Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3330303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3330303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          fPYcV7Yi9qhl2uaqUQAkBzfOeE9bH9CAh55I/YiC2jI=
Subject key identifier:   53:6F:34:D9:7C:C1:04:00:70:2E:F6:5C:0A:07:D6:2D:09:DC:0B:DF
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       2A3EEFBC3EDA80F0545EBEEB3D303F8313D2BB2D
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3330303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:04 +0000
ROA not before:           Tue 30 Apr 2024 04:50:04 +0000
ROA not after:            Tue 29 Apr 2025 04:55:04 +0000
asID:                     273192
IP address blocks:        2803:650:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3e:ef:bc:3e:da:80:f0:54:5e:be:eb:3d:30:3f:83:13:d2:bb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:04 2024 GMT
            Not After : Apr 29 04:55:04 2025 GMT
        Subject: CN=536F34D97CC10400702EF65C0A07D62D09DC0BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:db:13:9e:d0:94:d6:ec:8c:29:46:df:55:
                    aa:55:3e:79:a1:7d:40:b9:08:9f:1e:3b:98:99:65:
                    56:58:72:5d:fa:3e:ef:bc:15:62:41:2e:a7:53:05:
                    e1:8a:56:92:46:76:87:bd:4e:6b:0a:03:e4:33:8f:
                    70:f3:35:a0:37:bc:fa:2c:6a:45:41:6a:19:59:fb:
                    c2:be:fa:e5:1a:33:69:42:cc:27:ab:ec:bc:eb:c4:
                    47:a5:82:93:9a:92:1b:a0:76:03:cd:04:df:df:bd:
                    2e:f9:f9:b9:0a:4a:e6:64:80:f6:2c:aa:59:ca:b6:
                    cb:fe:ba:88:02:65:29:9e:97:2f:76:f4:5d:28:30:
                    b5:1f:db:ff:c9:97:21:5c:0a:09:f3:70:e6:5d:55:
                    c9:27:d7:75:5f:ca:25:97:4c:c9:e9:00:bd:46:35:
                    64:9f:40:3d:49:c2:f2:9a:56:68:19:9a:02:d2:52:
                    02:cf:28:9d:9a:f8:53:56:6f:69:4b:5a:e8:8b:19:
                    41:c2:8c:45:92:1b:ce:be:3f:95:c5:7d:c5:29:f7:
                    f1:5d:e9:22:f5:4f:98:82:54:4f:a9:99:b4:51:a2:
                    ee:87:e2:b4:55:43:80:35:f1:47:b0:14:66:30:8b:
                    05:67:14:41:b4:a9:db:cf:63:10:a7:9f:8a:b6:d9:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6F:34:D9:7C:C1:04:00:70:2E:F6:5C:0A:07:D6:2D:09:DC:0B:DF
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3330303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:24:e3:97:d9:5a:27:d1:ed:aa:f8:8d:15:fa:e4:53:c2:
         a4:18:f1:4d:a9:a3:12:53:d3:f3:95:db:ca:98:32:85:a1:8f:
         cf:d7:f2:ad:5a:b0:d0:ad:c5:b5:7c:b8:dd:82:02:82:44:b1:
         f0:04:15:dc:7f:b6:c0:36:7b:00:35:99:44:57:92:5f:79:cb:
         df:09:f1:51:64:5b:65:3f:58:4a:d2:05:59:e4:2f:03:5f:49:
         a4:72:5e:7e:2a:35:1d:67:1c:37:d1:02:a6:03:8c:4e:36:8f:
         a2:fa:17:b4:d2:49:28:98:1e:29:e7:1a:22:0c:c3:36:eb:80:
         ad:0a:61:f3:2f:5c:57:f9:8e:b6:1c:a0:73:c0:0d:00:4f:2e:
         ea:5e:d9:97:47:0a:2d:1a:20:60:15:8e:c7:b6:12:93:0c:5c:
         2d:3d:1a:55:05:30:be:96:48:19:ff:71:ff:22:66:c0:31:08:
         0b:f5:9f:a9:1d:78:c2:0b:48:cc:9e:bc:5e:45:da:46:4f:11:
         e0:8c:17:4a:03:cc:ff:fc:4d:2b:f6:09:66:a5:58:d6:e1:82:
         94:b5:70:73:d2:3d:b4:ba:35:ed:c2:c1:9b:26:83:67:04:71:
         11:0e:79:d4:c0:77:2b:76:74:19:a5:c5:cd:de:3b:f5:22:70:
         12:e5:d6:f0
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUKj7vvD7agPBUXr7rPTA/gxPSuy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFNkM5NkZFQTRGQzVDMTdBNTEwNEYwNjg4NEM1MEM2
QUYwMTVBMDAeFw0yNDA0MzAwNDUwMDRaFw0yNTA0MjkwNDU1MDRaMDMxMTAvBgNV
BAMTKDUzNkYzNEQ5N0NDMTA0MDA3MDJFRjY1QzBBMDdENjJEMDlEQzBCREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLdsTntCU1uyMKUbfVapVPnmh
fUC5CJ8eO5iZZVZYcl36Pu+8FWJBLqdTBeGKVpJGdoe9TmsKA+Qzj3DzNaA3vPos
akVBahlZ+8K++uUaM2lCzCer7LzrxEelgpOakhugdgPNBN/fvS75+bkKSuZkgPYs
qlnKtsv+uogCZSmely929F0oMLUf2//JlyFcCgnzcOZdVckn13VfyiWXTMnpAL1G
NWSfQD1JwvKaVmgZmgLSUgLPKJ2a+FNWb2lLWuiLGUHCjEWSG86+P5XFfcUp9/Fd
6SL1T5iCVE+pmbRRou6H4rRVQ4A18UewFGYwiwVnFEG0qdvPYxCnn4q22U6PAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUU2802XzBBABwLvZcCgfWLQncC98wHwYDVR0j
BBgwFoAUlubJb+pPxcF6UQTwaITFDGrwFaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjQxNTJBNTk3ODQ2MjRDRjIyOEFGNDlFQTQzREQwQkEz
Q0Q4MTA4OTUzRTA3MURBMUJEMzMwN0VFMURCQjlDLzAvOTZFNkM5NkZFQTRGQzVD
MTdBNTEwNEYwNjg4NEM1MEM2QUYwMTVBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkU2Qzk2RkVBNEZDNUMxN0E1
MTA0RjA2ODg0QzUwQzZBRjAxNUEwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Y0MTUyQTU5Nzg0NjI0Q0YyMjhBRjQ5RUE0M0REMEJBM0NEODEwODk1
M0UwNzFEQTFCRDMzMDdFRTFEQkI5Qy8wLzMyMzgzMDMzM2EzNjM1MzAzYTMzMzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzkzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBlADMA0GCSqGSIb3DQEBCwUAA4IBAQAcsiTjl9laJ9HtqviNFfrkU8KkGPFN
qaMSU9PzldvKmDKFoY/P1/KtWrDQrcW1fLjdggKCRLHwBBXcf7bANnsANZlEV5Jf
ecvfCfFRZFtlP1hK0gVZ5C8DX0mkcl5+KjUdZxw30QKmA4xONo+i+he00kkomB4p
5xoiDMM264CtCmHzL1xX+Y62HKBzwA0ATy7qXtmXRwotGiBgFY7HthKTDFwtPRpV
BTC+lkgZ/3H/ImbAMQgL9Z+pHXjCC0jMnrxeRdpGTxHgjBdKA8z//E0r9glmpVjW
4YKUtXBz0j20ujXtwsGbJoNnBHERDnnUwHcrdnQZpcXN3jv1InAS5dbw
-----END CERTIFICATE-----