Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a383030303a3a2f33362d3336203d3e20323733303031.roa
File:                     323830333a613563303a383030303a3a2f33362d3336203d3e20323733303031.roa (raw, json)
Hash identifier:          9b9sYJoLfjo8GCzmM9tttfTt2OGJh/Av6uQfdKMM3pk=
Subject key identifier:   D6:E3:09:8E:AD:F8:49:18:ED:9E:DF:07:2B:0D:CA:7A:8C:77:2A:63
Certificate issuer:       /CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
Certificate serial:       2A609B5B5941C7D9691A40D9FEA6D634B12A559E
Authority key identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a383030303a3a2f33362d3336203d3e20323733303031.roa
Signing time:             Tue 05 Mar 2024 17:46:02 +0000
ROA not before:           Tue 05 Mar 2024 17:41:02 +0000
ROA not after:            Tue 04 Mar 2025 17:46:02 +0000
asID:                     273001
IP address blocks:        2803:a5c0:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:60:9b:5b:59:41:c7:d9:69:1a:40:d9:fe:a6:d6:34:b1:2a:55:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
        Validity
            Not Before: Mar  5 17:41:02 2024 GMT
            Not After : Mar  4 17:46:02 2025 GMT
        Subject: CN=D6E3098EADF84918ED9EDF072B0DCA7A8C772A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:94:ed:10:7b:eb:c2:7f:b2:a6:25:c9:1c:
                    83:6d:84:fd:1d:ff:fb:24:71:5f:32:48:f7:12:37:
                    21:1f:9c:f7:84:c1:c8:17:d8:8c:02:56:70:8e:51:
                    c1:7c:cd:cd:ae:0c:8e:90:dc:17:bf:17:e3:e1:d1:
                    8c:58:8a:99:58:7f:2c:c1:a8:76:13:d6:66:57:83:
                    21:fa:8e:8b:1d:f2:73:6e:80:19:6e:c4:68:24:b8:
                    43:37:35:8a:39:fc:15:5f:3e:ca:23:fd:07:f5:40:
                    77:d1:4f:23:e7:3d:98:1a:3e:12:94:96:fb:36:c7:
                    bd:a7:17:76:57:51:8b:a7:44:24:40:e8:ef:83:9f:
                    30:2a:38:4d:c2:f9:8c:48:a1:33:15:04:06:53:31:
                    76:44:bd:5b:7a:a5:bb:5e:84:a4:08:dd:90:73:d0:
                    23:a6:3b:d6:92:26:f8:2b:79:d6:aa:c4:29:50:7f:
                    af:62:de:af:b2:52:b6:30:43:a5:56:9d:04:44:34:
                    a5:a8:2d:48:67:a6:a1:f9:bb:9e:a3:65:b9:43:99:
                    1b:8c:21:06:86:16:07:72:d8:05:a7:6e:d4:ea:b1:
                    a1:e6:2a:8f:45:45:d2:7a:0d:f9:6a:d1:6a:5a:e5:
                    22:f5:51:22:ce:eb:fe:6e:79:1f:6e:58:a0:e5:a5:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E3:09:8E:AD:F8:49:18:ED:9E:DF:07:2B:0D:CA:7A:8C:77:2A:63
            X509v3 Authority Key Identifier:
                keyid:2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/323830333a613563303a383030303a3a2f33362d3336203d3e20323733303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a5c0:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:2b:a7:de:bb:e3:e6:50:e7:08:86:da:2d:d7:05:36:8c:a5:
         0b:7f:1b:db:34:c0:21:bc:05:3c:90:06:96:37:c2:a6:a0:52:
         32:4d:91:ba:5a:88:ce:91:69:40:08:97:1e:40:c4:2d:4e:05:
         98:fa:e0:82:3a:0a:65:c5:aa:2f:91:d0:77:ae:40:29:06:55:
         cb:bd:49:6b:bb:96:d3:e7:a5:e2:ef:4c:08:b1:ce:ae:a5:3c:
         a8:da:b1:1f:45:9f:2a:10:48:48:18:3c:b2:bd:77:48:8a:74:
         8f:34:79:22:c6:18:35:c4:80:83:71:76:de:89:a4:f8:81:35:
         89:12:a5:3e:55:fc:96:64:a3:8b:11:e7:e1:d9:6d:47:cd:93:
         a2:ba:98:cb:46:b2:a8:84:a9:f3:21:06:51:47:51:7d:31:25:
         a7:79:55:47:14:e7:d9:56:e9:3b:5d:4f:d3:e9:e4:b2:78:48:
         49:9c:eb:19:98:5d:00:51:8e:8c:05:c4:e3:d2:8a:73:e3:93:
         db:cd:2c:01:7d:ae:d9:04:86:5f:49:ca:f0:24:b7:00:07:97:
         0d:f2:1b:66:72:f9:ec:96:0e:cb:ea:0a:55:71:d2:07:fb:5e:
         b7:bc:43:18:40:04:9f:82:99:20:22:b6:c5:0c:f9:b5:09:da:
         59:72:5e:4c
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUKmCbW1lBx9lpGkDZ/qbWNLEqVZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYwM0U1MTQzRjk2NkVCMDM5ODRBQTU5NjE1MUI0N0Yw
QTdDMzhFMjAeFw0yNDAzMDUxNzQxMDJaFw0yNTAzMDQxNzQ2MDJaMDMxMTAvBgNV
BAMTKEQ2RTMwOThFQURGODQ5MThFRDlFREYwNzJCMERDQTdBOEM3NzJBNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwJTtEHvrwn+ypiXJHINthP0d
//skcV8ySPcSNyEfnPeEwcgX2IwCVnCOUcF8zc2uDI6Q3Be/F+Ph0YxYiplYfyzB
qHYT1mZXgyH6josd8nNugBluxGgkuEM3NYo5/BVfPsoj/Qf1QHfRTyPnPZgaPhKU
lvs2x72nF3ZXUYunRCRA6O+DnzAqOE3C+YxIoTMVBAZTMXZEvVt6pbtehKQI3ZBz
0COmO9aSJvgredaqxClQf69i3q+yUrYwQ6VWnQRENKWoLUhnpqH5u56jZblDmRuM
IQaGFgdy2AWnbtTqsaHmKo9FRdJ6Dflq0Wpa5SL1USLO6/5ueR9uWKDlpZgDAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU1uMJjq34SRjtnt8HKw3Keox3KmMwHwYDVR0j
BBgwFoAULwPlFD+WbrA5hKpZYVG0fwp8OOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RjM4M0M1MkRENTc3RDJEMUFGMUJBRkI0MjY3RUVENzZC
OUI1NTQwRkZENDUyRjdDNjZDMDEyOUE4MjA0NTE5LzAvMkYwM0U1MTQzRjk2NkVC
MDM5ODRBQTU5NjE1MUI0N0YwQTdDMzhFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjAzRTUxNDNGOTY2RUIwMzk4
NEFBNTk2MTUxQjQ3RjBBN0MzOEUyLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUYzODNDNTJERDU3N0QyRDFBRjFCQUZCNDI2N0VFRDc2QjlCNTU0MEZG
RDQ1MkY3QzY2QzAxMjlBODIwNDUxOS8wLzMyMzgzMDMzM2E2MTM1NjMzMDNhMzgz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzMzMDMwMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA6XAgDANBgkqhkiG9w0BAQsFAAOCAQEAtCun3rvj5lDnCIbaLdcFNoyl
C38b2zTAIbwFPJAGljfCpqBSMk2RulqIzpFpQAiXHkDELU4FmPrggjoKZcWqL5HQ
d65AKQZVy71Ja7uW0+el4u9MCLHOrqU8qNqxH0WfKhBISBg8sr13SIp0jzR5IsYY
NcSAg3F23omk+IE1iRKlPlX8lmSjixHn4dltR82TorqYy0ayqISp8yEGUUdRfTEl
p3lVRxTn2VbpO11P0+nksnhISZzrGZhdAFGOjAXE49KKc+OT280sAX2u2QSGX0nK
8CS3AAeXDfIbZnL57JYOy+oKVXHSB/tet7xDGEAEn4KZICK2xQz5tQnaWXJeTA==
-----END CERTIFICATE-----