Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a3a2f33322d3438203d3e20323733313338.roa
File:                     323830333a663435303a3a2f33322d3438203d3e20323733313338.roa (raw, json)
Hash identifier:          hfs8z5F7rz+LcpWTwfdVM3qHEL3JcsgKS2x9ywX9SwM=
Subject key identifier:   BC:B8:F7:76:29:23:D9:A5:CB:46:DF:63:9F:65:03:AC:3C:1C:40:50
Certificate issuer:       /CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
Certificate serial:       2574E8FAD7B0805B35C86B5FC245AE530DB9C5F8
Authority key identifier: 8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a3a2f33322d3438203d3e20323733313338.roa
Signing time:             Tue 05 Mar 2024 18:16:47 +0000
ROA not before:           Tue 05 Mar 2024 18:11:47 +0000
ROA not after:            Tue 04 Mar 2025 18:16:47 +0000
asID:                     273138
IP address blocks:        2803:f450::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:74:e8:fa:d7:b0:80:5b:35:c8:6b:5f:c2:45:ae:53:0d:b9:c5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
        Validity
            Not Before: Mar  5 18:11:47 2024 GMT
            Not After : Mar  4 18:16:47 2025 GMT
        Subject: CN=BCB8F7762923D9A5CB46DF639F6503AC3C1C4050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:61:f9:8c:c4:6f:5d:30:9d:6b:e6:70:7d:
                    e4:41:9f:90:b3:c5:2e:ed:07:ac:58:1b:c6:2c:2e:
                    d7:f9:fd:35:c4:84:27:b6:0b:19:36:32:2c:88:27:
                    7e:d2:35:b4:ec:9d:80:01:23:27:71:6e:de:b1:5d:
                    89:7b:bd:f5:99:ba:96:eb:93:4d:9b:e4:62:74:75:
                    c3:4e:69:17:eb:70:37:67:5a:4e:4b:41:69:78:f9:
                    ca:dd:10:0b:d6:3f:e9:7a:a2:4f:38:26:d7:f9:4e:
                    4b:dc:83:51:37:e2:5d:f0:db:16:3b:e2:e8:3f:c8:
                    ae:e9:ab:2a:98:35:c1:3b:5a:90:0e:04:05:78:68:
                    cf:a2:c7:d6:46:63:14:7f:49:12:1a:94:af:b8:07:
                    62:48:ad:5d:96:33:5b:25:ee:33:44:27:7a:92:b0:
                    52:00:31:00:04:86:a4:c6:d4:bc:97:f9:fa:28:0c:
                    77:cb:2a:bd:42:dd:6d:1b:59:7a:af:ee:49:58:79:
                    2a:dd:db:6f:c4:a7:95:59:8a:24:c7:cd:5f:a7:f4:
                    00:4d:ba:e4:8a:f0:cc:58:33:b8:b2:db:91:47:b5:
                    82:76:02:df:3d:df:2b:9c:87:15:d8:1d:4d:4d:2a:
                    c7:c6:04:c3:47:b5:de:8b:58:3b:eb:cd:1a:97:b7:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:F7:76:29:23:D9:A5:CB:46:DF:63:9F:65:03:AC:3C:1C:40:50
            X509v3 Authority Key Identifier:
                keyid:8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a3a2f33322d3438203d3e20323733313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:2d:3b:bf:55:a9:9f:d5:6f:1f:d2:40:cf:d6:d0:4b:b7:e9:
         96:89:e5:ed:98:be:44:93:91:47:b7:b3:d3:7a:38:0f:04:a3:
         c5:13:ea:6c:6d:5a:c2:9e:0f:a5:b3:10:a1:73:af:f8:f6:0c:
         46:16:54:9c:4d:d8:66:f0:e6:1d:eb:69:37:0c:34:04:98:c4:
         41:d0:b5:b2:fd:c2:f3:fd:0b:56:5c:b0:17:1a:5e:93:18:97:
         d7:fe:3a:fa:46:1c:55:ad:32:52:47:9f:3b:f5:f2:03:7e:7f:
         75:5b:9f:c5:53:49:3d:72:ab:45:41:3a:19:52:86:3e:0e:c9:
         1f:6a:4c:18:70:3b:73:1b:79:25:d0:b1:4a:56:fa:4b:0a:ac:
         8d:95:5a:bf:6b:a9:ab:fa:51:e9:46:7e:78:d3:0d:db:a4:93:
         05:bf:05:5e:56:61:f0:9c:ab:7c:da:99:ad:6a:fc:82:b5:90:
         a0:2c:92:dc:2d:15:ca:1f:11:05:b6:d5:57:2e:b4:b5:14:83:
         0d:69:3c:e3:ad:e3:70:c3:b9:48:8b:56:ef:5b:4f:c0:13:58:
         58:b2:2a:31:43:8b:1c:a3:93:db:e6:43:19:a4:79:22:5d:a5:
         01:83:c7:d0:69:3f:33:aa:a1:34:45:44:54:e2:ec:41:39:96:
         44:c6:74:82
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJXTo+tewgFs1yGtfwkWuUw25xfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwN0ZDMkU3MTFFRTkxMDJDMzA3NUI5RDg5NEZBNkZF
QTJGQUU0MTAeFw0yNDAzMDUxODExNDdaFw0yNTAzMDQxODE2NDdaMDMxMTAvBgNV
BAMTKEJDQjhGNzc2MjkyM0Q5QTVDQjQ2REY2MzlGNjUwM0FDM0MxQzQwNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvimH5jMRvXTCda+ZwfeRBn5Cz
xS7tB6xYG8YsLtf5/TXEhCe2Cxk2MiyIJ37SNbTsnYABIydxbt6xXYl7vfWZupbr
k02b5GJ0dcNOaRfrcDdnWk5LQWl4+crdEAvWP+l6ok84Jtf5Tkvcg1E34l3w2xY7
4ug/yK7pqyqYNcE7WpAOBAV4aM+ix9ZGYxR/SRIalK+4B2JIrV2WM1sl7jNEJ3qS
sFIAMQAEhqTG1LyX+fooDHfLKr1C3W0bWXqv7klYeSrd22/Ep5VZiiTHzV+n9ABN
uuSK8MxYM7iy25FHtYJ2At893yuchxXYHU1NKsfGBMNHtd6LWDvrzRqXt2yjAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUvLj3dikj2aXLRt9jn2UDrDwcQFAwHwYDVR0j
BBgwFoAUigf8LnEe6RAsMHW52JT6b+ovrkEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MDNGQUM5MEUwMkQyMkZGRkEwMzM4NDUxOURBNUQ4RjI0
M0ExM0EyREJDMzk2OTc2MTZEMTExNTdGMUI4RDExLzAvOEEwN0ZDMkU3MTFFRTkx
MDJDMzA3NUI5RDg5NEZBNkZFQTJGQUU0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTA3RkMyRTcxMUVFOTEwMkMz
MDc1QjlEODk0RkE2RkVBMkZBRTQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODAzRkFDOTBFMDJEMjJGRkZBMDMzODQ1MTlEQTVEOEYyNDNBMTNBMkRC
QzM5Njk3NjE2RDExMTU3RjFCOEQxMS8wLzMyMzgzMDMzM2E2NjM0MzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzMzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD9FAw
DQYJKoZIhvcNAQELBQADggEBAGwtO79VqZ/Vbx/SQM/W0Eu36ZaJ5e2YvkSTkUe3
s9N6OA8Eo8UT6mxtWsKeD6WzEKFzr/j2DEYWVJxN2Gbw5h3raTcMNASYxEHQtbL9
wvP9C1ZcsBcaXpMYl9f+OvpGHFWtMlJHnzv18gN+f3Vbn8VTST1yq0VBOhlShj4O
yR9qTBhwO3MbeSXQsUpW+ksKrI2VWr9rqav6UelGfnjTDdukkwW/BV5WYfCcq3za
ma1q/IK1kKAsktwtFcofEQW21VcutLUUgw1pPOOt43DDuUiLVu9bT8ATWFiyKjFD
ixyjk9vmQxmkeSJdpQGDx9BpPzOqoTRFRFTi7EE5lkTGdII=
-----END CERTIFICATE-----