Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/323830333a346132303a3a2f33322d3332203d3e20323635383438.roa
File:                     323830333a346132303a3a2f33322d3332203d3e20323635383438.roa (raw, json)
Hash identifier:          iTyJe7AegrCcukQ58mxM6kIcTNATZOiJkDz5d0aCh24=
Subject key identifier:   5B:0D:AF:07:A2:1A:2B:A1:8E:E6:AB:0E:BA:D3:BA:C5:93:1E:94:09
Certificate issuer:       /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Certificate serial:       674F225BA0F3F55808427F1AC5E79D4C4E8A4A32
Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/323830333a346132303a3a2f33322d3332203d3e20323635383438.roa
Signing time:             Tue 05 Mar 2024 17:53:50 +0000
ROA not before:           Tue 05 Mar 2024 17:48:50 +0000
ROA not after:            Tue 04 Mar 2025 17:53:50 +0000
asID:                     265848
IP address blocks:        2803:4a20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4f:22:5b:a0:f3:f5:58:08:42:7f:1a:c5:e7:9d:4c:4e:8a:4a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
        Validity
            Not Before: Mar  5 17:48:50 2024 GMT
            Not After : Mar  4 17:53:50 2025 GMT
        Subject: CN=5B0DAF07A21A2BA18EE6AB0EBAD3BAC5931E9409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:0a:5c:3f:5c:26:07:a0:a4:1c:5c:cd:68:
                    8c:f6:cd:7f:4f:f2:e3:ab:8c:a6:82:04:f3:ee:96:
                    0e:1b:1f:ec:f0:f2:81:15:cc:d3:a0:64:d4:15:1f:
                    c4:ff:f9:50:dd:99:71:64:8e:63:75:74:d7:60:ce:
                    09:19:05:4e:63:86:fb:34:28:52:9c:90:d0:04:9a:
                    21:83:7f:d8:07:70:70:29:89:31:b2:59:3a:83:c8:
                    9d:a7:c7:cd:78:10:7b:d1:46:96:4a:17:06:f5:ed:
                    d6:5f:2b:8a:a5:86:53:85:90:00:7c:dd:6e:2e:0d:
                    35:b3:24:26:09:c4:4b:d3:e6:2e:83:f1:4d:9e:cf:
                    06:5a:9d:e8:1b:2c:81:ac:18:f0:80:50:49:24:04:
                    bb:e4:ec:09:38:cd:00:e3:b9:ce:c8:23:6f:be:5d:
                    c4:41:dc:41:f1:d5:1b:bb:05:5c:c3:3b:b7:01:d6:
                    77:0a:95:53:64:8c:39:44:06:c7:4e:cd:78:2d:fe:
                    e1:ea:78:c0:c4:f5:07:f0:d6:18:1b:38:63:84:c9:
                    fe:0b:f4:05:5c:08:d3:88:03:82:e3:d4:f9:9f:dd:
                    08:be:f9:fc:b3:5e:1b:de:0e:14:f1:93:6f:bb:77:
                    b5:8a:7a:ba:98:ca:7d:81:fa:29:91:36:c6:9f:f7:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0D:AF:07:A2:1A:2B:A1:8E:E6:AB:0E:BA:D3:BA:C5:93:1E:94:09
            X509v3 Authority Key Identifier:
                keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/323830333a346132303a3a2f33322d3332203d3e20323635383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:81:5b:d3:64:31:c8:d8:fb:b9:90:d8:a1:bb:82:16:83:7e:
         c2:d9:d3:50:2d:da:0d:65:dd:e5:22:90:3f:47:d0:7c:03:5e:
         61:bf:6a:2b:b6:c3:a0:8c:84:af:b7:b9:cf:93:b9:0b:b9:97:
         42:f3:61:02:16:ef:4f:19:36:59:c1:9f:5a:84:91:a4:11:61:
         af:76:7c:d8:1f:e8:c9:2d:d3:c6:e5:90:b3:b8:b9:4a:5e:69:
         91:cb:22:de:d4:fd:87:c9:1d:3c:06:50:d7:34:20:7f:01:53:
         24:c8:67:26:09:64:77:86:3e:56:4f:09:00:c5:b2:d6:8f:3a:
         bc:fb:5c:6d:ba:a2:a7:98:90:1e:4c:ba:22:78:30:f4:5f:4b:
         a0:ac:0a:c6:23:1c:82:83:b5:9e:11:b9:2d:90:b8:9f:6d:b0:
         7c:46:fe:5d:5d:6e:92:45:13:70:42:89:69:48:1b:b4:e1:80:
         be:50:d6:e1:1c:a7:dd:fa:2c:02:f0:fd:6c:db:a0:e6:e5:26:
         3e:d5:b5:4d:c7:3e:88:5e:2c:75:de:26:ee:f1:a4:8c:b7:e8:
         a1:b9:db:b7:69:f6:64:cd:2f:38:35:02:33:5d:49:d9:6f:b6:
         6c:98:89:e7:ed:b8:17:2c:8b:eb:c7:63:aa:4d:41:69:a2:5e:
         40:0e:a6:83
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUZ08iW6Dz9VgIQn8axeedTE6KSjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3
MTk4MTY1MzAeFw0yNDAzMDUxNzQ4NTBaFw0yNTAzMDQxNzUzNTBaMDMxMTAvBgNV
BAMTKDVCMERBRjA3QTIxQTJCQTE4RUU2QUIwRUJBRDNCQUM1OTMxRTk0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcwpcP1wmB6CkHFzNaIz2zX9P
8uOrjKaCBPPulg4bH+zw8oEVzNOgZNQVH8T/+VDdmXFkjmN1dNdgzgkZBU5jhvs0
KFKckNAEmiGDf9gHcHApiTGyWTqDyJ2nx814EHvRRpZKFwb17dZfK4qlhlOFkAB8
3W4uDTWzJCYJxEvT5i6D8U2ezwZanegbLIGsGPCAUEkkBLvk7Ak4zQDjuc7II2++
XcRB3EHx1Ru7BVzDO7cB1ncKlVNkjDlEBsdOzXgt/uHqeMDE9Qfw1hgbOGOEyf4L
9AVcCNOIA4Lj1Pmf3Qi++fyzXhveDhTxk2+7d7WKerqYyn2B+imRNsaf9xARAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUWw2vB6IaK6GO5qsOutO6xZMelAkwHwYDVR0j
BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF
MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1
Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB
MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4
MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzMyMzgzMDMzM2EzNDYxMzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM4MzQzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDSiAw
DQYJKoZIhvcNAQELBQADggEBACWBW9NkMcjY+7mQ2KG7ghaDfsLZ01At2g1l3eUi
kD9H0HwDXmG/aiu2w6CMhK+3uc+TuQu5l0LzYQIW708ZNlnBn1qEkaQRYa92fNgf
6Mkt08blkLO4uUpeaZHLIt7U/YfJHTwGUNc0IH8BUyTIZyYJZHeGPlZPCQDFstaP
Orz7XG26oqeYkB5MuiJ4MPRfS6CsCsYjHIKDtZ4RuS2QuJ9tsHxG/l1dbpJFE3BC
iWlIG7ThgL5Q1uEcp936LALw/WzboOblJj7VtU3HPoheLHXeJu7xpIy36KG527dp
9mTNLzg1AjNdSdlvtmyYieftuBcsi+vHY6pNQWmiXkAOpoM=
-----END CERTIFICATE-----