Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3830303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3830303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          mp0I0uWQ3z4K4vEajOobi+gBd4cJvxXWOnTMX8roQ+c=
Subject key identifier:   A3:AC:87:27:82:1F:00:01:08:62:F5:04:DF:60:E6:0E:71:E2:D0:99
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       3BCBC893E419003ECE336163622034BABE4862B9
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3830303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:02 +0000
ROA not before:           Tue 30 Apr 2024 04:50:02 +0000
ROA not after:            Tue 29 Apr 2025 04:55:02 +0000
asID:                     273192
IP address blocks:        2803:650:800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cb:c8:93:e4:19:00:3e:ce:33:61:63:62:20:34:ba:be:48:62:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:02 2024 GMT
            Not After : Apr 29 04:55:02 2025 GMT
        Subject: CN=A3AC8727821F00010862F504DF60E60E71E2D099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8b:25:8b:6f:73:03:66:f0:b6:d6:52:37:ee:
                    84:43:fd:9f:31:7a:5a:17:52:35:79:b8:30:d2:eb:
                    f9:63:b4:76:90:36:ea:2f:d1:29:83:36:78:68:57:
                    18:ca:3a:94:7a:d4:c2:2a:29:08:90:c1:ca:f1:05:
                    08:73:e7:9f:a7:a8:61:20:f1:08:43:7b:93:31:75:
                    41:d7:7c:0d:18:8d:bf:7d:db:b7:c8:d7:c1:d4:d0:
                    68:55:90:db:1c:88:7f:01:99:22:cb:fc:0c:1f:96:
                    c3:69:eb:e4:c6:de:b1:4e:9f:64:8f:6c:a6:39:63:
                    35:89:46:f1:a4:dc:34:3d:c7:b8:3e:cf:0c:47:e2:
                    6f:08:92:69:ca:42:b2:86:d9:ec:a8:74:ce:be:6a:
                    be:58:02:88:5c:96:fa:8e:93:06:e1:c8:24:f4:44:
                    d9:4c:6e:7b:10:e1:00:51:7f:6e:ae:32:10:c7:d7:
                    f3:1f:e4:7d:b9:a7:7b:64:d0:6d:dc:29:a4:88:06:
                    df:33:c4:74:af:bf:a2:64:b1:b7:6b:c3:9c:16:12:
                    98:0c:39:b0:ee:6a:3e:be:6e:89:38:8a:46:08:d7:
                    fe:92:c8:15:eb:33:cf:12:bf:84:2b:16:dc:45:79:
                    7a:32:06:d5:82:84:cf:bd:ff:84:1f:0a:59:d7:6a:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AC:87:27:82:1F:00:01:08:62:F5:04:DF:60:E6:0E:71:E2:D0:99
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3830303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:1b:90:82:25:c0:76:7c:3b:64:74:51:df:df:ed:2c:70:
         b2:e4:b5:96:c8:32:1a:40:d0:3d:b5:4d:2b:a3:1f:8a:24:39:
         98:18:55:0e:33:90:29:87:ec:7b:65:19:8c:c3:e0:c8:99:a7:
