Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a313a3a2f36342d3634203d3e20323733303038.roa
File:                     323830333a623539303a313a3a2f36342d3634203d3e20323733303038.roa (raw, json)
Hash identifier:          JR2gt70W5oQ/M4q29tE48J3ndgqy3DyvLjpjKyUC8I4=
Subject key identifier:   C2:64:B1:1D:1F:C9:3C:E4:69:66:D7:23:62:9F:06:D5:FF:A3:A6:B9
Certificate issuer:       /CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
Certificate serial:       0B0F82AD4CD0FA5F9DA4F44D22ABA5495C92EF8D
Authority key identifier: D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a313a3a2f36342d3634203d3e20323733303038.roa
Signing time:             Tue 05 Mar 2024 17:46:44 +0000
ROA not before:           Tue 05 Mar 2024 17:41:44 +0000
ROA not after:            Tue 04 Mar 2025 17:46:44 +0000
asID:                     273008
IP address blocks:        2803:b590:1::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0f:82:ad:4c:d0:fa:5f:9d:a4:f4:4d:22:ab:a5:49:5c:92:ef:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
        Validity
            Not Before: Mar  5 17:41:44 2024 GMT
            Not After : Mar  4 17:46:44 2025 GMT
        Subject: CN=C264B11D1FC93CE46966D723629F06D5FFA3A6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:c1:35:6e:eb:c4:7e:01:7e:2b:f0:ed:e5:
                    67:72:30:4b:46:c4:d4:b5:1c:95:b3:32:9c:0c:8d:
                    51:ba:9f:5f:11:31:54:c7:ce:7e:e0:53:79:8e:96:
                    45:0a:3f:5d:4c:bc:8e:54:8f:33:4d:46:b9:67:83:
                    5d:95:82:03:60:36:09:fa:55:65:38:6a:c8:8d:b4:
                    4e:c7:c2:f7:a6:76:e4:a7:f7:6d:b8:c9:d0:ed:cf:
                    e0:bd:f0:9e:36:7d:9f:d0:c5:bd:f3:63:25:aa:0f:
                    bd:30:4b:1f:bf:eb:1a:d5:7a:32:1a:9f:d8:a1:21:
                    80:18:d5:c3:58:24:db:98:1d:79:cf:bc:72:46:01:
                    94:46:eb:65:1a:40:f0:4f:ae:79:ec:a3:51:61:f0:
                    f6:98:8f:1f:f8:65:af:34:ee:41:af:46:4a:42:01:
                    97:fb:da:ce:5f:e3:f7:ad:f1:1b:e9:f8:df:ac:9f:
                    43:74:c7:f7:9d:0f:f9:7f:37:40:c6:bd:c3:68:cc:
                    03:19:ac:47:45:1d:4d:98:ba:c4:23:7f:4b:8f:92:
                    09:cf:a2:40:4a:62:33:e6:89:73:f4:46:1d:76:bf:
                    91:15:17:0a:f4:f3:b3:9b:38:69:ac:67:26:ea:2d:
                    52:47:83:bd:d7:e0:aa:cb:cb:1d:2f:94:8e:b9:ac:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:64:B1:1D:1F:C9:3C:E4:69:66:D7:23:62:9F:06:D5:FF:A3:A6:B9
            X509v3 Authority Key Identifier:
                keyid:D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a313a3a2f36342d3634203d3e20323733303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         2a:05:b4:ac:87:fc:89:6c:0e:ae:9c:31:f5:ac:2b:a9:69:4e:
