Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6530303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a6530303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          qUFAyWbk0HkCuHzCbVpcsyscDKpK4l+uEF17raSZJ8w=
Subject key identifier:   5B:8F:9C:69:8C:81:D2:E2:FC:C0:C8:EC:07:92:46:75:16:BD:8E:61
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       3F2A65222BB35D7D1FEBF7F0FF590B666FE74D01
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6530303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:02 +0000
ROA not before:           Thu 25 Jul 2024 23:45:02 +0000
ROA not after:            Thu 24 Jul 2025 23:50:02 +0000
asID:                     273123
IP address blocks:        2803:450:e00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2a:65:22:2b:b3:5d:7d:1f:eb:f7:f0:ff:59:0b:66:6f:e7:4d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:02 2024 GMT
            Not After : Jul 24 23:50:02 2025 GMT
        Subject: CN=5B8F9C698C81D2E2FCC0C8EC0792467516BD8E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:42:94:bb:27:e3:4e:24:ab:44:93:57:d6:
                    db:df:cd:2c:4e:e0:8d:6b:c1:e8:99:5a:20:25:e5:
                    f7:46:71:14:cb:85:96:9e:46:44:5d:fd:12:00:06:
                    61:0d:ba:7f:57:e4:1b:71:84:02:b1:93:44:b3:8c:
                    88:9d:f7:a5:6a:e8:8f:ad:60:ff:b3:1d:ff:1e:fa:
                    b0:f5:c2:f1:11:72:e8:15:35:bb:bf:de:57:fb:0a:
                    92:7d:4b:07:47:cc:23:7b:c5:d3:b2:43:de:58:68:
                    fe:2f:3a:7f:bf:b9:4b:d8:69:d8:ea:83:23:26:1d:
                    f2:a5:c8:54:72:3b:16:ad:53:1a:c8:7f:5f:30:88:
                    da:8a:32:12:91:03:1b:ef:41:36:ba:08:cb:92:9f:
                    56:a0:1b:c8:7f:14:98:12:fb:2e:7b:29:1b:27:0a:
                    96:d5:6f:a4:c4:e8:d1:9d:9b:6e:3d:6f:72:a4:bd:
                    d8:32:68:a2:ee:24:42:9f:b5:54:88:24:e8:5e:92:
                    0d:9f:ae:65:c8:be:15:77:9f:39:91:e9:59:3b:ee:
                    f2:17:b3:4c:e9:59:97:f6:61:ba:1e:f0:04:21:30:
                    b2:55:b9:c0:27:d5:36:cc:99:6c:35:ce:96:29:fa:
                    28:40:0f:ba:ed:17:07:88:97:18:b5:37:a3:27:de:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:9C:69:8C:81:D2:E2:FC:C0:C8:EC:07:92:46:75:16:BD:8E:61
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a6530303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:27:e1:4d:93:ed:19:3e:3e:17:6c:2b:14:ad:ac:bb:02:29:
         a7:ce:9e:7e:fc:c8:b3:ba:31:b6:1e:fd:ce:17:28:15:c9:f1:
         d1:df:59:50:53:3d:8b:6e:7b:c1:08:c8:c8:4e:62:d3:b1:e8:
         85:54:78:7f:7c:9c:b2:6d:1c:6a:89:25:de:bb:77:c7:de:5b:
         3a:91:4b:20:bc:e3:5b:40:29:c5:fe:05:d0:97:8d:71:4a:9d:
         cd:7a:3a:4d:26:93:11:ae:87:82:15:25:0c:67:dd:ea:20:9c:
         c2:f7:84:9f:78:19:1c:20:8a:e6:c5:0b:d7:40:aa:fe:fd:2a:
         8e:91:12:4e:3a:db:28:ff:dc:d6:cd:5a:eb:bd:bf:16:22:9b:
         17:ad:74:74:d1:91:cd:d0:66:f6:7b:cd:94:43:8e:32:17:20:
         b0:b2:21:4c:66:fc:d2:32:2b:3c:96:da:78:9b:bd:8a:ef:25:
         20:1d:67:95:d4:f9:81:8b:3a:62:98:02:f5:44:bf:9b:f1:8b:
         ff:74:1b:73:46:ab:57:15:93:64:ee:2b:18:1c:02:89:bc:51:
         c9:ee:9a:de:74:df:b6:ad:12:b7:8e:08:b2:67:cd:24:22:a3:
         78:b0:c1:c1:8b:18:35:96:b6:ad:8c:52:96:a7:f5:42:a0:06:
         7d:62:cd:de
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUPyplIiuzXX0f6/fw/1kLZm/nTQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OEZBODcxNzRCOEIwMEZCQTlGNjVEQ0YxQjYwNTQ3
NkE0QjlGRDAeFw0yNDA3MjUyMzQ1MDJaFw0yNTA3MjQyMzUwMDJaMDMxMTAvBgNV
BAMTKDVCOEY5QzY5OEM4MUQyRTJGQ0MwQzhFQzA3OTI0Njc1MTZCRDhFNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UkKUuyfjTiSrRJNX1tvfzSxO
4I1rweiZWiAl5fdGcRTLhZaeRkRd/RIABmENun9X5BtxhAKxk0SzjIid96Vq6I+t
YP+zHf8e+rD1wvERcugVNbu/3lf7CpJ9SwdHzCN7xdOyQ95YaP4vOn+/uUvYadjq
gyMmHfKlyFRyOxatUxrIf18wiNqKMhKRAxvvQTa6CMuSn1agG8h/FJgS+y57KRsn
CpbVb6TE6NGdm249b3KkvdgyaKLuJEKftVSIJOhekg2frmXIvhV3nzmR6Vk77vIX
s0zpWZf2Yboe8AQhMLJVucAn1TbMmWw1zpYp+ihAD7rtFweIlxi1N6Mn3s75AgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUW4+caYyB0uL8wMjsB5JGdRa9jmEwHwYDVR0j
BBgwFoAUoZj6hxdLiwD7qfZdzxtgVHakuf0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTI4NUE1NUI2RTlDMzU4RDAyNzc4NEE0QkFEOTc2RTlF
N0I4RjM3OEVGNUYzOUI4N0I3QjE3QTQzMDYzQTA0LzAvQTE5OEZBODcxNzRCOEIw
MEZCQTlGNjVEQ0YxQjYwNTQ3NkE0QjlGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTk4RkE4NzE3NEI4QjAwRkJB
OUY2NURDRjFCNjA1NDc2QTRCOUZELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUyODVBNTVCNkU5QzM1OEQwMjc3ODRBNEJBRDk3NkU5RTdCOEYzNzhF
RjVGMzlCODdCN0IxN0E0MzA2M0EwNC8wLzMyMzgzMDMzM2EzNDM1MzAzYTY1MzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzIzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBFAOMA0GCSqGSIb3DQEBCwUAA4IBAQAHJ+FNk+0ZPj4XbCsUray7Aimnzp5+
/MizujG2Hv3OFygVyfHR31lQUz2LbnvBCMjITmLTseiFVHh/fJyybRxqiSXeu3fH
3ls6kUsgvONbQCnF/gXQl41xSp3NejpNJpMRroeCFSUMZ93qIJzC94SfeBkcIIrm
xQvXQKr+/SqOkRJOOtso/9zWzVrrvb8WIpsXrXR00ZHN0Gb2e82UQ44yFyCwsiFM
ZvzSMis8ltp4m72K7yUgHWeV1PmBizpimAL1RL+b8Yv/dBtzRqtXFZNk7isYHAKJ
vFHJ7predN+2rRK3jgiyZ80kIqN4sMHBixg1lratjFKWp/VCoAZ9Ys3e
-----END CERTIFICATE-----