Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/323830333a336530303a3a2f33322d3332203d3e203532343134.roa
File:                     323830333a336530303a3a2f33322d3332203d3e203532343134.roa (raw, json)
Hash identifier:          +xk+fTQ8vlFL86zW4RgCXzf2BszIgxkbPwbPxWJsz98=
Subject key identifier:   53:BA:72:25:66:6D:E1:49:5B:5D:AB:CC:FD:2C:24:87:01:63:4A:27
Certificate issuer:       /CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
Certificate serial:       5333F243F0C7D70CA37FC47D7AD13AE74003F940
Authority key identifier: 93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/323830333a336530303a3a2f33322d3332203d3e203532343134.roa
Signing time:             Tue 05 Mar 2024 18:13:08 +0000
ROA not before:           Tue 05 Mar 2024 18:08:08 +0000
ROA not after:            Tue 04 Mar 2025 18:13:08 +0000
asID:                     52414
IP address blocks:        2803:3e00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:33:f2:43:f0:c7:d7:0c:a3:7f:c4:7d:7a:d1:3a:e7:40:03:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
        Validity
            Not Before: Mar  5 18:08:08 2024 GMT
            Not After : Mar  4 18:13:08 2025 GMT
        Subject: CN=53BA7225666DE1495B5DABCCFD2C248701634A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:d7:c2:62:a1:4a:d5:c0:52:03:64:c2:c8:
                    e7:79:b3:cb:01:e0:f1:af:c0:7a:32:f7:36:cf:d3:
                    4d:da:46:42:ab:b0:f5:21:ba:39:cc:b1:ba:db:2b:
                    1f:be:9e:b7:a7:6b:b9:c0:9b:71:a1:cd:4d:cd:ba:
                    e7:6e:f3:ec:d2:fc:e9:0d:f5:f1:4c:fe:2b:f9:00:
                    a4:b7:e9:4f:ab:73:d2:dc:b3:fa:17:fe:8e:3a:d3:
                    74:6b:f4:5f:5d:1b:d3:eb:7e:96:a9:d6:f9:58:da:
                    9f:7f:13:bf:7c:4a:d0:fb:8a:a6:8c:04:43:9f:82:
                    99:48:33:ef:67:e7:21:87:83:1a:23:9f:55:c8:61:
                    f3:0d:9e:86:a2:e4:ef:cc:e0:f6:55:23:e5:b1:93:
                    3a:7b:9b:3f:70:4f:41:0d:b0:58:5c:45:a3:c6:4a:
                    d8:f0:ce:b4:9f:29:8b:e1:ca:2a:a5:f0:c3:ad:ad:
                    d6:52:4e:f1:d6:39:51:a4:7b:4a:b4:6f:ab:bf:80:
                    a7:24:7a:fa:00:3b:ed:9a:da:9f:fe:f2:a2:fd:64:
                    d2:eb:dd:7b:a2:61:37:11:8e:ee:45:6c:3e:09:17:
                    4d:52:ca:e6:e7:e0:68:2f:57:56:5a:ca:cb:17:df:
                    1b:0a:bd:eb:14:cc:ce:d7:ac:68:3b:13:8f:67:c8:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BA:72:25:66:6D:E1:49:5B:5D:AB:CC:FD:2C:24:87:01:63:4A:27
            X509v3 Authority Key Identifier:
                keyid:93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/323830333a336530303a3a2f33322d3332203d3e203532343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:13:9b:68:77:3b:1c:be:8a:bf:d7:6b:eb:6b:70:35:c3:17:
         fb:24:14:fc:9a:b2:7b:f3:ba:f8:49:17:a2:fd:7d:00:56:bf:
         21:ed:c3:a9:df:e5:99:73:12:fe:88:eb:78:6e:50:37:60:6e:
         4e:c8:15:e6:ff:8d:af:d7:55:05:ae:4e:30:6d:cf:ca:3b:94:
         33:30:20:2f:7d:b5:2b:9b:b0:f6:ad:a8:96:f3:b2:ba:ba:98:
         31:5e:57:69:10:d1:98:e5:21:0f:6c:ee:d5:c9:2b:f1:0c:df:
         b4:7e:66:97:1f:69:19:b1:af:4e:28:ee:35:e5:e6:98:02:72:
         a4:ab:53:e8:38:77:d0:19:e0:09:12:7a:7e:4d:e7:67:70:78:
         80:c8:c6:fd:57:ae:6c:2c:09:5a:99:26:79:5b:40:14:b3:fc:
         5a:b4:c7:ed:bc:97:7d:30:59:68:fc:37:65:91:73:57:57:e0:
         ed:76:02:f2:05:80:56:cf:bc:22:2d:1a:4d:59:cc:b8:e2:2b:
         ad:e7:b1:8c:c5:99:7e:09:24:5b:c1:ee:c0:43:be:94:01:9b:
         1a:1e:c6:26:0b:d9:94:b4:10:de:77:91:85:51:e2:8a:e7:aa:
         57:41:87:06:18:ec:fe:5e:10:6d:1f:23:66:8e:e5:65:be:5b:
         fa:c7:2b:ab
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUUzPyQ/DH1wyjf8R9etE650AD+UAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNENDFCMzk5MTU0MzMxQzRDMEFBMEM0RUJDMTk0QUEw
QTVERUVERTAeFw0yNDAzMDUxODA4MDhaFw0yNTAzMDQxODEzMDhaMDMxMTAvBgNV
BAMTKDUzQkE3MjI1NjY2REUxNDk1QjVEQUJDQ0ZEMkMyNDg3MDE2MzRBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChJ9fCYqFK1cBSA2TCyOd5s8sB
4PGvwHoy9zbP003aRkKrsPUhujnMsbrbKx++nrena7nAm3GhzU3Nuudu8+zS/OkN
9fFM/iv5AKS36U+rc9Lcs/oX/o4603Rr9F9dG9Prfpap1vlY2p9/E798StD7iqaM
BEOfgplIM+9n5yGHgxojn1XIYfMNnoai5O/M4PZVI+Wxkzp7mz9wT0ENsFhcRaPG
StjwzrSfKYvhyiql8MOtrdZSTvHWOVGke0q0b6u/gKckevoAO+2a2p/+8qL9ZNLr
3XuiYTcRju5FbD4JF01Syubn4GgvV1ZayssX3xsKvesUzM7XrGg7E49nyJldAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUU7pyJWZt4UlbXavM/SwkhwFjSicwHwYDVR0j
BBgwFoAUk9QbOZFUMxxMCqDE68GUqgpd7t4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80N0ZEMjE5NDE5RkU0RjU4MjBCNTFBNjNFM0JERDRFOUFF
QTQyNDAzOTE1MTBDRDY1M0ZENkIxMUVBQ0MxRUQwLzAvOTNENDFCMzk5MTU0MzMx
QzRDMEFBMEM0RUJDMTk0QUEwQTVERUVERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0Q0MUIzOTkxNTQzMzFDNEMw
QUEwQzRFQkMxOTRBQTBBNURFRURFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDdGRDIxOTQxOUZFNEY1ODIwQjUxQTYzRTNCREQ0RTlBRUE0MjQwMzkx
NTEwQ0Q2NTNGRDZCMTFFQUNDMUVEMC8wLzMyMzgzMDMzM2EzMzY1MzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNDMxMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAz4AMA0G
CSqGSIb3DQEBCwUAA4IBAQC1E5todzscvoq/12vra3A1wxf7JBT8mrJ787r4SRei
/X0AVr8h7cOp3+WZcxL+iOt4blA3YG5OyBXm/42v11UFrk4wbc/KO5QzMCAvfbUr
m7D2raiW87K6upgxXldpENGY5SEPbO7VySvxDN+0fmaXH2kZsa9OKO415eaYAnKk
q1PoOHfQGeAJEnp+TedncHiAyMb9V65sLAlamSZ5W0AUs/xatMftvJd9MFlo/Ddl
kXNXV+DtdgLyBYBWz7wiLRpNWcy44iut57GMxZl+CSRbwe7AQ76UAZsaHsYmC9mU
tBDed5GFUeKK56pXQYcGGOz+XhBtHyNmjuVlvlv6xyur
-----END CERTIFICATE-----