Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/323830333a663130303a3a2f33322d3332203d3e203532323535.roa
File:                     323830333a663130303a3a2f33322d3332203d3e203532323535.roa (raw, json)
Hash identifier:          qb3xA9BtISwBIQnYEFcfiBl8YJipKDDthdJaRY5nefM=
Subject key identifier:   05:E4:FA:76:B2:0D:A2:3F:F3:FA:05:CD:39:25:71:4C:3C:5A:CB:84
Certificate issuer:       /CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
Certificate serial:       70247C54BCF485B69F759B19E4EE77005F716DB3
Authority key identifier: 07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/323830333a663130303a3a2f33322d3332203d3e203532323535.roa
Signing time:             Tue 05 Mar 2024 17:52:54 +0000
ROA not before:           Tue 05 Mar 2024 17:47:54 +0000
ROA not after:            Tue 04 Mar 2025 17:52:54 +0000
asID:                     52255
IP address blocks:        2803:f100::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:24:7c:54:bc:f4:85:b6:9f:75:9b:19:e4:ee:77:00:5f:71:6d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
        Validity
            Not Before: Mar  5 17:47:54 2024 GMT
            Not After : Mar  4 17:52:54 2025 GMT
        Subject: CN=05E4FA76B20DA23FF3FA05CD3925714C3C5ACB84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:04:8c:85:96:4b:a2:fe:78:d5:1c:32:a8:
                    f3:b2:88:23:f5:e7:79:c9:2c:d2:4e:5a:b9:db:dd:
                    62:84:3e:3b:db:27:b9:7d:b2:62:f4:be:dc:1d:47:
                    9f:ab:0a:ff:c7:78:f6:09:ac:3f:90:b5:98:36:61:
                    c5:7a:2e:d7:51:e1:0b:58:ca:46:96:99:06:2f:bf:
                    29:26:40:c0:8a:7d:a7:0b:b4:18:09:5a:63:4b:76:
                    98:76:67:27:9c:10:94:23:57:1b:39:c0:f1:18:cc:
                    c8:ea:43:e5:c5:74:49:60:06:f8:28:36:0d:71:30:
                    a0:f4:c9:d5:38:21:b3:d1:2d:b8:83:33:ca:c3:c5:
                    50:d8:03:e9:fd:68:1c:4f:63:df:29:c3:0d:82:6f:
                    3d:3c:78:a8:12:35:56:ca:ef:63:4e:da:b3:10:ed:
                    2c:fb:1f:e0:e4:e9:ab:5a:40:d3:d3:5c:3e:7e:d1:
                    f9:ea:56:96:65:3d:81:0e:f3:22:a3:8b:bf:ee:db:
                    5f:df:61:b9:39:c5:55:83:34:05:b6:41:bf:39:fc:
                    a9:12:51:4d:b1:7a:2d:e5:13:98:8d:1e:61:22:8e:
                    af:5d:d6:c4:a9:97:2c:d2:62:af:31:56:63:71:e1:
                    72:cb:f4:f7:8e:79:7e:f2:fc:97:92:08:99:1c:e1:
                    aa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E4:FA:76:B2:0D:A2:3F:F3:FA:05:CD:39:25:71:4C:3C:5A:CB:84
            X509v3 Authority Key Identifier:
                keyid:07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/323830333a663130303a3a2f33322d3332203d3e203532323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f100::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:c9:8a:10:83:66:11:c3:15:ed:31:bb:fb:74:41:cc:1a:a7:
