Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/323030313a313332303a3a2f33322d3438203d3e203237373333.roa
File:                     323030313a313332303a3a2f33322d3438203d3e203237373333.roa (raw, json)
Hash identifier:          jS+B7iqAdgP8muauRJfyMknOwJVU63/cKXLRldkfReM=
Subject key identifier:   9C:B4:5A:58:4B:D7:F0:BB:A0:1A:67:C3:91:36:E5:27:F3:D2:7A:13
Certificate issuer:       /CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
Certificate serial:       4BB3B59D16181CFC2EBF8BA007DFD395F0043BEF
Authority key identifier: C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/323030313a313332303a3a2f33322d3438203d3e203237373333.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     27733
IP address blocks:        2001:1320::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b3:b5:9d:16:18:1c:fc:2e:bf:8b:a0:07:df:d3:95:f0:04:3b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=9CB45A584BD7F0BBA01A67C39136E527F3D27A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:6f:5c:0b:7c:e3:29:6f:64:53:bf:5b:e7:
                    61:d8:75:bd:be:42:61:08:ee:37:ce:5a:50:c3:c6:
                    a4:ca:24:fb:31:03:a4:ef:3e:17:2e:06:ed:f5:d0:
                    89:c2:ba:9e:f6:f1:e8:ef:e3:e2:7d:65:48:8c:76:
                    b5:72:2b:06:89:36:33:ec:5a:1d:73:49:73:ab:1b:
                    92:80:8a:3f:00:00:29:a3:c9:3a:bd:b3:7c:3c:ff:
                    48:d1:b6:b4:16:08:c6:0c:19:4c:86:77:35:30:1e:
                    7a:4e:fe:d8:a2:ee:94:02:80:5d:84:4a:1a:14:3c:
                    2a:a4:55:58:66:7b:33:8f:a9:66:fd:11:db:e0:ec:
                    51:6c:da:12:c7:c2:69:36:cf:f9:32:ff:1e:cb:26:
                    00:a2:da:41:50:75:11:62:3c:bb:ff:30:b0:54:19:
                    dc:77:89:2f:2c:40:15:e5:fe:f7:5a:4b:e2:d2:bb:
                    86:76:65:26:8d:03:84:18:a0:cb:1b:75:76:5e:a3:
                    9f:58:de:f9:48:a2:d8:dc:e5:18:45:2d:52:da:42:
                    7d:1c:fa:5a:30:fc:a7:ba:cc:2c:8c:e3:9e:dc:66:
                    c8:d6:ec:d5:c3:ca:d8:5b:49:b8:ea:85:8f:59:ea:
                    fb:fe:bf:04:4c:b4:41:09:d7:66:35:b1:cf:e5:70:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B4:5A:58:4B:D7:F0:BB:A0:1A:67:C3:91:36:E5:27:F3:D2:7A:13
            X509v3 Authority Key Identifier:
                keyid:C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/323030313a313332303a3a2f33322d3438203d3e203237373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1320::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:ab:d3:09:41:d9:78:ff:a6:ad:3c:0b:61:30:68:fd:50:72:
         bb:34:e8:c7:f2:8a:47:32:47:57:01:b4:99:8d:a8:95:33:c0:
         7a:9e:90:8d:6e:83:99:56:8e:25:f8:a4:f5:7d:d0:e7:40:83:
         62:e7:64:e3:c7:50:25:5a:bd:a5:6d:24:30:04:df:b2:a2:be:
         da:7f:c9:35:71:00:bf:0d:14:44:29:51:d9:95:33:25:70:d5:
         79:69:34:87:69:b6:4a:84:eb:9d:1c:ae:8e:d7:e1:f9:4d:3a:
         03:f8:6b:1f:5e:d2:6d:a9:d8:30:b2:64:50:7d:6f:8c:8d:41:
         04:a2:17:82:54:c3:93:3c:2a:31:d5:63:4a:ff:db:ae:68:26:
         83:d1:65:8d:d8:d9:71:5d:a7:9e:07:e3:02:d7:52:a9:44:a8:
         25:fb:21:25:7f:61:d1:6f:2d:25:ac:d9:a0:eb:cf:ee:05:46:
         3f:84:5e:79:58:68:10:24:7f:75:45:60:52:a4:67:2c:bd:17:
         87:b6:07:54:6e:48:78:e7:61:75:4a:3c:e2:28:ee:4e:07:6e:
         ea:4c:b0:93:26:1b:9f:67:82:dc:35:ac:80:f8:51:48:e4:d5:
         77:ce:02:ea:47:38:5e:4c:df:fb:88:1a:19:99:14:68:89:52:
         7a:17:ba:bc
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUS7O1nRYYHPwuv4ugB9/TlfAEO+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNFNzM2OEQzNUUzNjMzQTMzNzY5NDVERTAzODY3RDJC
MzFDREQ4NzAeFw0yNDAzMDUxNzM2MjhaFw0yNTAzMDQxNzQxMjhaMDMxMTAvBgNV
BAMTKDlDQjQ1QTU4NEJEN0YwQkJBMDFBNjdDMzkxMzZFNTI3RjNEMjdBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClVW9cC3zjKW9kU79b52HYdb2+
QmEI7jfOWlDDxqTKJPsxA6TvPhcuBu310InCup728ejv4+J9ZUiMdrVyKwaJNjPs
Wh1zSXOrG5KAij8AACmjyTq9s3w8/0jRtrQWCMYMGUyGdzUwHnpO/tii7pQCgF2E
ShoUPCqkVVhmezOPqWb9Edvg7FFs2hLHwmk2z/ky/x7LJgCi2kFQdRFiPLv/MLBU
Gdx3iS8sQBXl/vdaS+LSu4Z2ZSaNA4QYoMsbdXZeo59Y3vlIotjc5RhFLVLaQn0c
+low/Ke6zCyM457cZsjW7NXDythbSbjqhY9Z6vv+vwRMtEEJ12Y1sc/lcCx7AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUnLRaWEvX8LugGmfDkTblJ/PSehMwHwYDVR0j
BBgwFoAUw+c2jTXjYzozdpRd4Dhn0rMc3YcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RDg5REE1NTFFNzMzMUI1M0I2ODgyMjgxODZEMTREREJB
NDk4RkUzNzlCN0QzRUYzNzgxRTZBMzBFM0FERjUwLzAvQzNFNzM2OEQzNUUzNjMz
QTMzNzY5NDVERTAzODY3RDJCMzFDREQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0U3MzY4RDM1RTM2MzNBMzM3
Njk0NURFMDM4NjdEMkIzMUNERDg3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Q4OURBNTUxRTczMzFCNTNCNjg4MjI4MTg2RDE0RERCQTQ5OEZFMzc5
QjdEM0VGMzc4MUU2QTMwRTNBREY1MC8wLzMyMzAzMDMxM2EzMTMzMzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczNzMzMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARMgMA0G
CSqGSIb3DQEBCwUAA4IBAQCKq9MJQdl4/6atPAthMGj9UHK7NOjH8opHMkdXAbSZ
jaiVM8B6npCNboOZVo4l+KT1fdDnQINi52Tjx1AlWr2lbSQwBN+yor7af8k1cQC/
DRREKVHZlTMlcNV5aTSHabZKhOudHK6O1+H5TToD+GsfXtJtqdgwsmRQfW+MjUEE
oheCVMOTPCox1WNK/9uuaCaD0WWN2NlxXaeeB+MC11KpRKgl+yElf2HRby0lrNmg
68/uBUY/hF55WGgQJH91RWBSpGcsvReHtgdUbkh452F1SjziKO5OB27qTLCTJhuf
Z4LcNayA+FFI5NV3zgLqRzheTN/7iBoZmRRoiVJ6F7q8
-----END CERTIFICATE-----