Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/323830333a3231303a3a2f33322d3634203d3e20323731383839.roa
File:                     323830333a3231303a3a2f33322d3634203d3e20323731383839.roa (raw, json)
Hash identifier:          1aPyryITLsPgBM3J0Nr/KDqpNCkpJdU+Qh1bxn4n2Bs=
Subject key identifier:   5B:DC:FA:98:B7:A3:73:D7:49:2C:FD:89:98:7C:22:6D:D1:36:C7:C6
Certificate issuer:       /CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
Certificate serial:       14ADDDB6BB0C90DC7C5D4C75EEFBC1A2D6F0A0DF
Authority key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/323830333a3231303a3a2f33322d3634203d3e20323731383839.roa
Signing time:             Tue 05 Mar 2024 18:15:21 +0000
ROA not before:           Tue 05 Mar 2024 18:10:21 +0000
ROA not after:            Tue 04 Mar 2025 18:15:21 +0000
asID:                     271889
IP address blocks:        2803:210::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ad:dd:b6:bb:0c:90:dc:7c:5d:4c:75:ee:fb:c1:a2:d6:f0:a0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Validity
            Not Before: Mar  5 18:10:21 2024 GMT
            Not After : Mar  4 18:15:21 2025 GMT
        Subject: CN=5BDCFA98B7A373D7492CFD89987C226DD136C7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:3e:d5:8a:e4:10:92:50:f0:3b:14:ed:27:
                    ec:89:a4:13:67:a2:61:6e:7a:04:16:6c:b3:c2:f3:
                    c9:fc:ef:be:37:6d:2f:c7:41:7a:83:2b:fe:02:db:
                    36:1c:bd:35:2e:c2:54:20:ae:db:04:d8:3c:4e:d1:
                    f3:36:34:40:b7:da:c1:d1:50:cf:85:f7:57:70:4e:
                    45:6d:97:00:16:24:7c:f0:37:fd:96:b3:02:a4:5b:
                    e7:9e:33:2c:aa:a2:77:02:fd:ac:03:9d:5a:4b:53:
                    89:e3:4e:ed:86:90:81:c0:51:59:4f:21:ba:7f:8c:
                    7e:99:17:15:87:31:b8:f1:fc:fd:e9:8e:f3:6a:08:
                    57:ed:84:cf:50:39:f7:af:18:eb:0e:f0:79:aa:d5:
                    62:b4:5c:7f:b4:fe:48:8c:f2:7c:07:96:e5:0a:b7:
                    84:d5:0b:89:05:aa:05:0f:53:dd:bd:51:b7:0f:af:
                    f5:5d:b6:e6:c1:f7:cb:be:eb:de:0d:8a:b0:c7:6d:
                    58:36:db:30:ac:a6:6c:b9:0f:11:5f:9c:c1:ba:a0:
                    5d:84:ea:b2:ca:d4:f8:13:60:57:5a:c0:34:89:6b:
                    4f:83:e6:4a:23:65:ee:83:8b:fb:f3:7a:19:97:de:
                    1e:8e:55:3e:13:c2:3a:69:7a:e3:16:af:5a:ad:67:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DC:FA:98:B7:A3:73:D7:49:2C:FD:89:98:7C:22:6D:D1:36:C7:C6
            X509v3 Authority Key Identifier:
                keyid:E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/323830333a3231303a3a2f33322d3634203d3e20323731383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:210::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:c4:e9:1e:84:ef:d3:cc:32:4f:83:c5:23:2b:1e:d7:42:
         35:79:82:47:71:03:8a:67:b8:8f:b7:e7:50:da:92:48:1d:db:
         7a:a8:1e:a2:8d:c0:4b:f5:29:a5:09:a0:ef:e0:f3:2d:dc:da:
         2e:e9:eb:8f:a1:b0:e6:2b:8c:73:16:0d:70:2f:11:6b:ac:56:
         a2:f5:32:7d:f2:95:ea:4a:0d:7c:6b:42:79:92:10:15:b6:80:
         90:1e:f4:af:90:90:3c:f9:6f:27:ea:be:3a:5c:3d:53:3d:c9:
         0f:ca:a7:7f:a8:0e:5d:35:60:9f:36:78:2a:e6:b3:2e:ec:a2:
         53:22:ce:a0:34:e6:8b:40:6e:bb:d5:7f:12:3b:a7:8e:a8:90:
         60:20:a0:e4:4a:9a:c9:1d:17:0d:da:5e:c2:96:18:f6:bb:b0:
         9c:b7:1e:e1:40:2c:b3:d7:af:17:77:2b:9a:d1:0a:77:c9:7c:
         2d:a4:7a:4b:25:75:1b:9d:42:d7:dc:ba:51:67:67:5a:98:7c:
         7f:12:d9:17:49:78:a0:ea:08:a3:b9:88:0a:ea:37:19:ae:ec:
         43:08:55:37:cc:0d:bf:f3:32:22:03:40:d4:b4:89:a1:9b:02:
         6c:f5:c4:e2:ef:77:6c:a0:93:a2:bf:65:8f:9a:89:a6:17:30:
         7f:9c:6e:f1
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUFK3dtrsMkNx8XUx17vvBotbwoN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ2ODBFN0RCNUUyNjYxMDI5REFERjk1RjE4RURDQ0Qz
QTE5NEIwMjAeFw0yNDAzMDUxODEwMjFaFw0yNTAzMDQxODE1MjFaMDMxMTAvBgNV
BAMTKDVCRENGQTk4QjdBMzczRDc0OTJDRkQ4OTk4N0MyMjZERDEzNkM3QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS9j7ViuQQklDwOxTtJ+yJpBNn
omFuegQWbLPC88n87743bS/HQXqDK/4C2zYcvTUuwlQgrtsE2DxO0fM2NEC32sHR
UM+F91dwTkVtlwAWJHzwN/2WswKkW+eeMyyqoncC/awDnVpLU4njTu2GkIHAUVlP
Ibp/jH6ZFxWHMbjx/P3pjvNqCFfthM9QOfevGOsO8Hmq1WK0XH+0/kiM8nwHluUK
t4TVC4kFqgUPU929UbcPr/VdtubB98u+694NirDHbVg22zCspmy5DxFfnMG6oF2E
6rLK1PgTYFdawDSJa0+D5kojZe6Di/vzehmX3h6OVT4TwjppeuMWr1qtZ8EvAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUW9z6mLejc9dJLP2JmHwibdE2x8YwHwYDVR0j
BBgwFoAU5GgOfbXiZhAp2t+V8Y7czToZSwIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Q0I5ODQ4RTk4OTM3MjVBN0QyMkUwQ0JDRTlCOUVEQ0E3
MEFDNUY1QjJERTI4QzY0MzUyQjVEN0JEQ0Q0Njk2LzAvRTQ2ODBFN0RCNUUyNjYx
MDI5REFERjk1RjE4RURDQ0QzQTE5NEIwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDY4MEU3REI1RTI2NjEwMjlE
QURGOTVGMThFRENDRDNBMTk0QjAyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUNCOTg0OEU5ODkzNzI1QTdEMjJFMENCQ0U5QjlFRENBNzBBQzVGNUIy
REUyOEM2NDM1MkI1RDdCRENENDY5Ni8wLzMyMzgzMDMzM2EzMjMxMzAzYTNhMmYz
MzMyMmQzNjM0MjAzZDNlMjAzMjM3MzEzODM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwIQMA0G
CSqGSIb3DQEBCwUAA4IBAQA+tMTpHoTv08wyT4PFIyse10I1eYJHcQOKZ7iPt+dQ
2pJIHdt6qB6ijcBL9SmlCaDv4PMt3Nou6euPobDmK4xzFg1wLxFrrFai9TJ98pXq
Sg18a0J5khAVtoCQHvSvkJA8+W8n6r46XD1TPckPyqd/qA5dNWCfNngq5rMu7KJT
Is6gNOaLQG671X8SO6eOqJBgIKDkSprJHRcN2l7Clhj2u7Cctx7hQCyz168Xdyua
0Qp3yXwtpHpLJXUbnULX3LpRZ2damHx/EtkXSXig6gijuYgK6jcZruxDCFU3zA2/
8zIiA0DUtImhmwJs9cTi73dsoJOiv2WPmommFzB/nG7x
-----END CERTIFICATE-----