Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/323830333a316336303a3a2f33322d3438203d3e203532333033.roa
File:                     323830333a316336303a3a2f33322d3438203d3e203532333033.roa (raw, json)
Hash identifier:          xkfqH7cXDWZDvdQe2QgQTAbcsfqXpbnjFHnVJYzLfhw=
Subject key identifier:   1F:64:D8:70:01:60:20:E9:A0:D3:5A:C6:94:8D:48:B0:F2:D2:0B:D9
Certificate issuer:       /CN=9B48C7C37EA3416F0E2263901D5683835F4FD5C7
Certificate serial:       10322F87F940E7CE34968600EBA42418F4623889
Authority key identifier: 9B:48:C7:C3:7E:A3:41:6F:0E:22:63:90:1D:56:83:83:5F:4F:D5:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/323830333a316336303a3a2f33322d3438203d3e203532333033.roa
Signing time:             Tue 05 Mar 2024 18:05:53 +0000
ROA not before:           Tue 05 Mar 2024 18:00:53 +0000
ROA not after:            Tue 04 Mar 2025 18:05:53 +0000
asID:                     52303
IP address blocks:        2803:1c60::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:32:2f:87:f9:40:e7:ce:34:96:86:00:eb:a4:24:18:f4:62:38:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B48C7C37EA3416F0E2263901D5683835F4FD5C7
        Validity
            Not Before: Mar  5 18:00:53 2024 GMT
            Not After : Mar  4 18:05:53 2025 GMT
        Subject: CN=1F64D870016020E9A0D35AC6948D48B0F2D20BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:e4:d8:dd:36:95:2c:54:c2:f7:38:b5:e7:
                    0a:b1:f1:e5:e2:3d:f5:78:cc:9f:e0:2a:dc:90:65:
                    3a:8b:ed:ef:09:28:b5:37:e4:e1:52:87:80:1f:c2:
                    a3:ac:ec:95:3e:b5:29:55:23:85:89:a3:89:fc:ab:
                    55:ee:b7:1d:d0:f1:42:f9:df:54:e5:71:e9:d9:34:
                    7a:4e:fa:c2:81:3b:dc:84:dc:98:9f:d0:82:f7:7d:
                    f4:22:e1:63:17:21:57:0f:d0:79:4f:c8:9b:bd:2d:
                    61:fb:e3:39:5c:f7:76:f6:21:c4:20:92:66:71:5d:
                    c2:55:91:7a:52:bd:57:eb:b1:38:b6:9c:5b:cf:38:
                    08:63:93:fc:b8:7b:31:70:e8:da:56:da:19:fb:4a:
                    43:09:f0:3e:72:e1:66:05:2f:10:04:f2:29:39:1b:
                    c9:e1:ee:75:51:ca:fc:91:5d:9f:eb:b1:1e:15:38:
                    8b:e4:d5:ca:91:00:8f:df:71:ea:a7:57:6a:5d:4b:
                    51:21:32:0b:e4:de:6a:4f:32:4b:45:8d:f0:cb:e8:
                    47:2a:b3:75:45:95:fa:43:42:a4:c4:e2:99:ae:28:
                    fa:13:66:37:f8:19:19:46:6d:f5:14:50:c2:12:fc:
                    a1:7e:09:79:cc:a5:f4:b9:08:7a:df:a3:8b:81:0c:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:64:D8:70:01:60:20:E9:A0:D3:5A:C6:94:8D:48:B0:F2:D2:0B:D9
            X509v3 Authority Key Identifier:
                keyid:9B:48:C7:C3:7E:A3:41:6F:0E:22:63:90:1D:56:83:83:5F:4F:D5:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/323830333a316336303a3a2f33322d3438203d3e203532333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:4b:ab:e9:52:15:e1:73:f7:03:6f:f6:83:f3:89:d1:b0:9c:
         26:36:4d:a1:ce:ad:25:cf:53:01:77:17:ee:e1:21:5f:82:ff:
         31:69:87:dc:cc:48:93:75:41:14:51:36:b7:72:78:22:d9:29:
         be:6f:39:fe:dd:04:b6:09:53:40:1a:d6:dc:88:23:b7:f4:15:
         3c:a9:f7:ed:6a:c2:cd:8a:52:de:02:09:a4:7f:ff:93:af:22:
         aa:86:58:d0:93:fb:75:38:71:e2:fb:fa:03:6b:a0:bf:77:ee:
         37:21:0b:c3:51:34:a7:0d:7a:a3:ad:8a:86:0c:27:2b:05:51:
         2b:e3:65:93:df:7e:dc:cf:7a:46:19:03:23:05:89:74:f7:39:
         f0:e6:59:73:04:70:13:89:7e:5f:e1:82:bf:bc:5a:8c:6e:01:
         00:40:4d:56:2d:10:b9:57:d0:9c:f8:f9:ae:7c:7b:ec:a5:d9:
         bc:0a:63:82:f5:57:f4:66:4b:fb:c1:75:9d:86:8b:68:5f:b1:
         2b:cf:e5:9b:15:b8:05:a3:ea:e8:69:50:45:81:6e:62:26:c2:
         ac:01:71:2a:4a:52:64:81:98:89:d0:0b:5b:56:f3:36:a8:cb:
         06:4b:1f:5a:78:2e:6a:71:a1:96:bd:9f:f5:41:59:ad:1b:d6:
         b1:e8:d3:07
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUEDIvh/lA5840loYA66QkGPRiOIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI0OEM3QzM3RUEzNDE2RjBFMjI2MzkwMUQ1NjgzODM1
RjRGRDVDNzAeFw0yNDAzMDUxODAwNTNaFw0yNTAzMDQxODA1NTNaMDMxMTAvBgNV
BAMTKDFGNjREODcwMDE2MDIwRTlBMEQzNUFDNjk0OEQ0OEIwRjJEMjBCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5+TY3TaVLFTC9zi15wqx8eXi
PfV4zJ/gKtyQZTqL7e8JKLU35OFSh4AfwqOs7JU+tSlVI4WJo4n8q1Xutx3Q8UL5
31TlcenZNHpO+sKBO9yE3Jif0IL3ffQi4WMXIVcP0HlPyJu9LWH74zlc93b2IcQg
kmZxXcJVkXpSvVfrsTi2nFvPOAhjk/y4ezFw6NpW2hn7SkMJ8D5y4WYFLxAE8ik5
G8nh7nVRyvyRXZ/rsR4VOIvk1cqRAI/fceqnV2pdS1EhMgvk3mpPMktFjfDL6Ecq
s3VFlfpDQqTE4pmuKPoTZjf4GRlGbfUUUMIS/KF+CXnMpfS5CHrfo4uBDBr/AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUH2TYcAFgIOmg01rGlI1IsPLSC9kwHwYDVR0j
BBgwFoAUm0jHw36jQW8OImOQHVaDg19P1ccwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MkUzMTY3MEM3QjVBQTJCODBFQjQ4QkRBREU4REJDMzlG
ODIyN0ExRUFCM0JCMkNDNjM4QUEwQzI1MjlCOUI4LzAvOUI0OEM3QzM3RUEzNDE2
RjBFMjI2MzkwMUQ1NjgzODM1RjRGRDVDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QjQ4QzdDMzdFQTM0MTZGMEUy
MjYzOTAxRDU2ODM4MzVGNEZENUM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDJFMzE2NzBDN0I1QUEyQjgwRUI0OEJEQURFOERCQzM5RjgyMjdBMUVB
QjNCQjJDQzYzOEFBMEMyNTI5QjlCOC8wLzMyMzgzMDMzM2EzMTYzMzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAxxgMA0G
CSqGSIb3DQEBCwUAA4IBAQASS6vpUhXhc/cDb/aD84nRsJwmNk2hzq0lz1MBdxfu
4SFfgv8xaYfczEiTdUEUUTa3cngi2Sm+bzn+3QS2CVNAGtbciCO39BU8qfftasLN
ilLeAgmkf/+TryKqhljQk/t1OHHi+/oDa6C/d+43IQvDUTSnDXqjrYqGDCcrBVEr
42WT337cz3pGGQMjBYl09znw5llzBHATiX5f4YK/vFqMbgEAQE1WLRC5V9Cc+Pmu
fHvspdm8CmOC9Vf0Zkv7wXWdhotoX7Erz+WbFbgFo+roaVBFgW5iJsKsAXEqSlJk
gZiJ0AtbVvM2qMsGSx9aeC5qcaGWvZ/1QVmtG9ax6NMH
-----END CERTIFICATE-----