         79:e3:31:84:61:11:0c:64:1d:d1:ec:73:61:04:db:b5:57:4d:
         3c:1a:e6:5e:a5:3f:97:53:c0:59:00:a2:9a:f4:bc:12:03:1b:
         1c:a6:fc:f1:6a:f2:20:7d:25:6f:06:64:45:c8:74:3f:09:f4:
         31:e2:c8:a8:59:90:f0:e6:ae:0e:9b:c2:60:10:4d:74:27:f3:
         a8:0a:81:65:dc:68:7b:c8:f5:2a:22:cd:b9:83:b7:ba:f0:f1:
         4f:ea:1e:14:be:e5:30:0f:f4:83:e5:7f:4d:54:22:3f:81:73:
         ae:9a:7e:cd:43:36:d9:2c:9d:a7:79:0f:87:fb:48:3d:ff:12:
         c3:45:27:30:db:a4:e2:eb:76:39:e3:d2:0e:64:1f:7e:2a:96:
         86:af:6e:71:7d:cc:bc:fc:2b:42:92:66:78:b2:8d:f6:87:c7:
         8a:35:38:4a:f1:85:bc:bd:d8:84:ad:13:19:37:f5:09:4e:0d:
         74:08:6e:11:d8:1a:f9:03:07:75:df:b1:5e:b2:7e:7b:36:00:
         ac:02:d2:4b:0d:57:48:23:06:4f:30:4b:b5:29:e1:e5:e6:5a:
         bc:ae:b2:04:6c:ab:ad:2d:87:2b:26:ad:2d:1e:eb:08:b3:4b:
         ec:5b:49:1e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUcCR8VLz0hbafdZsZ5O53AF9xbbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdBMzkyQjJBODE5MTNEMjdGMDRCMTZFMzNEQTc5OEVB
NUU0QjhBMzAeFw0yNDAzMDUxNzQ3NTRaFw0yNTAzMDQxNzUyNTRaMDMxMTAvBgNV
BAMTKDA1RTRGQTc2QjIwREEyM0ZGM0ZBMDVDRDM5MjU3MTRDM0M1QUNCODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8awSMhZZLov541RwyqPOyiCP1
53nJLNJOWrnb3WKEPjvbJ7l9smL0vtwdR5+rCv/HePYJrD+QtZg2YcV6LtdR4QtY
ykaWmQYvvykmQMCKfacLtBgJWmNLdph2ZyecEJQjVxs5wPEYzMjqQ+XFdElgBvgo
Ng1xMKD0ydU4IbPRLbiDM8rDxVDYA+n9aBxPY98pww2Cbz08eKgSNVbK72NO2rMQ
7Sz7H+Dk6ataQNPTXD5+0fnqVpZlPYEO8yKji7/u21/fYbk5xVWDNAW2Qb85/KkS
UU2xei3lE5iNHmEijq9d1sSplyzSYq8xVmNx4XLL9PeOeX7y/JeSCJkc4arZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUBeT6drINoj/z+gXNOSVxTDxay4QwHwYDVR0j
BBgwFoAUB6OSsqgZE9J/BLFuM9p5jqXkuKMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUUzRkFGOEI0ODE0OTg3OEZBNzJDNkM4Qjg1QTMxN0RE
MERBNjk2NjYwODM0REVBNTk3MjU0MjAwNTA2OTgzLzAvMDdBMzkyQjJBODE5MTNE
MjdGMDRCMTZFMzNEQTc5OEVBNUU0QjhBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wN0EzOTJCMkE4MTkxM0QyN0Yw
NEIxNkUzM0RBNzk4RUE1RTRCOEEzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFFM0ZBRjhCNDgxNDk4NzhGQTcyQzZDOEI4NUEzMTdERDBEQTY5NjY2
MDgzNERFQTU5NzI1NDIwMDUwNjk4My8wLzMyMzgzMDMzM2E2NjMxMzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA/EAMA0G
CSqGSIb3DQEBCwUAA4IBAQBzyYoQg2YRwxXtMbv7dEHMGqd54zGEYREMZB3R7HNh
BNu1V008GuZepT+XU8BZAKKa9LwSAxscpvzxavIgfSVvBmRFyHQ/CfQx4sioWZDw
5q4Om8JgEE10J/OoCoFl3Gh7yPUqIs25g7e68PFP6h4UvuUwD/SD5X9NVCI/gXOu
mn7NQzbZLJ2neQ+H+0g9/xLDRScw26Ti63Y549IOZB9+KpaGr25xfcy8/CtCkmZ4
so32h8eKNThK8YW8vdiErRMZN/UJTg10CG4R2Br5Awd137Fesn57NgCsAtJLDVdI
IwZPMEu1KeHl5lq8rrIEbKutLYcrJq0tHusIs0vsW0ke
-----END CERTIFICATE-----