         cf:47:8c:f3:f4:1a:32:23:21:28:7d:9b:14:a9:50:7d:a0:0a:
         5f:36:96:cb:90:5f:7f:f4:9c:ce:61:5b:14:3d:52:92:01:0d:
         1d:78:6e:c9:a6:81:73:ac:cf:69:fd:7b:f6:0a:56:d7:dc:b4:
         26:c7:2b:bf:1f:b7:65:f5:4d:58:73:b1:34:de:e5:47:58:09:
         16:6d:8d:7e:ea:00:96:db:e6:97:eb:b2:2b:b9:4a:7a:31:69:
         81:97:e8:ed:8c:b2:a6:08:e5:80:01:6a:cc:2a:08:f1:77:5d:
         cc:26:3e:a9:e4:70:7f:dd:7e:c3:3d:12:ec:9d:0c:df:f6:f3:
         96:ec:59:a7:49:df:72:ec:b2:ce:27:d9:09:a1:72:6f:27:db:
         61:25:e2:72:8f:f8:0b:c5:0a:de:a6:34:1d:f4:6f:d0:d9:74:
         e4:95:30:d0:01:8c:98:4f:69:7f:06:7a:e8:69:7e:f2:73:a8:
         1a:46:42:81:b2:74:b2:39:90:59:4f:7c:35:48:d8:7d:ea:0a:
         3c:6b:8f:31
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUO8vIk+QZAD7OM2FjYiA0ur5IYrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFNkM5NkZFQTRGQzVDMTdBNTEwNEYwNjg4NEM1MEM2
QUYwMTVBMDAeFw0yNDA0MzAwNDUwMDJaFw0yNTA0MjkwNDU1MDJaMDMxMTAvBgNV
BAMTKEEzQUM4NzI3ODIxRjAwMDEwODYyRjUwNERGNjBFNjBFNzFFMkQwOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1iyWLb3MDZvC21lI37oRD/Z8x
eloXUjV5uDDS6/ljtHaQNuov0SmDNnhoVxjKOpR61MIqKQiQwcrxBQhz55+nqGEg
8QhDe5MxdUHXfA0Yjb9927fI18HU0GhVkNsciH8BmSLL/AwflsNp6+TG3rFOn2SP
bKY5YzWJRvGk3DQ9x7g+zwxH4m8IkmnKQrKG2eyodM6+ar5YAohclvqOkwbhyCT0
RNlMbnsQ4QBRf26uMhDH1/Mf5H25p3tk0G3cKaSIBt8zxHSvv6Jksbdrw5wWEpgM
ObDuaj6+bok4ikYI1/6SyBXrM88Sv4QrFtxFeXoyBtWChM+9/4QfClnXavHvAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUo6yHJ4IfAAEIYvUE32DmDnHi0JkwHwYDVR0j
BBgwFoAUlubJb+pPxcF6UQTwaITFDGrwFaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjQxNTJBNTk3ODQ2MjRDRjIyOEFGNDlFQTQzREQwQkEz
Q0Q4MTA4OTUzRTA3MURBMUJEMzMwN0VFMURCQjlDLzAvOTZFNkM5NkZFQTRGQzVD
MTdBNTEwNEYwNjg4NEM1MEM2QUYwMTVBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkU2Qzk2RkVBNEZDNUMxN0E1
MTA0RjA2ODg0QzUwQzZBRjAxNUEwLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Y0MTUyQTU5Nzg0NjI0Q0YyMjhBRjQ5RUE0M0REMEJBM0NEODEwODk1
M0UwNzFEQTFCRDMzMDdFRTFEQkI5Qy8wLzMyMzgzMDMzM2EzNjM1MzAzYTM4MzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzczMzMxMzkzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACgDBlAIMA0GCSqGSIb3DQEBCwUAA4IBAQB29BuQgiXAdnw7ZHRR39/tLHCy5LWW
yDIaQNA9tU0rox+KJDmYGFUOM5Aph+x7ZRmMw+DImafPR4zz9BoyIyEofZsUqVB9
oApfNpbLkF9/9JzOYVsUPVKSAQ0deG7JpoFzrM9p/Xv2ClbX3LQmxyu/H7dl9U1Y
c7E03uVHWAkWbY1+6gCW2+aX67IruUp6MWmBl+jtjLKmCOWAAWrMKgjxd13MJj6p
5HB/3X7DPRLsnQzf9vOW7FmnSd9y7LLOJ9kJoXJvJ9thJeJyj/gLxQrepjQd9G/Q
2XTklTDQAYyYT2l/BnroaX7yc6gaRkKBsnSyOZBZT3w1SNh96go8a48x
-----END CERTIFICATE-----