8RnTTues8ilJXhKcvt1zRBSVk8doU
bptkKM541tLLK4asnSeS91VbTzs/kqgMLWEFS6Zo4KV/zjyVv7dsOqtjbs/WEzxa
RMcinWyMZ1D4gdVMo0Iqx7IpyWtpLoRfHo37YqIHjHRxKG08/5qr9uEJU9uuTrsO
4b42zC9u5Ef9UrQ2HFY4HjrSOkeSqeig/aSxApp5/C0RZo/+MaLf7jlVN04=
-----END CERTIFICATE-----