Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313630303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313630303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          G5EcKA4Hv6RP9l8dbKCv6OuYyL/RYR22df2NboK1Bz0=
Subject key identifier:   93:6B:29:31:D4:59:73:38:35:22:37:F5:E6:D0:B9:56:65:2D:3E:B8
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       1CF7CD7271A6E4EBB049F641DD1FCDD78807D7FA
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313630303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 21 Dec 2024 00:15:01 +0000
ROA not before:           Sat 21 Dec 2024 00:10:01 +0000
ROA not after:            Sat 20 Dec 2025 00:15:01 +0000
asID:                     273123
IP address blocks:        2803:450:1600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f7:cd:72:71:a6:e4:eb:b0:49:f6:41:dd:1f:cd:d7:88:07:d7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Dec 21 00:10:01 2024 GMT
            Not After : Dec 20 00:15:01 2025 GMT
        Subject: CN=936B2931D4597338352237F5E6D0B956652D3EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:3f:48:5f:09:91:1e:9f:bf:7c:25:05:b1:
                    b4:88:8b:cc:cf:8d:45:f8:a9:d1:24:79:e5:6e:20:
                    6a:e3:df:51:e7:ea:84:f4:9b:ca:dc:75:1e:2b:ba:
                    bc:bb:be:32:91:db:d3:c6:d6:d0:0c:5b:86:93:fa:
                    31:2d:f0:93:7d:65:eb:1d:ad:5c:c4:14:86:9b:c9:
                    fa:b2:50:eb:ec:f7:be:ee:fb:4e:70:4f:ec:cd:54:
                    e5:12:c0:80:82:07:21:84:83:5f:18:62:ba:56:a2:
                    fe:4f:45:6a:32:9f:31:e7:51:bf:dc:10:e3:94:25:
                    38:c7:df:1f:f2:3a:dd:96:1c:6f:08:df:0a:60:7d:
                    2a:59:db:9a:7b:22:da:96:2a:6e:d9:b1:a4:1b:8d:
                    e7:ce:0b:66:89:42:d2:e2:ae:d4:9a:fd:69:63:29:
                    3f:7e:f6:b1:5a:b0:33:b1:54:4b:49:22:91:cf:88:
                    e2:fa:f9:3c:cc:50:3a:5d:f1:cf:4a:2f:ea:b4:49:
                    27:b8:27:e6:37:46:c2:55:f2:75:9c:95:81:3b:83:
                    11:b1:5f:a7:5c:af:79:f6:de:d0:56:14:2d:99:67:
                    ee:d3:2f:76:ae:82:7d:94:63:e2:93:83:b4:17:45:
                    2a:fc:3c:a2:e4:20:55:50:5d:fc:69:7b:0c:62:cf:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6B:29:31:D4:59:73:38:35:22:37:F5:E6:D0:B9:56:65:2D:3E:B8
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313630303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:41:c2:69:bc:73:14:44:7a:43:ae:e4:81:d9:ce:90:f0:15:
         8c:3c:76:a9:a0:de:06:bf:f2:b8:9d:66:28:65:e0:0c:18:e1:
         86:8a:42:4f:aa:89:f0:1d:c9:f4:96:5b:dc:aa:7c:b9:17:a6:
         59:82:7e:30:e8:2b:9a:2f:eb:24:6e:47:12:ea:69:f1:06:e0:
         de:b6:7e:76:4f:94:29:da:7d:5b:52:cf:90:87:be:ac:95:e3:
         dd:6a:7b:f2:7f:db:ff:26:da:9f:9d:9d:2f:c8:8b:f8:8e:53:
         2c:c3:51:da:2a:5c:df:08:81:71:57:2f:c0:76:8f:11:e2:35:
         82:8e:9f:19:28:2f:f9:4e:45:37:c2:7f:80:99:b7:22:f0:d1:
         83:ab:60:8c:1b:60:12:b2:18:53:3e:f5:66:72:5a:81:12:c1:
         95:92:27:81:92:0e:d5:a7:c4:0f:1c:9a:98:50:0a:1e:17:4f:
         77:fa:c2:8e:13:95:58:de:bb:b9:52:4d:e8:c3:93:e0:d3:5a:
         a5:e8:22:64:39:09:ed:32:a9:d2:7e:14:c2:e7:33:b3:56:91:
         4c:43:52:a4:75:35:9a:d9:7c:94:19:84:ec:40:4c:37:0c:58:
         c7:65:f2:29:f3:e8:fb:37:bd:1e:76:35:40:70:61:66:9f:5e:
         38:b4:4e:58
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUHPfNcnGm5OuwSfZB3R/N14gH1/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNDEyMjEwMDEwMDFaFw0yNTEyMjAwMDE1MDFaMDMxMTAvBgNV
BAMTKDkzNkIyOTMxRDQ1OTczMzgzNTIyMzdGNUU2RDBCOTU2NjUyRDNFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCThD9IXwmRHp+/fCUFsbSIi8zP
jUX4qdEkeeVuIGrj31Hn6oT0m8rcdR4rury7vjKR29PG1tAMW4aT+jEt8JN9Zesd
rVzEFIabyfqyUOvs977u+05wT+zNVOUSwICCByGEg18YYrpWov5PRWoynzHnUb/c
EOOUJTjH3x/yOt2WHG8I3wpgfSpZ25p7ItqWKm7ZsaQbjefOC2aJQtLirtSa/Wlj
KT9+9rFasDOxVEtJIpHPiOL6+TzMUDpd8c9KL+q0SSe4J+Y3RsJV8nWclYE7gxGx
X6dcr3n23tBWFC2ZZ+7TL3augn2UY+KTg7QXRSr8PKLkIFVQXfxpewxiz6OXAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUk2spMdRZczg1Ijf15tC5VmUtPrgwHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTMxMzYz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzMjMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMEUBYwDQYJKoZIhvcNAQELBQADggEBACVBwmm8cxREekOu5IHZzpDwFYw8
dqmg3ga/8ridZihl4AwY4YaKQk+qifAdyfSWW9yqfLkXplmCfjDoK5ov6yRuRxLq
afEG4N62fnZPlCnafVtSz5CHvqyV491qe/J/2/8m2p+dnS/Ii/iOUyzDUdoqXN8I
gXFXL8B2jxHiNYKOnxkoL/lORTfCf4CZtyLw0YOrYIwbYBKyGFM+9WZyWoESwZWS
J4GSDtWnxA8cmphQCh4XT3f6wo4TlVjeu7lSTejDk+DTWqXoImQ5Ce0yqdJ+FMLn
M7NWkUxDUqR1NZrZfJQZhOxATDcMWMdl8inz6Ps3vR52NUBwYWafXji0Tlg=
-----END CERTIFICATE-----