Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          JqPX5h3Hhvicbo98tRYvTLEd4ZScmYsXU+Mt1xwybeI=
Subject key identifier:   E9:3D:22:97:0B:57:64:C4:D2:B7:59:0B:08:A8:65:27:8F:2A:1C:33
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       792684486BAB97350A2BF84BC49948191E070D8E
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:02 +0000
ROA not before:           Tue 30 Apr 2024 04:50:02 +0000
ROA not after:            Tue 29 Apr 2025 04:55:02 +0000
asID:                     273192
IP address blocks:        2803:650:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:26:84:48:6b:ab:97:35:0a:2b:f8:4b:c4:99:48:19:1e:07:0d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:02 2024 GMT
            Not After : Apr 29 04:55:02 2025 GMT
        Subject: CN=E93D22970B5764C4D2B7590B08A865278F2A1C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:a0:02:5f:d4:92:36:77:ec:ac:ed:12:bd:
                    8b:d7:1c:15:6f:e6:c7:79:a3:f9:06:8d:f5:1d:3a:
                    25:78:c9:4f:4d:48:ef:75:09:d6:dc:57:d7:07:7b:
                    11:2e:d0:0e:d1:df:2d:b0:6a:26:a4:17:64:54:75:
                    6a:96:bd:e4:e5:d6:48:a8:c1:55:9f:0e:b8:31:0a:
                    6c:ac:9c:6e:b0:30:96:55:fb:73:87:16:8e:c3:c5:
                    1d:49:8a:5b:fc:ef:d0:a1:2f:8b:02:60:31:0f:e2:
                    5f:fd:93:0e:83:74:dd:ab:d9:6e:55:bf:35:70:12:
                    35:f4:bf:7c:0e:17:ec:65:13:3f:a5:19:34:aa:f8:
                    29:43:a1:b2:67:8a:46:87:dc:69:e9:04:2b:b8:41:
                    56:44:ab:27:29:dc:bd:da:45:7e:16:9f:19:a6:5c:
                    7a:93:fd:62:0e:1f:dc:59:6b:ae:5c:78:b6:da:2f:
                    5d:43:10:a9:e7:10:9e:7f:72:ae:4a:64:22:34:90:
                    d9:51:76:8d:73:5d:f8:38:e8:24:3f:0a:52:6c:8e:
                    f1:16:ba:a2:20:e7:be:d0:08:ee:f3:14:ea:0a:e3:
                    f7:5c:3d:a2:19:94:c2:34:f9:b4:c4:d7:17:99:ed:
                    50:3a:5d:8a:8b:76:68:5b:20:de:7e:60:06:5c:2e:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3D:22:97:0B:57:64:C4:D2:B7:59:0B:08:A8:65:27:8F:2A:1C:33
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3230303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:21:f4:5a:d5:57:ee:56:79:c9:82:c5:41:36:e4:c5:36:aa:
         b1:0c:50:54:7c:d6:a2:25:ec:6b:03:b1:7e:1f:22:24:fa:41:
         5e:b3:f1:5d:53:8a:b1:88:7e:82:5d:c4:6d:3d:c3:6d:08:01:
         db:a5:29:d5:1b:d5:0f:48:84:dd:9f:fb:f8:d9:0e:59:a8:29:
         20:fa:11:46:0c:8c:d7:14:6b:84:2a:8d:30:dc:8d:63:8f:89:
         06:5d:17:8a:44:59:d2:91:22:61:b3:f4:bc:ac:c6:ab:2f:42:
         f5:57:48:d3:3a:41:c9:05:84:d6:a4:7c:40:28:b6:6c:14:5c:
         01:fd:cb:85:45:35:da:a5:ce:ae:76:70:e2:33:b4:3b:95:1f:
         44:e1:3d:57:67:47:02:0b:22:50:4d:96:5d:2e:ac:b2:3c:75:
         99:b1:0b:bc:d9:b0:a2:8d:b8:4c:8c:2b:aa:88:b1:d9:6b:13:
         7c:52:31:52:76:46:33:fa:87:4f:1c:f2:4b:6f:5c:d3:0d:b1:
         c2:32:63:a3:ce:3e:8c:f8:73:9b:eb:ce:64:02:02:8f:a1:dc:
         57:50:b8:f6:f6:ff:7e:17:df:1f:8d:ee:8f:f6:96:f0:d5:fc:
         79:51:92:16:c3:5e:37:a9:06:54:5f:0a:78:50:0c:52:77:a2:
         04:d2:86:e6
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUeSaESGurlzUKK/hLxJlIGR4HDY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFNkM5NkZFQTRGQzVDMTdBNTEwNEYwNjg4NEM1MEM2
QUYwMTVBMDAeFw0yNDA0MzAwNDUwMDJaFw0yNTA0MjkwNDU1MDJaMDMxMTAvBgNV
BAMTKEU5M0QyMjk3MEI1NzY0QzREMkI3NTkwQjA4QTg2NTI3OEYyQTFDMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5KACX9SSNnfsrO0SvYvXHBVv
5sd5o/kGjfUdOiV4yU9NSO91CdbcV9cHexEu0A7R3y2waiakF2RUdWqWveTl1kio
wVWfDrgxCmysnG6wMJZV+3OHFo7DxR1Jilv879ChL4sCYDEP4l/9kw6DdN2r2W5V
vzVwEjX0v3wOF+xlEz+lGTSq+ClDobJnikaH3GnpBCu4QVZEqycp3L3aRX4Wnxmm
XHqT/WIOH9xZa65ceLbaL11DEKnnEJ5/cq5KZCI0kNlRdo1zXfg46CQ/ClJsjvEW
uqIg577QCO7zFOoK4/dcPaIZlMI0+bTE1xeZ7VA6XYqLdmhbIN5+YAZcLiAdAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQU6T0ilwtXZMTSt1kLCKhlJ48qHDMwHwYDVR0j
BBgwFoAUlubJb+pPxcF6UQTwaITFDGrwFaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjQxNTJBNTk3ODQ2MjRDRjIyOEFGNDlFQTQzREQwQkEz
Q0Q4MTA4OTUzRTA3MURBMUJEMzMwN0VFMURCQjlDLzAvOTZFNkM5NkZFQTRGQzVD
MTdBNTEwNEYwNjg4NEM1MEM2QUYwMTVBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkU2Qzk2RkVBNEZDNUMxN0E1
MTA0RjA2ODg0QzUwQzZBRjAxNUEwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Y0MTUyQTU5Nzg0NjI0Q0YyMjhBRjQ5RUE0M0REMEJBM0NEODEwODk1
M0UwNzFEQTFCRDMzMDdFRTFEQkI5Qy8wLzMyMzgzMDMzM2EzNjM1MzAzYTMyMzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzkzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBlACMA0GCSqGSIb3DQEBCwUAA4IBAQAoIfRa1VfuVnnJgsVBNuTFNqqxDFBU
fNaiJexrA7F+HyIk+kFes/FdU4qxiH6CXcRtPcNtCAHbpSnVG9UPSITdn/v42Q5Z
qCkg+hFGDIzXFGuEKo0w3I1jj4kGXReKRFnSkSJhs/S8rMarL0L1V0jTOkHJBYTW
pHxAKLZsFFwB/cuFRTXapc6udnDiM7Q7lR9E4T1XZ0cCCyJQTZZdLqyyPHWZsQu8
2bCijbhMjCuqiLHZaxN8UjFSdkYz+odPHPJLb1zTDbHCMmOjzj6M+HOb685kAgKP
odxXULj29v9+F98fje6P9pbw1fx5UZIWw143qQZUXwp4UAxSd6IE0obm
-----END CERTIFICATE-----