Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a66303a3a2f34342d3434203d3e203130373533.roa
File:                     323830333a656536303a66303a3a2f34342d3434203d3e203130373533.roa (raw, json)
Hash identifier:          vNpYWpUXt1bOJ3F0SDJIzUmIEFpDSTRObHg3oDqhbng=
Subject key identifier:   6E:8A:30:DC:E5:3A:63:CD:80:ED:8D:97:E3:4E:23:FE:9C:63:8E:78
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       1E2B0C4C2DF9369063414F5C0B92C6E5EE889B36
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a66303a3a2f34342d3434203d3e203130373533.roa
Signing time:             Tue 05 Mar 2024 18:04:28 +0000
ROA not before:           Tue 05 Mar 2024 17:59:28 +0000
ROA not after:            Tue 04 Mar 2025 18:04:28 +0000
asID:                     10753
IP address blocks:        2803:ee60:f0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2b:0c:4c:2d:f9:36:90:63:41:4f:5c:0b:92:c6:e5:ee:88:9b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Mar  5 17:59:28 2024 GMT
            Not After : Mar  4 18:04:28 2025 GMT
        Subject: CN=6E8A30DCE53A63CD80ED8D97E34E23FE9C638E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:3f:26:14:ea:dd:dc:fe:0c:eb:4a:ff:fa:
                    af:04:21:34:9c:89:8c:d1:c1:21:0d:fa:c4:ee:2f:
                    69:6b:4b:54:7d:6a:f1:c8:33:9b:42:d2:7a:e8:34:
                    e4:08:10:49:6f:88:e8:08:56:aa:7d:e1:42:f3:d5:
                    db:ce:dd:82:70:5c:ed:3e:bd:0c:eb:05:16:74:bd:
                    49:58:34:2f:2d:9b:bb:14:9c:3b:24:c7:cb:c1:f4:
                    7c:98:04:3f:10:30:19:56:56:53:df:d3:09:95:8a:
                    b5:9a:03:9e:8c:06:63:59:b8:70:bb:79:cb:9a:75:
                    82:89:90:2c:1b:21:34:fd:e3:a1:05:db:d2:41:e8:
                    24:5b:15:70:e0:30:b5:13:8e:11:b8:93:e5:34:6c:
                    e7:b5:e6:b7:ef:75:8e:51:cc:04:42:f4:ee:74:c3:
                    14:cf:22:44:63:0e:0e:19:ed:f5:5f:f6:2b:88:c5:
                    53:6d:2b:a1:f0:36:d9:43:fe:a3:06:5a:b5:70:43:
                    ae:e4:09:61:1b:8a:d1:0b:c7:a4:09:16:7d:e7:1b:
                    8b:57:8a:cd:e2:02:af:c2:af:1a:e3:e9:b9:5f:a0:
                    4e:b1:67:42:4a:fc:6a:ea:06:dc:25:eb:14:d1:c7:
                    3e:15:72:90:65:95:7a:62:b5:e6:08:e4:22:65:45:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8A:30:DC:E5:3A:63:CD:80:ED:8D:97:E3:4E:23:FE:9C:63:8E:78
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a66303a3a2f34342d3434203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a4:ba:c9:90:c7:2a:c9:e1:56:69:a0:b0:82:9b:87:e0:49:48:
         07:4c:87:73:a5:ea:d4:4f:b6:eb:ba:e2:74:bf:01:bb:95:bb:
         ae:45:ea:ea:0c:4c:ea:ac:01:f5:d4:a4:b5:b2:9d:ad:3c:19:
         26:87:da:9f:d5:bf:73:b1:33:0f:39:4a:d9:6e:0f:81:f1:63:
         9f:36:ed:44:fe:f7:07:e9:ca:72:d3:10:aa:93:9d:0f:0c:ce:
         de:d9:e2:ff:44:18:96:ac:f7:a5:3c:cd:48:cc:06:3c:24:92:
         85:21:42:7e:e7:a7:d3:27:f9:03:70:87:ef:c3:75:c2:4c:6c:
         f4:33:e1:10:5b:74:c9:44:00:23:45:87:db:76:53:00:93:11:
         1b:49:e0:27:5c:02:37:99:3a:5e:75:d7:c0:1c:a9:7e:73:77:
         59:2c:1a:8e:62:da:8f:59:48:a7:0c:f5:d8:2a:82:2e:3e:31:
         00:07:e2:68:67:2b:04:8c:ca:b6:d4:e5:11:9e:ff:17:9c:52:
         c6:9b:ff:c8:b2:79:ea:57:1c:3c:6a:aa:dc:ae:49:13:06:a5:
         35:2b:e5:00:62:32:a8:d1:fd:1d:8f:6b:f8:83:b9:e4:a9:f2:
         14:d6:fb:52:1f:9c:b7:b6:ee:ed:55:d1:0a:0b:b5:0e:ea:92:
         ba:de:97:48
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUHisMTC35NpBjQU9cC5LG5e6ImzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEyQUYxQThGOEYyMzY1NzI5OUU5NTI0RDBENjJGMEUy
MTNGRUQ2MjAeFw0yNDAzMDUxNzU5MjhaFw0yNTAzMDQxODA0MjhaMDMxMTAvBgNV
BAMTKDZFOEEzMERDRTUzQTYzQ0Q4MEVEOEQ5N0UzNEUyM0ZFOUM2MzhFNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeED8mFOrd3P4M60r/+q8EITSc
iYzRwSEN+sTuL2lrS1R9avHIM5tC0nroNOQIEElviOgIVqp94ULz1dvO3YJwXO0+
vQzrBRZ0vUlYNC8tm7sUnDskx8vB9HyYBD8QMBlWVlPf0wmVirWaA56MBmNZuHC7
ecuadYKJkCwbITT946EF29JB6CRbFXDgMLUTjhG4k+U0bOe15rfvdY5RzARC9O50
wxTPIkRjDg4Z7fVf9iuIxVNtK6HwNtlD/qMGWrVwQ67kCWEbitELx6QJFn3nG4tX
is3iAq/Crxrj6blfoE6xZ0JK/GrqBtwl6xTRxz4VcpBllXpiteYI5CJlRb2XAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUboow3OU6Y82A7Y2X404j/pxjjngwHwYDVR0j
BBgwFoAUwSrxqPjyNlcpnpUk0NYvDiE/7WIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzQzREM0NThDMzFGQjRCREQ5NENDNTUwNjk0NEI2NkMz
NkY0RERDODg4NEU2NkQ2OUY5RjY2QkVCOTIwRkRELzAvQzEyQUYxQThGOEYyMzY1
NzI5OUU5NTI0RDBENjJGMEUyMTNGRUQ2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMTJBRjFBOEY4RjIzNjU3Mjk5
RTk1MjREMEQ2MkYwRTIxM0ZFRDYyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjc0M0RDNDU4QzMxRkI0QkREOTRDQzU1MDY5NDRCNjZDMzZGNEREQzg4
ODRFNjZENjlGOUY2NkJFQjkyMEZERC8wLzMyMzgzMDMzM2E2NTY1MzYzMDNhNjYz
MDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzAzNzM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQo
A+5gAPAwDQYJKoZIhvcNAQELBQADggEBAKS6yZDHKsnhVmmgsIKbh+BJSAdMh3Ol
6tRPtuu64nS/AbuVu65F6uoMTOqsAfXUpLWyna08GSaH2p/Vv3OxMw85StluD4Hx
Y5827UT+9wfpynLTEKqTnQ8Mzt7Z4v9EGJas96U8zUjMBjwkkoUhQn7np9Mn+QNw
h+/DdcJMbPQz4RBbdMlEACNFh9t2UwCTERtJ4CdcAjeZOl5118AcqX5zd1ksGo5i
2o9ZSKcM9dgqgi4+MQAH4mhnKwSMyrbU5RGe/xecUsab/8iyeepXHDxqqtyuSRMG
pTUr5QBiMqjR/R2Pa/iDueSp8hTW+1IfnLe27u1V0QoLtQ7qkrrel0g=
-----END CERTIFICATE-----