Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a363030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a363030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          c+OQSG8WOTJYSy8CWd6FDGzoQPNOpv1RDGuxw+MkWFw=
Subject key identifier:   DB:BF:D3:87:CD:B6:09:85:ED:2A:65:50:0E:51:54:2B:07:9B:62:50
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       2ACDCDD32B4EF7AE6CA13AEFD0695BFFBC127A1A
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a363030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Fri 19 Apr 2024 12:20:00 +0000
ROA not before:           Fri 19 Apr 2024 12:15:00 +0000
ROA not after:            Fri 18 Apr 2025 12:20:00 +0000
asID:                     273142
IP address blocks:        2803:2c50:6000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cd:cd:d3:2b:4e:f7:ae:6c:a1:3a:ef:d0:69:5b:ff:bc:12:7a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Apr 19 12:15:00 2024 GMT
            Not After : Apr 18 12:20:00 2025 GMT
        Subject: CN=DBBFD387CDB60985ED2A65500E51542B079B6250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:13:f5:fe:77:de:cd:56:93:40:4f:18:91:
                    db:e1:20:c8:88:89:c0:bd:5b:69:9d:c7:3c:c5:3f:
                    c4:52:f7:27:15:92:83:8e:c7:eb:26:0f:13:49:36:
                    fd:35:65:f7:0a:a6:98:f5:d5:60:c8:f8:9e:9f:33:
                    a6:ff:14:8a:98:54:8e:12:c2:63:07:73:1d:d2:e5:
                    55:49:af:11:9e:ca:c9:52:aa:9d:62:e8:10:37:73:
                    ef:a8:08:46:03:ed:fb:91:54:21:05:b8:9d:f2:f5:
                    a6:11:e7:8d:76:0a:01:c2:7e:76:c8:8c:1b:85:6f:
                    39:69:74:3e:cf:78:a4:95:38:9c:8a:6f:9e:96:60:
                    da:17:47:af:48:f3:c6:d8:72:55:54:d2:06:7c:d3:
                    32:3f:da:93:3f:ae:ab:f2:df:dd:20:f4:7f:3e:e4:
                    1f:95:40:ff:64:84:d5:86:5b:14:f9:40:87:f8:e5:
                    c6:9d:a8:00:85:aa:e3:bf:81:33:40:69:84:9e:e6:
                    b3:b6:c8:6d:1b:c6:27:10:d7:53:3c:ad:09:0b:2b:
                    af:91:6c:18:85:7f:0b:cd:4b:dd:ee:c1:e7:ef:ad:
                    d6:5b:c8:42:be:80:2a:db:e4:d3:76:60:68:e0:14:
                    6b:42:46:39:31:91:33:37:ed:d3:ba:ea:3e:0f:ef:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BF:D3:87:CD:B6:09:85:ED:2A:65:50:0E:51:54:2B:07:9B:62:50
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a363030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:c9:aa:51:2c:ac:12:2d:29:cc:48:26:cd:6d:7d:fb:c9:fa:
         a8:04:bf:ae:48:b0:8f:f3:7e:a6:e9:a5:24:53:4f:1d:58:f0:
         eb:0b:ea:ce:a5:dd:2a:24:c1:ec:aa:a3:5f:58:47:af:20:c6:
         5d:6e:97:3c:6c:fe:11:40:4c:e0:c5:c9:e7:5c:63:29:66:00:
         d2:7b:f6:96:ad:21:11:40:b6:76:85:80:ea:54:33:a6:91:33:
         ca:b6:26:a0:e6:6a:4f:56:47:c6:84:fc:44:2a:08:72:63:13:
         eb:43:dc:ad:49:64:08:b5:28:53:fe:be:d4:0e:58:fd:ad:06:
         a2:65:ef:de:1e:a9:26:94:3a:10:56:d8:7a:97:78:de:25:a7:
         aa:e9:e6:6a:21:98:91:48:f3:c6:87:88:75:fa:bb:7a:08:a7:
         a3:09:17:5c:61:4d:2c:96:5e:07:98:b2:b4:03:6d:8a:91:cf:
         6d:f9:d7:79:f8:d9:56:b3:df:a3:85:14:91:e0:85:2f:a3:b7:
         eb:7a:b2:79:22:18:5a:e7:26:33:41:79:20:21:b9:37:12:4d:
         8e:c0:3a:ed:b6:9a:cb:07:93:7f:b3:61:da:6b:77:81:92:9e:
         58:b5:4d:00:34:b9:a9:77:10:5e:47:ed:04:f4:69:93:45:7a:
         77:ff:d4:a2
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUKs3N0ytO965soTrv0Glb/7wSehowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFCODEwM0RDRTg4RERERUFEQkFDMzA4NzlDNEE3ODVG
MTUxN0VFMjAeFw0yNDA0MTkxMjE1MDBaFw0yNTA0MTgxMjIwMDBaMDMxMTAvBgNV
BAMTKERCQkZEMzg3Q0RCNjA5ODVFRDJBNjU1MDBFNTE1NDJCMDc5QjYyNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ohP1/nfezVaTQE8YkdvhIMiI
icC9W2mdxzzFP8RS9ycVkoOOx+smDxNJNv01ZfcKppj11WDI+J6fM6b/FIqYVI4S
wmMHcx3S5VVJrxGeyslSqp1i6BA3c++oCEYD7fuRVCEFuJ3y9aYR5412CgHCfnbI
jBuFbzlpdD7PeKSVOJyKb56WYNoXR69I88bYclVU0gZ80zI/2pM/rqvy390g9H8+
5B+VQP9khNWGWxT5QIf45cadqACFquO/gTNAaYSe5rO2yG0bxicQ11M8rQkLK6+R
bBiFfwvNS93uwefvrdZbyEK+gCrb5NN2YGjgFGtCRjkxkTM37dO66j4P76lRAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU27/Th822CYXtKmVQDlFUKwebYlAwHwYDVR0j
BBgwFoAUQbgQPc6I3d6tusMIecSnhfFRfuIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTc4MjU1QUIzOTlEMURBNTM4QUQyRTA5QjMxMjkyRkZC
QkY0REE3NjY1NkQzOThFQ0JCRUUwRkNCRUYwOURFLzAvNDFCODEwM0RDRTg4RERE
RUFEQkFDMzA4NzlDNEE3ODVGMTUxN0VFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MUI4MTAzRENFODhERERFQURC
QUMzMDg3OUM0QTc4NUYxNTE3RUUyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3ODI1NUFCMzk5RDFEQTUzOEFEMkUwOUIzMTI5MkZGQkJGNERBNzY2
NTZEMzk4RUNCQkVFMEZDQkVGMDlERS8wLzMyMzgzMDMzM2EzMjYzMzUzMDNhMzYz
MDMwMzAzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMjM3MzMzMTM0MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoAyxQYDANBgkqhkiG9w0BAQsFAAOCAQEAesmqUSysEi0pzEgmzW19+8n6
qAS/rkiwj/N+pumlJFNPHVjw6wvqzqXdKiTB7KqjX1hHryDGXW6XPGz+EUBM4MXJ
51xjKWYA0nv2lq0hEUC2doWA6lQzppEzyrYmoOZqT1ZHxoT8RCoIcmMT60PcrUlk
CLUoU/6+1A5Y/a0GomXv3h6pJpQ6EFbYepd43iWnqunmaiGYkUjzxoeIdfq7egin
owkXXGFNLJZeB5iytANtipHPbfnXefjZVrPfo4UUkeCFL6O363qyeSIYWucmM0F5
ICG5NxJNjsA67baayweTf7Nh2mt3gZKeWLVNADS5qXcQXkftBPRpk0V6d//Uog==
-----END CERTIFICATE-----