Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/323830333a616434303a3a2f33322d3438203d3e20323634363836.roa
File:                     323830333a616434303a3a2f33322d3438203d3e20323634363836.roa (raw, json)
Hash identifier:          OcYaXkM0VCTiJT54yv5aa/jWag8O/Ak4TkfensSMOdM=
Subject key identifier:   28:5C:37:85:77:6B:21:92:31:10:91:01:8F:05:DE:F6:75:35:87:19
Certificate issuer:       /CN=9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949
Certificate serial:       20C5F1DDB15E8301736BC60C1379FF463119372D
Authority key identifier: 9B:C9:BC:0D:CE:47:59:BD:6C:DE:C9:CB:22:43:46:C1:09:F4:C9:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/323830333a616434303a3a2f33322d3438203d3e20323634363836.roa
Signing time:             Tue 05 Mar 2024 18:11:13 +0000
ROA not before:           Tue 05 Mar 2024 18:06:13 +0000
ROA not after:            Tue 04 Mar 2025 18:11:13 +0000
asID:                     264686
IP address blocks:        2803:ad40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:f1:dd:b1:5e:83:01:73:6b:c6:0c:13:79:ff:46:31:19:37:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949
        Validity
            Not Before: Mar  5 18:06:13 2024 GMT
            Not After : Mar  4 18:11:13 2025 GMT
        Subject: CN=285C3785776B2192311091018F05DEF675358719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:56:c3:88:42:db:54:88:45:8b:78:84:0b:
                    6b:9b:e9:07:c0:f5:d8:4d:c4:97:42:43:ed:d9:5b:
                    34:27:14:4b:ca:c6:86:0b:7e:2d:3b:07:84:b2:13:
                    ca:40:e9:99:73:71:1e:36:fd:59:20:7d:63:bb:4a:
                    55:87:0c:d9:37:71:96:52:1e:b5:4e:ba:04:72:10:
                    f2:a4:d9:f1:f5:7d:5d:af:4c:b4:bd:df:dc:50:4e:
                    c7:f6:dc:2c:8b:60:f9:a8:cd:bf:08:22:1d:2d:f6:
                    0a:c9:b6:93:de:2c:66:99:cc:8e:c9:f4:9f:2c:df:
                    e2:13:7d:ed:86:f6:ef:ef:c0:7a:47:80:f0:bc:33:
                    39:c9:d8:32:8b:ae:bf:6a:c7:61:51:49:9d:d3:97:
                    47:51:0c:a4:48:aa:a0:27:7f:b4:cb:67:52:ce:51:
                    94:7e:89:9f:ac:a2:17:f2:eb:a0:d1:0d:74:b6:25:
                    6c:f8:19:60:cd:67:b2:a1:e9:be:bd:4e:76:27:86:
                    56:1b:a6:bf:b3:d6:43:8a:9a:35:91:f6:5c:42:70:
                    17:e0:8c:ef:5c:50:3b:a2:5a:63:23:a7:38:03:3d:
                    43:94:74:95:11:bf:0e:b8:19:0e:84:e6:17:df:4a:
                    0b:61:28:cb:ce:1f:2e:25:9e:0f:21:ce:8c:39:7a:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5C:37:85:77:6B:21:92:31:10:91:01:8F:05:DE:F6:75:35:87:19
            X509v3 Authority Key Identifier:
                keyid:9B:C9:BC:0D:CE:47:59:BD:6C:DE:C9:CB:22:43:46:C1:09:F4:C9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/323830333a616434303a3a2f33322d3438203d3e20323634363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:3a:23:67:5e:62:60:a7:e7:ea:f8:c6:2b:61:e1:53:97:37:
         47:ae:d8:f8:86:21:6e:44:74:c6:7b:64:23:6b:92:0f:ed:81:
         06:ba:8e:1e:23:31:eb:9d:7e:71:f8:94:98:00:26:ad:2d:c0:
         f7:c6:8f:9b:6d:b7:2a:de:5f:38:8d:6d:31:35:9c:72:40:a3:
         e5:0d:81:1b:64:3e:28:e2:30:c0:b9:0c:94:2e:a8:f8:b1:a6:
         f1:31:57:73:4d:c6:81:cb:54:42:f6:dc:a3:c6:81:db:c4:d8:
         27:2e:39:6f:d0:fa:0a:09:2c:5b:cb:34:7d:04:a0:37:80:75:
         da:fa:f6:85:4c:c4:6a:b7:ef:f7:4b:3b:3f:b3:32:39:c7:e5:
         b0:c5:eb:58:b2:42:d6:25:2f:ca:d5:eb:db:bd:3b:a1:84:35:
         e0:ba:a4:6e:8c:a9:5e:7d:b4:27:04:78:34:ce:be:3c:1c:09:
         b3:51:aa:41:a9:de:ee:e2:a9:d4:44:cb:c8:b2:fc:f5:81:84:
         cb:63:d9:7d:c0:72:78:64:02:e5:09:43:06:a2:4b:1e:51:ef:
         46:a0:82:b9:cd:6e:1b:88:9f:a0:20:9a:50:cc:88:c4:f8:c7:
         bc:f1:6c:94:17:99:da:f8:e5:71:66:71:3c:9d:bf:88:25:7e:
         a8:a8:1c:b2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUIMXx3bFegwFza8YME3n/RjEZNy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDOUJDMERDRTQ3NTlCRDZDREVDOUNCMjI0MzQ2QzEw
OUY0Qzk0OTAeFw0yNDAzMDUxODA2MTNaFw0yNTAzMDQxODExMTNaMDMxMTAvBgNV
BAMTKDI4NUMzNzg1Nzc2QjIxOTIzMTEwOTEwMThGMDVERUY2NzUzNTg3MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDlbDiELbVIhFi3iEC2ub6QfA
9dhNxJdCQ+3ZWzQnFEvKxoYLfi07B4SyE8pA6ZlzcR42/VkgfWO7SlWHDNk3cZZS
HrVOugRyEPKk2fH1fV2vTLS939xQTsf23CyLYPmozb8IIh0t9grJtpPeLGaZzI7J
9J8s3+ITfe2G9u/vwHpHgPC8MznJ2DKLrr9qx2FRSZ3Tl0dRDKRIqqAnf7TLZ1LO
UZR+iZ+sohfy66DRDXS2JWz4GWDNZ7Kh6b69TnYnhlYbpr+z1kOKmjWR9lxCcBfg
jO9cUDuiWmMjpzgDPUOUdJURvw64GQ6E5hffSgthKMvOHy4lng8hzow5eqHjAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUKFw3hXdrIZIxEJEBjwXe9nU1hxkwHwYDVR0j
BBgwFoAUm8m8Dc5HWb1s3snLIkNGwQn0yUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTQ4QkQ1MTI1QkU0RUYzNjg1MDI3MUMxMjczMTQ2NTY2
QzYwNDBGMTI2RTNCNzBDNzVDREUxMDUyRTRCQzU1LzAvOUJDOUJDMERDRTQ3NTlC
RDZDREVDOUNCMjI0MzQ2QzEwOUY0Qzk0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkM5QkMwRENFNDc1OUJENkNE
RUM5Q0IyMjQzNDZDMTA5RjRDOTQ5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU0OEJENTEyNUJFNEVGMzY4NTAyNzFDMTI3MzE0NjU2NkM2MDQwRjEy
NkUzQjcwQzc1Q0RFMTA1MkU0QkM1NS8wLzMyMzgzMDMzM2E2MTY0MzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM2MzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDrUAw
DQYJKoZIhvcNAQELBQADggEBAK46I2deYmCn5+r4xith4VOXN0eu2PiGIW5EdMZ7
ZCNrkg/tgQa6jh4jMeudfnH4lJgAJq0twPfGj5tttyreXziNbTE1nHJAo+UNgRtk
PijiMMC5DJQuqPixpvExV3NNxoHLVEL23KPGgdvE2CcuOW/Q+goJLFvLNH0EoDeA
ddr69oVMxGq37/dLOz+zMjnH5bDF61iyQtYlL8rV69u9O6GENeC6pG6MqV59tCcE
eDTOvjwcCbNRqkGp3u7iqdREy8iy/PWBhMtj2X3AcnhkAuUJQwaiSx5R70aggrnN
bhuIn6AgmlDMiMT4x7zxbJQXmdr45XFmcTydv4glfqioHLI=
-----END CERTIFICATE-----