Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/323830333a326238303a3a2f33322d3332203d3e203132303636.roa
File:                     323830333a326238303a3a2f33322d3332203d3e203132303636.roa (raw, json)
Hash identifier:          TSfct50rs640+WM0Tkqu0LSZfXADsIxKHQImm7E0N+U=
Subject key identifier:   6A:8F:FF:FA:71:48:8F:B0:BC:D6:9F:EF:EE:24:7B:6C:C4:7A:AA:0F
Certificate issuer:       /CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
Certificate serial:       6383447E482A6C0B3AD17E08953F01B67339BA8E
Authority key identifier: BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/323830333a326238303a3a2f33322d3332203d3e203132303636.roa
Signing time:             Tue 05 Mar 2024 17:52:46 +0000
ROA not before:           Tue 05 Mar 2024 17:47:46 +0000
ROA not after:            Tue 04 Mar 2025 17:52:46 +0000
asID:                     12066
IP address blocks:        2803:2b80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:83:44:7e:48:2a:6c:0b:3a:d1:7e:08:95:3f:01:b6:73:39:ba:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
        Validity
            Not Before: Mar  5 17:47:46 2024 GMT
            Not After : Mar  4 17:52:46 2025 GMT
        Subject: CN=6A8FFFFA71488FB0BCD69FEFEE247B6CC47AAA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:3e:c7:44:40:da:51:fc:97:fa:c3:82:cd:
                    8c:0f:ed:4f:af:15:6c:94:37:23:5f:97:88:16:6e:
                    65:d0:53:44:79:36:e0:a3:84:e2:79:fe:3a:9f:d4:
                    0a:31:4e:87:9a:a3:3b:b5:91:44:b1:8a:df:5f:74:
                    4e:24:45:b4:8d:37:df:39:55:48:93:8e:82:0c:e8:
                    05:3d:8c:9e:ae:bd:13:17:5c:72:b5:53:c8:0b:14:
                    ec:62:cd:c2:8b:21:26:60:1d:83:44:0f:7b:70:a7:
                    88:64:12:56:72:c7:c5:1d:22:1f:30:1d:02:66:db:
                    ab:8b:48:4a:cf:11:e0:47:f7:31:c7:c2:59:4f:46:
                    d3:6c:c7:ae:e1:c1:da:f7:d1:c2:89:db:02:d2:8f:
                    72:b4:f6:46:40:6f:9f:44:41:15:ff:c0:7a:1c:f8:
                    9f:a4:4b:33:0a:69:e9:8b:2d:80:7e:94:d1:1e:8f:
                    3e:79:85:44:22:06:99:4f:e6:5d:bd:4d:cf:c9:2b:
                    70:a2:56:10:32:62:d8:d2:38:07:39:83:28:0e:09:
                    d6:56:21:d9:ad:ce:85:68:0f:6c:0a:f9:28:93:65:
                    e6:2b:07:39:dc:66:c8:f5:c1:d0:4e:06:fb:24:4f:
                    01:61:7e:bc:34:66:78:1b:1e:f6:7a:fd:54:40:86:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8F:FF:FA:71:48:8F:B0:BC:D6:9F:EF:EE:24:7B:6C:C4:7A:AA:0F
            X509v3 Authority Key Identifier:
                keyid:BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/323830333a326238303a3a2f33322d3332203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:2c:f4:c6:5e:d4:95:a3:c6:d0:f2:23:01:c3:5a:2f:fa:
         2e:ad:d8:d8:e7:d3:0a:cd:e9:19:7c:c3:0f:25:50:34:e0:89:
         45:a5:1c:b3:c0:ca:75:1c:6a:7f:b5:a0:37:9e:d8:33:6a:55:
         b2:aa:ed:6f:49:bb:92:5b:5c:9a:56:b7:47:d9:38:d9:52:b6:
         a8:28:29:92:c7:b3:75:e2:76:59:af:3a:e3:49:eb:79:48:c3:
         a4:e1:67:50:dd:cf:f6:f4:09:ae:9e:9d:c7:6f:8f:12:10:4c:
         bb:82:45:e9:25:43:cc:16:6b:7f:4e:b8:de:c2:d1:05:dc:83:
         b2:6b:df:c9:75:04:af:ee:d8:60:79:41:38:8d:a9:87:5f:c1:
         15:d0:a7:31:ba:d5:40:d9:58:59:6b:ce:04:88:2d:48:d9:26:
         f0:c9:a2:e3:68:f6:1f:69:70:50:ce:16:e4:78:43:85:a3:cc:
         1a:2b:6d:8c:54:51:9a:48:b1:1c:05:9c:fb:35:d4:39:e6:7c:
         9a:4c:86:ed:82:40:63:c5:ca:24:4e:02:d5:c7:4d:00:13:53:
         13:b8:f2:2e:0c:dc:f9:06:09:e4:dc:ec:73:38:4a:0e:76:aa:
         3c:4c:a8:32:6d:cc:6c:b0:05:8f:06:78:c0:c9:48:b4:2c:03:
         e9:44:02:46
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUY4NEfkgqbAs60X4IlT8BtnM5uo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkExNTU1RjU2RjFFRTlDRUNBNzZCM0FENUQyM0VFODI5
RDAwNkQ5ODAeFw0yNDAzMDUxNzQ3NDZaFw0yNTAzMDQxNzUyNDZaMDMxMTAvBgNV
BAMTKDZBOEZGRkZBNzE0ODhGQjBCQ0Q2OUZFRkVFMjQ3QjZDQzQ3QUFBMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9z7HREDaUfyX+sOCzYwP7U+v
FWyUNyNfl4gWbmXQU0R5NuCjhOJ5/jqf1AoxToeaozu1kUSxit9fdE4kRbSNN985
VUiTjoIM6AU9jJ6uvRMXXHK1U8gLFOxizcKLISZgHYNED3twp4hkElZyx8UdIh8w
HQJm26uLSErPEeBH9zHHwllPRtNsx67hwdr30cKJ2wLSj3K09kZAb59EQRX/wHoc
+J+kSzMKaemLLYB+lNEejz55hUQiBplP5l29Tc/JK3CiVhAyYtjSOAc5gygOCdZW
IdmtzoVoD2wK+SiTZeYrBzncZsj1wdBOBvskTwFhfrw0ZngbHvZ6/VRAhlRbAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUao//+nFIj7C81p/v7iR7bMR6qg8wHwYDVR0j
BBgwFoAUuhVV9W8e6c7KdrOtXSPugp0AbZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUU3QkREQjgwRkM1RTlERTIwNjI0RTkzRTdGNjU2NjhG
OThCNDM2OUNCMTYxNkFBNDc1MzQ0MjM3QTg3RkY0LzAvQkExNTU1RjU2RjFFRTlD
RUNBNzZCM0FENUQyM0VFODI5RDAwNkQ5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQTE1NTVGNTZGMUVFOUNFQ0E3
NkIzQUQ1RDIzRUU4MjlEMDA2RDk4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFFN0JEREI4MEZDNUU5REUyMDYyNEU5M0U3RjY1NjY4Rjk4QjQzNjlD
QjE2MTZBQTQ3NTM0NDIzN0E4N0ZGNC8wLzMyMzgzMDMzM2EzMjYyMzgzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzIzMDM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAyuAMA0G
CSqGSIb3DQEBCwUAA4IBAQBa1yz0xl7UlaPG0PIjAcNaL/ourdjY59MKzekZfMMP
JVA04IlFpRyzwMp1HGp/taA3ntgzalWyqu1vSbuSW1yaVrdH2TjZUraoKCmSx7N1
4nZZrzrjSet5SMOk4WdQ3c/29Amunp3Hb48SEEy7gkXpJUPMFmt/TrjewtEF3IOy
a9/JdQSv7thgeUE4jamHX8EV0KcxutVA2VhZa84EiC1I2SbwyaLjaPYfaXBQzhbk
eEOFo8waK22MVFGaSLEcBZz7NdQ55nyaTIbtgkBjxcokTgLVx00AE1MTuPIuDNz5
Bgnk3OxzOEoOdqo8TKgybcxssAWPBnjAyUi0LAPpRAJG
-----END CERTIFICATE-----