Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/323830333a313336303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a313336303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          d5MX9PBiYHCUXwpLHxFv+xRc468TCPBKD1iDceIZUm8=
Subject key identifier:   BF:D4:35:1D:6E:4D:2A:4E:F4:E4:21:73:EA:E3:B6:D7:6D:C6:D2:3C
Certificate issuer:       /CN=E66B2921E0AE3454998A8F324E220CC276959514
Certificate serial:       7140FB8BA8416AC0E47C3A656F9886605ABDFEF5
Authority key identifier: E6:6B:29:21:E0:AE:34:54:99:8A:8F:32:4E:22:0C:C2:76:95:95:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E66B2921E0AE3454998A8F324E220CC276959514.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/323830333a313336303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:03:21 +0000
ROA not before:           Tue 05 Mar 2024 17:58:21 +0000
ROA not after:            Tue 04 Mar 2025 18:03:21 +0000
asID:                     52468
IP address blocks:        2803:1360::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:40:fb:8b:a8:41:6a:c0:e4:7c:3a:65:6f:98:86:60:5a:bd:fe:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E66B2921E0AE3454998A8F324E220CC276959514
        Validity
            Not Before: Mar  5 17:58:21 2024 GMT
            Not After : Mar  4 18:03:21 2025 GMT
        Subject: CN=BFD4351D6E4D2A4EF4E42173EAE3B6D76DC6D23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:87:5f:e5:38:d2:0a:a9:38:45:67:ba:88:
                    76:29:a3:9b:bf:02:f3:83:a8:aa:68:fe:95:36:b2:
                    42:6d:d2:4d:3f:e8:9d:5b:48:2e:0d:98:7c:04:ce:
                    80:ec:8c:b1:ed:36:ca:d7:2f:3e:d3:1a:6b:65:f7:
                    c9:03:70:e1:24:f7:e2:ea:f8:6c:a5:e3:6a:40:65:
                    23:3b:cf:fa:18:bb:20:16:74:5e:a3:0b:f3:ba:c0:
                    9e:d2:82:40:dc:6c:75:1b:14:ab:d9:1b:ea:8b:d6:
                    8c:7f:38:45:8d:99:4b:92:a8:71:d7:cc:64:b1:eb:
                    cc:02:53:59:9c:21:c3:d4:65:d1:f5:bb:aa:fa:fc:
                    bd:dd:14:59:91:94:0d:fe:b7:4f:41:3b:54:60:f9:
                    36:65:a3:16:15:50:7c:91:2b:b6:5a:a0:ef:3d:87:
                    6e:1f:74:98:b8:cc:9e:86:1f:ac:8d:ca:7c:c1:01:
                    ab:41:b7:1c:dd:fb:5e:e1:87:29:f3:ca:52:d9:6a:
                    24:0f:f0:95:f1:c7:44:53:a2:aa:4c:81:26:ac:bd:
                    f0:f8:70:18:40:0a:42:29:5c:75:b4:d2:02:d3:14:
                    f6:4b:88:d6:55:06:69:96:57:e6:21:7e:2f:d1:1e:
                    f5:ba:4b:94:7d:b1:d7:d2:97:b6:ad:40:d5:9f:68:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D4:35:1D:6E:4D:2A:4E:F4:E4:21:73:EA:E3:B6:D7:6D:C6:D2:3C
            X509v3 Authority Key Identifier:
                keyid:E6:6B:29:21:E0:AE:34:54:99:8A:8F:32:4E:22:0C:C2:76:95:95:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/E66B2921E0AE3454998A8F324E220CC276959514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E66B2921E0AE3454998A8F324E220CC276959514.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/323830333a313336303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1360::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:3c:7e:de:8d:c7:ea:26:b5:17:51:af:f8:77:7a:69:76:ff:
         79:cb:8d:c2:56:84:f6:fe:63:5d:0e:3b:bb:d1:b3:58:93:e2:
         c2:ca:8b:02:6d:e9:e5:ab:4a:5d:3b:f0:bd:a5:0b:61:2a:8e:
         8f:54:48:20:15:00:08:b1:17:84:14:05:18:5c:3f:3f:05:0d:
         ef:75:15:6d:22:d2:e0:5f:38:46:82:bf:d1:d2:b8:e6:bb:63:
         b4:f2:36:ee:42:ff:ee:98:bc:34:0b:29:3b:10:e3:fa:5f:6f:
         aa:88:40:b4:c6:34:14:7d:d7:e7:6f:5c:81:dc:41:63:8f:0d:
         98:90:ac:bb:50:3f:b2:f3:5e:ba:d9:1f:f8:07:c7:f9:0a:51:
         6c:72:9f:3a:16:c6:cb:6f:c3:b1:83:d0:5b:d5:f8:ea:e9:1f:
         ba:bc:18:e5:21:c0:33:45:1b:d7:f8:a3:60:49:8c:75:ab:10:
         7b:60:7e:a7:a4:2a:f0:38:dd:b5:c7:65:20:02:26:4e:67:ec:
         c4:1d:f4:fc:c4:e4:38:10:ba:0f:50:d1:72:aa:7c:eb:68:a3:
         f1:7f:d4:2d:a7:d3:03:45:24:e5:65:2c:11:52:b4:06:19:f9:
         21:6a:ea:4b:6b:b9:53:ff:f0:a1:20:dc:fe:ba:5e:9f:99:78:
         a3:3f:2e:ad
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUcUD7i6hBasDkfDplb5iGYFq9/vUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY2QjI5MjFFMEFFMzQ1NDk5OEE4RjMyNEUyMjBDQzI3
Njk1OTUxNDAeFw0yNDAzMDUxNzU4MjFaFw0yNTAzMDQxODAzMjFaMDMxMTAvBgNV
BAMTKEJGRDQzNTFENkU0RDJBNEVGNEU0MjE3M0VBRTNCNkQ3NkRDNkQyM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgodf5TjSCqk4RWe6iHYpo5u/
AvODqKpo/pU2skJt0k0/6J1bSC4NmHwEzoDsjLHtNsrXLz7TGmtl98kDcOEk9+Lq
+Gyl42pAZSM7z/oYuyAWdF6jC/O6wJ7SgkDcbHUbFKvZG+qL1ox/OEWNmUuSqHHX
zGSx68wCU1mcIcPUZdH1u6r6/L3dFFmRlA3+t09BO1Rg+TZloxYVUHyRK7ZaoO89
h24fdJi4zJ6GH6yNynzBAatBtxzd+17hhynzylLZaiQP8JXxx0RToqpMgSasvfD4
cBhACkIpXHW00gLTFPZLiNZVBmmWV+Yhfi/RHvW6S5R9sdfSl7atQNWfaOVFAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUv9Q1HW5NKk705CFz6uO2123G0jwwHwYDVR0j
BBgwFoAU5mspIeCuNFSZio8yTiIMwnaVlRQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjQ3QkJDQ0ZCMTE0RDQ2MTkwNzBFQzg2Mzk3MEY2OUI1
MDVBQkVGN0FCQTM4NDUxNUM4RjE4NTExQzA4NTUwLzAvRTY2QjI5MjFFMEFFMzQ1
NDk5OEE4RjMyNEUyMjBDQzI3Njk1OTUxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNjZCMjkyMUUwQUUzNDU0OTk4
QThGMzI0RTIyMENDMjc2OTU5NTE0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Y0N0JCQ0NGQjExNEQ0NjE5MDcwRUM4NjM5NzBGNjlCNTA1QUJFRjdB
QkEzODQ1MTVDOEYxODUxMUMwODU1MC8wLzMyMzgzMDMzM2EzMTMzMzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAxNgMA0G
CSqGSIb3DQEBCwUAA4IBAQCjPH7ejcfqJrUXUa/4d3ppdv95y43CVoT2/mNdDju7
0bNYk+LCyosCbenlq0pdO/C9pQthKo6PVEggFQAIsReEFAUYXD8/BQ3vdRVtItLg
XzhGgr/R0rjmu2O08jbuQv/umLw0Cyk7EOP6X2+qiEC0xjQUfdfnb1yB3EFjjw2Y
kKy7UD+y81662R/4B8f5ClFscp86FsbLb8Oxg9Bb1fjq6R+6vBjlIcAzRRvX+KNg
SYx1qxB7YH6npCrwON21x2UgAiZOZ+zEHfT8xOQ4ELoPUNFyqnzraKPxf9Qtp9MD
RSTlZSwRUrQGGfkhaupLa7lT//ChINz+ul6fmXijPy6t
-----END CERTIFICATE-----