Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6430303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a6430303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          J+6GNhigFwHzwK9qsCeUalmkZWMhugSQ63zDTRX+cyU=
Subject key identifier:   0D:1B:B4:C1:30:73:CE:02:D5:DA:58:EC:C4:DE:FD:48:BF:56:0D:22
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       254B4D9458328D9DF3482AEE116559EAD354AECA
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6430303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:03 +0000
ROA not before:           Thu 25 Jul 2024 23:45:03 +0000
ROA not after:            Thu 24 Jul 2025 23:50:03 +0000
asID:                     273123
IP address blocks:        2803:450:d00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4b:4d:94:58:32:8d:9d:f3:48:2a:ee:11:65:59:ea:d3:54:ae:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:03 2024 GMT
            Not After : Jul 24 23:50:03 2025 GMT
        Subject: CN=0D1BB4C13073CE02D5DA58ECC4DEFD48BF560D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:e2:a9:03:d1:ee:83:c7:39:29:e4:ff:74:
                    08:c6:d2:50:62:ce:09:c1:ac:e7:38:24:5b:50:86:
                    90:d1:c0:0b:e5:09:08:0a:28:f0:5a:ad:4f:f9:46:
                    26:55:b6:25:04:06:fc:40:5a:11:fc:e9:bc:d9:f1:
                    b5:d3:55:48:6d:60:c2:3f:48:ed:b5:57:47:06:77:
                    d0:f4:ca:34:dd:73:50:93:a6:f6:9e:55:23:c5:72:
                    8c:38:0f:95:46:50:5f:3e:95:54:6f:e3:52:4f:ee:
                    4c:a1:99:e6:df:31:be:b2:9d:9f:c1:07:8d:35:d4:
                    f5:a3:71:c1:21:2f:b8:34:03:43:74:46:d4:90:9a:
                    29:3d:5b:11:13:94:59:ee:a1:d2:f3:11:b7:b6:c2:
                    a1:fc:fb:f7:5c:d4:32:7a:14:45:1d:6d:95:28:bd:
                    11:6c:4c:80:78:34:40:53:33:d7:e3:74:d3:75:a1:
                    7a:81:45:45:70:30:13:2a:25:40:01:6e:bc:9a:00:
                    35:77:03:e3:32:e1:ec:7a:c2:8b:96:5b:1c:17:fb:
                    ef:c5:7f:03:55:2e:5d:48:cc:0f:fd:61:d9:8b:c1:
                    e7:e8:5f:22:0c:36:fa:6c:2b:a2:9e:d1:f5:bd:ac:
                    64:f5:20:c5:9d:ac:87:d4:50:35:2f:31:0a:57:8d:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:B4:C1:30:73:CE:02:D5:DA:58:EC:C4:DE:FD:48:BF:56:0D:22
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6430303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:af:db:34:bd:14:4f:54:0a:13:43:47:b8:3e:84:1f:1f:f2:
         51:20:3d:0a:99:bf:37:b2:40:07:e2:66:65:89:6e:15:2b:1c:
         c6:c5:d9:4c:6a:9a:e0:ee:cd:ed:de:f1:80:2c:ba:c8:3d:3b:
         36:99:7e:96:31:4f:6c:37:b1:80:b9:69:5b:91:b1:14:92:e8:
         07:6b:52:aa:da:79:f4:24:8b:a8:e0:a4:07:16:06:09:60:38:
         db:a3:c8:35:d8:33:4e:c2:5c:a2:bf:d2:05:7a:ca:a4:fb:19:
         bb:c4:31:03:b8:79:9d:f0:cd:5f:2e:b5:4d:15:12:cf:4c:17:
         10:46:93:bb:50:7b:d6:e6:1b:44:26:ef:42:1b:f6:ce:f9:16:
         01:c9:d6:20:38:54:71:c1:be:cb:4e:bd:e2:07:bf:56:92:b9:
         6d:38:96:0c:4a:96:b8:ff:00:5f:c6:53:3c:34:65:fd:33:a5:
         1a:a5:ab:7e:78:78:b4:dc:72:e4:49:ad:fc:fd:17:39:5e:81:
         e3:21:cc:dd:20:4b:61:fc:fb:db:f2:13:7c:0b:23:9f:1a:a3:
         6c:61:7d:30:2f:ba:94:f2:f3:43:23:17:af:b2:bf:04:09:cd:
         96:cd:2d:33:63:51:dd:c1:d9:cd:26:18:bd:58:d6:b2:59:a4:
         70:3e:d4:25
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUJUtNlFgyjZ3zSCruEWVZ6tNUrsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNDA3MjUyMzQ1MDNaFw0yNTA3MjQyMzUwMDNaMDMxMTAvBgNV
BAMTKDBEMUJCNEMxMzA3M0NFMDJENURBNThFQ0M0REVGRDQ4QkY1NjBEMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUlOKpA9Hug8c5KeT/dAjG0lBi
zgnBrOc4JFtQhpDRwAvlCQgKKPBarU/5RiZVtiUEBvxAWhH86bzZ8bXTVUhtYMI/
SO21V0cGd9D0yjTdc1CTpvaeVSPFcow4D5VGUF8+lVRv41JP7kyhmebfMb6ynZ/B
B4011PWjccEhL7g0A0N0RtSQmik9WxETlFnuodLzEbe2wqH8+/dc1DJ6FEUdbZUo
vRFsTIB4NEBTM9fjdNN1oXqBRUVwMBMqJUABbryaADV3A+My4ex6wouWWxwX++/F
fwNVLl1IzA/9YdmLwefoXyIMNvpsK6Ke0fW9rGT1IMWdrIfUUDUvMQpXja3VAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUDRu0wTBzzgLV2ljsxN79SL9WDSIwHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTY0MzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzIzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBFANMA0GCSqGSIb3DQEBCwUAA4IBAQB1r9s0vRRPVAoTQ0e4PoQfH/JRID0K
mb83skAH4mZliW4VKxzGxdlMaprg7s3t3vGALLrIPTs2mX6WMU9sN7GAuWlbkbEU
kugHa1Kq2nn0JIuo4KQHFgYJYDjbo8g12DNOwlyiv9IFesqk+xm7xDEDuHmd8M1f
LrVNFRLPTBcQRpO7UHvW5htEJu9CG/bO+RYBydYgOFRxwb7LTr3iB79WkrltOJYM
Spa4/wBfxlM8NGX9M6Uapat+eHi03HLkSa38/Rc5XoHjIczdIEth/Pvb8hN8CyOf
GqNsYX0wL7qU8vNDIxevsr8ECc2WzS0zY1HdwdnNJhi9WNayWaRwPtQl
-----END CERTIFICATE-----