Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/323830333a663831303a3a2f33322d3332203d3e20323731383433.roa
File:                     323830333a663831303a3a2f33322d3332203d3e20323731383433.roa (raw, json)
Hash identifier:          8uIw0e3XACf6OPhFnxcNL1CsJ0Z9tgogOwudXtDtQq4=
Subject key identifier:   2B:BF:D5:4F:BA:CC:53:3A:C9:E7:1B:45:12:C4:FA:3E:5A:25:9B:D4
Certificate issuer:       /CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
Certificate serial:       643B137F729AE5179C709721E50C6AD1BE540956
Authority key identifier: E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/323830333a663831303a3a2f33322d3332203d3e20323731383433.roa
Signing time:             Tue 05 Mar 2024 17:57:38 +0000
ROA not before:           Tue 05 Mar 2024 17:52:38 +0000
ROA not after:            Tue 04 Mar 2025 17:57:38 +0000
asID:                     271843
IP address blocks:        2803:f810::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3b:13:7f:72:9a:e5:17:9c:70:97:21:e5:0c:6a:d1:be:54:09:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
        Validity
            Not Before: Mar  5 17:52:38 2024 GMT
            Not After : Mar  4 17:57:38 2025 GMT
        Subject: CN=2BBFD54FBACC533AC9E71B4512C4FA3E5A259BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:47:e4:72:5c:7b:24:79:b6:2d:7c:a6:4e:
                    b1:6c:e0:0a:65:b7:51:4e:90:e1:d6:75:75:3f:2f:
                    43:85:d2:33:e3:ff:85:21:1b:91:65:1d:02:ff:06:
                    65:87:4c:5f:25:77:a6:1e:e6:86:ba:8e:53:0f:22:
                    a3:83:34:61:82:02:f1:be:72:63:5a:a6:24:67:3e:
                    99:bf:43:45:76:a3:90:a9:a8:e4:7d:02:0e:64:6e:
                    84:eb:8e:89:5f:67:61:90:a1:5c:53:ad:c3:b2:d0:
                    aa:7a:7d:ef:44:37:0d:19:7f:70:80:4e:05:fa:ee:
                    10:c1:91:37:7c:ee:66:a1:10:43:e7:32:a8:f3:69:
                    25:4c:1a:9e:64:08:4d:f2:4e:84:70:ef:8e:b7:cc:
                    db:6c:44:c5:c7:e3:58:a1:49:8d:fc:44:94:71:c8:
                    da:61:d9:1f:3b:a9:b8:2f:af:73:b0:c6:a1:18:ac:
                    38:7a:d0:e3:59:56:4e:a6:f9:cc:fe:d3:e2:f4:a7:
                    ec:ca:0a:be:f2:f3:a9:ee:b6:2d:38:3a:ee:a4:d0:
                    f2:1f:af:d9:27:7f:57:c9:3c:92:07:13:be:8a:23:
                    9e:77:22:33:da:ed:8d:21:9a:ac:83:ce:4a:35:e3:
                    7f:0b:59:8d:b9:b8:9f:e9:9c:7d:6e:f1:26:ac:e3:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BF:D5:4F:BA:CC:53:3A:C9:E7:1B:45:12:C4:FA:3E:5A:25:9B:D4
            X509v3 Authority Key Identifier:
                keyid:E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/323830333a663831303a3a2f33322d3332203d3e20323731383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f810::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:43:20:32:99:8c:c1:17:6b:3c:ae:11:9f:6f:8c:ff:69:6f:
         be:f0:c3:c2:82:41:c4:b7:a5:60:0f:f3:1c:a6:c1:b9:83:e1:
         52:b1:cf:f7:59:6e:97:67:03:53:71:cd:d5:2a:4a:21:4d:59:
         16:80:c0:56:eb:b2:db:32:fe:0c:79:2c:28:db:7b:c0:5c:79:
         e7:9e:ed:a9:16:df:f0:1e:5f:fe:66:8a:f3:5f:80:17:71:63:
         18:46:2f:fc:fc:37:c6:9c:3c:99:01:a4:6f:31:3d:27:71:07:
         db:66:05:53:d8:c1:07:ea:20:11:f9:85:46:29:a5:11:2c:af:
         ba:91:a3:6f:ef:2c:85:f5:85:84:35:8a:03:6b:8d:41:ba:04:
         cb:79:24:68:44:d1:be:e7:aa:7d:14:81:ba:fb:f5:32:0c:03:
         07:ab:64:fe:65:5a:78:20:dc:0f:25:08:67:66:af:1c:ec:db:
         a5:07:b5:62:0f:48:a1:5d:fc:19:53:e8:bf:c6:a7:21:11:bb:
         f0:a3:fe:d0:6b:dc:3b:d6:46:ac:69:c2:92:15:35:76:f1:c6:
         14:10:1e:97:f3:17:8b:ed:cc:d0:83:a6:eb:fc:1d:c0:ad:87:
         2f:bc:0c:50:07:30:a2:58:6d:ec:8b:1b:7a:58:97:6b:1c:41:
         1d:91:11:a5
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUZDsTf3Ka5ReccJch5Qxq0b5UCVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA1NTdENzYyRDlCRjZGM0YyNUZEQUREQ0MyRUVERUEy
MTFFOTA0NTAeFw0yNDAzMDUxNzUyMzhaFw0yNTAzMDQxNzU3MzhaMDMxMTAvBgNV
BAMTKDJCQkZENTRGQkFDQzUzM0FDOUU3MUI0NTEyQzRGQTNFNUEyNTlCRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAEfkclx7JHm2LXymTrFs4Apl
t1FOkOHWdXU/L0OF0jPj/4UhG5FlHQL/BmWHTF8ld6Ye5oa6jlMPIqODNGGCAvG+
cmNapiRnPpm/Q0V2o5CpqOR9Ag5kboTrjolfZ2GQoVxTrcOy0Kp6fe9ENw0Zf3CA
TgX67hDBkTd87mahEEPnMqjzaSVMGp5kCE3yToRw7463zNtsRMXH41ihSY38RJRx
yNph2R87qbgvr3OwxqEYrDh60ONZVk6m+cz+0+L0p+zKCr7y86nuti04Ou6k0PIf
r9knf1fJPJIHE76KI553IjPa7Y0hmqyDzko1438LWY25uJ/pnH1u8Sas436nAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUK7/VT7rMUzrJ5xtFEsT6Plolm9QwHwYDVR0j
BBgwFoAU4FV9di2b9vPyX9rdzC7t6iEekEUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUVCQ0QxNTlCM0NBRUQwQkQyMDg4NDNBOUY0RTcyNTUx
RkIxREJGMzdENTIyQzIwNDUxMUQyMzJCM0I5RkRBLzAvRTA1NTdENzYyRDlCRjZG
M0YyNUZEQUREQ0MyRUVERUEyMTFFOTA0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDU1N0Q3NjJEOUJGNkYzRjI1
RkRBRERDQzJFRURFQTIxMUU5MDQ1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFFQkNEMTU5QjNDQUVEMEJEMjA4ODQzQTlGNEU3MjU1MUZCMURCRjM3
RDUyMkMyMDQ1MTFEMjMyQjNCOUZEQS8wLzMyMzgzMDMzM2E2NjM4MzEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM4MzQzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD+BAw
DQYJKoZIhvcNAQELBQADggEBAGlDIDKZjMEXazyuEZ9vjP9pb77ww8KCQcS3pWAP
8xymwbmD4VKxz/dZbpdnA1NxzdUqSiFNWRaAwFbrstsy/gx5LCjbe8Bceeee7akW
3/AeX/5mivNfgBdxYxhGL/z8N8acPJkBpG8xPSdxB9tmBVPYwQfqIBH5hUYppREs
r7qRo2/vLIX1hYQ1igNrjUG6BMt5JGhE0b7nqn0Ugbr79TIMAwerZP5lWngg3A8l
CGdmrxzs26UHtWIPSKFd/BlT6L/GpyERu/Cj/tBr3DvWRqxpwpIVNXbxxhQQHpfz
F4vtzNCDpuv8HcCthy+8DFAHMKJYbeyLG3pYl2scQR2REaU=
-----END CERTIFICATE-----