         f5:70:d3:a8:9d:37:4e:b6:92:11:fb:26:e3:42:35:2e:5d:f2:
         de:d1:2f:68:72:b7:6c:d7:a6:4f:5f:1a:00:7c:3c:ed:75:11:
         00:ae:fb:16:27:3f:75:a6:a9:af:2b:d9:67:a8:97:29:66:fc:
         3d:2d:0c:16:1f:4e:67:30:22:e3:6e:3a:2d:c9:21:73:45:45:
         8b:cf:4a:60:b3:d1:91:5e:c8:42:41:6d:6c:97:06:3e:1b:32:
         25:e1:90:cd:26:cf:6f:87:93:6b:7b:89:c3:4f:fa:6c:a8:70:
         66:6e:e1:4c:f1:39:e2:21:93:05:4f:80:38:4b:7f:b2:c1:68:
         b0:f2:9e:4e:87:59:15:2d:17:4d:a7:5a:a3:86:7c:b9:d4:ef:
         ca:4e:92:05:27:2b:ec:5d:15:5f:79:00:8f:73:05:b0:4d:1a:
         da:61:9c:05:fc:9b:45:2c:49:fb:86:9d:8e:dc:e5:e1:22:e7:
         92:1f:85:a1:a3:15:53:0c:c9:b8:3d:09:2c:cd:44:19:56:6f:
         23:5b:aa:90:53:35:b9:8d:9b:4e:56:aa:36:38:44:cd:db:8c:
         64:d3:04:8c:c8:4d:d8:d9:7f:a3:b9:49:17:4f:3e:b3:5e:d4:
         13:e5:d0:6d
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUCw+CrUzQ+l+dpPRNIqulSVyS740wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4QzI3NUFFMzQ5REZDRDMyQzU1ODQxOUE3ODkzQkFE
RkY1RjNGODAeFw0yNDAzMDUxNzQxNDRaFw0yNTAzMDQxNzQ2NDRaMDMxMTAvBgNV
BAMTKEMyNjRCMTFEMUZDOTNDRTQ2OTY2RDcyMzYyOUYwNkQ1RkZBM0E2QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLacE1buvEfgF+K/Dt5WdyMEtG
xNS1HJWzMpwMjVG6n18RMVTHzn7gU3mOlkUKP11MvI5UjzNNRrlng12VggNgNgn6
VWU4asiNtE7HwvemduSn9224ydDtz+C98J42fZ/Qxb3zYyWqD70wSx+/6xrVejIa
n9ihIYAY1cNYJNuYHXnPvHJGAZRG62UaQPBPrnnso1Fh8PaYjx/4Za807kGvRkpC
AZf72s5f4/et8Rvp+N+sn0N0x/edD/l/N0DGvcNozAMZrEdFHU2YusQjf0uPkgnP
okBKYjPmiXP0Rh12v5EVFwr087ObOGmsZybqLVJHg73X4KrLyx0vlI65rDVrAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUwmSxHR/JPORpZtcjYp8G1f+jprkwHwYDVR0j
BBgwFoAU1ownWuNJ380yxVhBmniTut/18/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MDI2NzJGRTE1NjI0QkRGNzA1QzM1ODhCMUM3NzY3REQ0
MDlENzU5NEU1QTdDQzhGRDNBMzg0RjdBQTRFN0VGLzAvRDY4QzI3NUFFMzQ5REZD
RDMyQzU1ODQxOUE3ODkzQkFERkY1RjNGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjhDMjc1QUUzNDlERkNEMzJD
NTU4NDE5QTc4OTNCQURGRjVGM0Y4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODAyNjcyRkUxNTYyNEJERjcwNUMzNTg4QjFDNzc2N0RENDA5RDc1OTRF
NUE3Q0M4RkQzQTM4NEY3QUE0RTdFRi8wLzMyMzgzMDMzM2E2MjM1MzkzMDNhMzEz
YTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzMjM3MzMzMDMwMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAo
A7WQAAEAADANBgkqhkiG9w0BAQsFAAOCAQEAKgW0rIf8iWwOrpwx9awrqWlO9XDT
qJ03TraSEfsm40I1Ll3y3tEvaHK3bNemT18aAHw87XURAK77Fic/daapryvZZ6iX
KWb8PS0MFh9OZzAi4246Lckhc0VFi89KYLPRkV7IQkFtbJcGPhsyJeGQzSbPb4eT
a3uJw0/6bKhwZm7hTPE54iGTBU+AOEt/ssFosPKeTodZFS0XTadao4Z8udTvyk6S
BScr7F0VX3kAj3MFsE0a2mGcBfybRSxJ+4adjtzl4SLnkh+FoaMVUwzJuD0JLM1E
GVZvI1uqkFM1uY2bTlaqNjhEzduMZNMEjMhN2Nl/o7lJF08+s17UE+XQbQ==
-----END CERTIFICATE-----