Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa
File:                     323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (raw, json)
Hash identifier:          GP2CFGQL8+miHWMXy4jNiqhH5f1vBCJelUWI8sUvh18=
Subject key identifier:   B9:F6:64:DA:BD:04:EF:34:10:7F:94:09:C6:84:F3:19:26:E9:34:A9
Certificate issuer:       /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial:       28AD8A62F5DBC812DB223BA9E959C3617AD3D8ED
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa
Signing time:             Tue 05 Mar 2024 18:19:57 +0000
ROA not before:           Tue 05 Mar 2024 18:14:57 +0000
ROA not after:            Tue 04 Mar 2025 18:19:57 +0000
asID:                     266780
IP address blocks:        2803:9f20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ad:8a:62:f5:db:c8:12:db:22:3b:a9:e9:59:c3:61:7a:d3:d8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
        Validity
            Not Before: Mar  5 18:14:57 2024 GMT
            Not After : Mar  4 18:19:57 2025 GMT
        Subject: CN=B9F664DABD04EF34107F9409C684F31926E934A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:23:fb:dd:59:2f:c6:af:60:62:61:76:df:
                    e9:7a:41:b8:a7:9b:4a:2c:b7:0a:f0:cd:6b:85:18:
                    7e:3f:9d:9c:bb:1c:99:5b:0e:56:de:a3:b9:ac:84:
                    7b:d2:fb:68:9a:d3:5d:9c:75:18:9b:34:80:cb:11:
                    66:d5:93:97:7e:e2:b3:fc:ba:48:fc:79:8c:76:0c:
                    3e:eb:89:e3:b5:4f:77:b2:3f:e8:df:21:66:f9:26:
                    89:40:b0:94:03:b5:80:96:1a:c1:79:a2:cc:0f:67:
                    52:aa:85:5b:e5:2e:a0:51:2c:43:4e:56:61:ff:f4:
                    d8:b4:20:c9:0a:94:7d:20:ae:f5:cc:a1:0a:40:f1:
                    3d:ce:07:b2:05:8f:bd:b6:67:a4:81:86:61:af:a5:
                    39:68:92:fb:8a:06:0d:29:68:ff:ec:d0:f7:67:f6:
                    e9:d2:ac:d3:ef:07:63:8e:5a:28:27:ff:cb:06:5b:
                    00:c9:11:00:5b:d0:89:74:37:6f:07:d9:fa:83:4c:
                    80:ab:78:05:1d:b2:a6:7a:29:0c:cd:6c:a9:8a:1c:
                    2c:84:6e:35:3e:9d:52:d7:6a:6c:d0:08:7b:8c:ff:
                    ce:a2:ab:ee:52:e3:32:80:e9:b1:a1:e5:02:b1:c9:
                    4e:a1:e7:b0:99:ec:23:bd:b4:d9:f2:a8:f0:7f:49:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F6:64:DA:BD:04:EF:34:10:7F:94:09:C6:84:F3:19:26:E9:34:A9
            X509v3 Authority Key Identifier:
                keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:9a:14:00:a3:78:35:03:03:8b:40:b7:78:5e:e0:2d:17:
         9a:ca:a9:d1:84:22:06:36:3d:9f:8c:16:76:0a:26:98:e0:40:
         57:49:49:d9:b1:99:a7:59:51:b4:bf:3b:af:74:6a:ab:73:e1:
         d0:bb:78:9c:db:ae:ea:56:92:c2:ad:79:b0:56:a5:ae:88:43:
         21:ce:b0:9f:cf:c9:d2:71:ae:a7:7c:13:9f:ef:f8:40:f1:d8:
         74:d3:d7:64:bb:b3:12:91:c6:7c:b3:13:cb:a5:31:43:29:52:
         e6:cc:7a:44:c1:ad:d0:e2:a3:a2:a4:91:2e:5b:ef:d0:f6:6c:
         aa:be:0e:f3:00:96:82:1b:43:f2:da:0a:27:c1:a5:2c:39:a2:
         fe:07:c1:9a:7a:85:02:01:53:f6:6a:94:d7:7c:2d:7b:7b:18:
         b1:01:78:84:fc:1e:dd:68:35:ee:40:93:39:a8:8a:a5:dd:65:
         3a:7f:84:bc:49:bf:04:a2:61:2c:f7:25:24:48:8f:9b:d9:63:
         f9:9c:9f:a5:e7:5d:c7:fa:c3:dc:66:d3:42:6c:16:e1:ef:59:
         14:99:84:84:1b:3f:7e:ed:81:1a:99:f1:1c:81:17:5a:27:2c:
         49:a1:cb:47:4f:5b:f8:58:b9:f3:dd:e7:62:c5:29:1f:c5:fc:
         b1:1a:a1:0c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUKK2KYvXbyBLbIjup6VnDYXrT2O0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNBRkM5Qjk2OUJFM0QyRTM2QjhFMTcyNTQ5ODA4OTJF
MUYwNkRCODAeFw0yNDAzMDUxODE0NTdaFw0yNTAzMDQxODE5NTdaMDMxMTAvBgNV
BAMTKEI5RjY2NERBQkQwNEVGMzQxMDdGOTQwOUM2ODRGMzE5MjZFOTM0QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHSP73Vkvxq9gYmF23+l6Qbin
m0ostwrwzWuFGH4/nZy7HJlbDlbeo7mshHvS+2ia012cdRibNIDLEWbVk5d+4rP8
ukj8eYx2DD7rieO1T3eyP+jfIWb5JolAsJQDtYCWGsF5oswPZ1KqhVvlLqBRLENO
VmH/9Ni0IMkKlH0grvXMoQpA8T3OB7IFj722Z6SBhmGvpTlokvuKBg0paP/s0Pdn
9unSrNPvB2OOWign/8sGWwDJEQBb0Il0N28H2fqDTICreAUdsqZ6KQzNbKmKHCyE
bjU+nVLXamzQCHuM/86iq+5S4zKA6bGh5QKxyU6h57CZ7CO9tNnyqPB/Se2xAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUufZk2r0E7zQQf5QJxoTzGSbpNKkwHwYDVR0j
BBgwFoAUw6/JuWm+PS42uOFyVJgIkuHwbbgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MjIxRkY5RjI0MkE1OEM4OEJCRTU5NzJCMzg1MkNCODcw
REY4M0M4NEQ1MTNFRjMwRTgyNERBMTFFODdFODhDLzAvQzNBRkM5Qjk2OUJFM0Qy
RTM2QjhFMTcyNTQ5ODA4OTJFMUYwNkRCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0FGQzlCOTY5QkUzRDJFMzZC
OEUxNzI1NDk4MDg5MkUxRjA2REI4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDIyMUZGOUYyNDJBNThDODhCQkU1OTcyQjM4NTJDQjg3MERGODNDODRE
NTEzRUYzMEU4MjREQTExRTg3RTg4Qy8wLzMyMzgzMDMzM2EzOTY2MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM3MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDnyAw
DQYJKoZIhvcNAQELBQADggEBAGo0mhQAo3g1AwOLQLd4XuAtF5rKqdGEIgY2PZ+M
FnYKJpjgQFdJSdmxmadZUbS/O690aqtz4dC7eJzbrupWksKtebBWpa6IQyHOsJ/P
ydJxrqd8E5/v+EDx2HTT12S7sxKRxnyzE8ulMUMpUubMekTBrdDio6KkkS5b79D2
bKq+DvMAloIbQ/LaCifBpSw5ov4HwZp6hQIBU/ZqlNd8LXt7GLEBeIT8Ht1oNe5A
kzmoiqXdZTp/hLxJvwSiYSz3JSRIj5vZY/mcn6XnXcf6w9xm00JsFuHvWRSZhIQb
P37tgRqZ8RyBF1onLEmhy0dPW/hYufPd52LFKR/F/LEaoQw=
-----END CERTIFICATE-----