Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/323830333a386261303a3a2f33322d3430203d3e203631353132.roa
File:                     323830333a386261303a3a2f33322d3430203d3e203631353132.roa (raw, json)
Hash identifier:          prA9jDkr/03kdlppKFQnc5Sq9w0v95LJ+NODqnNPWwU=
Subject key identifier:   AA:FD:FF:09:DF:EB:16:45:60:3A:04:8F:F5:D1:50:04:BD:4B:5B:6E
Certificate issuer:       /CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7
Certificate serial:       1EEC4122966FB6BE29F717302E8F833A83972D27
Authority key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/323830333a386261303a3a2f33322d3430203d3e203631353132.roa
Signing time:             Tue 05 Mar 2024 18:07:26 +0000
ROA not before:           Tue 05 Mar 2024 18:02:26 +0000
ROA not after:            Tue 04 Mar 2025 18:07:26 +0000
asID:                     61512
IP address blocks:        2803:8ba0::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ec:41:22:96:6f:b6:be:29:f7:17:30:2e:8f:83:3a:83:97:2d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7
        Validity
            Not Before: Mar  5 18:02:26 2024 GMT
            Not After : Mar  4 18:07:26 2025 GMT
        Subject: CN=AAFDFF09DFEB1645603A048FF5D15004BD4B5B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:b2:7f:85:a3:e9:37:b5:fb:d5:5f:32:78:
                    71:44:c1:a8:3f:c0:8e:c9:67:51:7c:71:02:00:45:
                    fc:73:49:b4:c6:00:3e:e2:bd:00:17:15:0f:e8:f9:
                    c8:62:b8:ef:94:51:8c:76:37:34:95:df:bc:2a:9f:
                    4a:3b:ad:9f:0d:95:8b:86:37:64:7c:3d:f9:7a:09:
                    53:c6:95:dd:54:fe:81:dd:07:b5:ed:46:d1:61:0e:
                    3c:bb:27:eb:5d:1d:30:68:b7:c7:35:9c:0c:ad:04:
                    5e:ac:b5:9e:79:28:e3:a6:ac:ae:eb:bf:6f:77:e4:
                    45:3e:86:49:b9:3a:da:49:4b:f5:d3:b0:6b:96:68:
                    d4:a0:b1:3d:e4:d8:db:8e:e5:51:cf:da:f8:f1:45:
                    19:d1:d5:cf:0f:a5:fc:52:21:1f:a9:f1:64:fe:e7:
                    61:93:b4:2a:f7:5e:fa:76:7f:0e:59:d3:ec:22:95:
                    95:57:d0:29:6f:67:03:82:55:3f:da:ad:ec:a4:c2:
                    2e:59:13:a0:17:5b:ea:1c:1f:03:5a:a5:ce:3b:0f:
                    41:44:db:f4:31:57:f3:f1:11:ee:a1:d8:ae:71:6f:
                    51:9c:b1:18:f2:93:22:78:ff:45:1e:b6:e0:78:52:
                    3f:23:64:91:f0:74:17:61:96:bc:1e:8d:dd:76:73:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:FF:09:DF:EB:16:45:60:3A:04:8F:F5:D1:50:04:BD:4B:5B:6E
            X509v3 Authority Key Identifier:
                keyid:34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/323830333a386261303a3a2f33322d3430203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:10:ce:5c:79:18:b8:a7:fc:3c:4a:61:c6:e0:af:8e:1a:da:
         02:cb:a9:5f:af:a6:07:05:98:88:a2:4b:94:73:b0:ba:c4:d8:
         7d:f3:78:da:20:35:c4:ab:23:ae:5c:4b:47:da:e4:11:42:5a:
         20:3c:fd:e1:ce:70:2d:11:df:da:86:ee:5d:09:9d:c8:b6:6e:
         cf:99:1d:d5:6a:4e:58:f4:42:c3:84:c9:80:01:34:10:89:6b:
         48:75:be:2b:a6:a6:51:33:23:90:e3:78:a9:a6:51:cb:f5:de:
         8d:96:17:57:17:4d:67:fb:6b:75:26:bb:b0:4d:ac:07:68:74:
         fc:91:ee:04:59:83:03:00:f9:91:f0:ba:a6:6f:25:82:c9:3b:
         83:81:2a:42:ab:c5:83:ea:f2:c1:94:66:f2:61:ca:9f:63:c8:
         6f:c3:c0:05:b3:13:c5:35:2b:c8:18:c6:20:3b:00:06:6e:2c:
         1d:35:d0:ce:04:8b:52:1b:e2:a8:33:e9:53:03:92:ff:c0:3c:
         3e:16:d0:4c:b4:6a:ba:38:6b:70:d1:43:56:a9:cb:be:7b:7d:
         d6:a9:0d:9e:8a:4b:1e:b2:86:ad:3f:a9:9a:d2:c8:58:c9:5f:
         95:61:f8:35:54:a0:a8:a0:c4:ab:c3:81:68:bc:9b:b1:a0:d7:
         df:8a:0d:17
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUHuxBIpZvtr4p9xcwLo+DOoOXLScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3MkUxRkYxODE4OTYyQUZCOURBRDQ0OERFQjZCNEYw
MkJERkJDNzAeFw0yNDAzMDUxODAyMjZaFw0yNTAzMDQxODA3MjZaMDMxMTAvBgNV
BAMTKEFBRkRGRjA5REZFQjE2NDU2MDNBMDQ4RkY1RDE1MDA0QkQ0QjVCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgrJ/haPpN7X71V8yeHFEwag/
wI7JZ1F8cQIARfxzSbTGAD7ivQAXFQ/o+chiuO+UUYx2NzSV37wqn0o7rZ8NlYuG
N2R8Pfl6CVPGld1U/oHdB7XtRtFhDjy7J+tdHTBot8c1nAytBF6stZ55KOOmrK7r
v2935EU+hkm5OtpJS/XTsGuWaNSgsT3k2NuO5VHP2vjxRRnR1c8PpfxSIR+p8WT+
52GTtCr3Xvp2fw5Z0+wilZVX0ClvZwOCVT/areykwi5ZE6AXW+ocHwNapc47D0FE
2/QxV/PxEe6h2K5xb1GcsRjykyJ4/0UetuB4Uj8jZJHwdBdhlrwejd12c7jrAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUqv3/Cd/rFkVgOgSP9dFQBL1LW24wHwYDVR0j
BBgwFoAUNHLh/xgYlir7na1EjetrTwK9+8cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0Q1OUNFMDAxNzIxNDZCMEMxMTZBODQ1MDBGNjNGRTc1
MTFBREE2NTBEQzE2RDU3RUJCRkJERjc5OTIwMEJCLzAvMzQ3MkUxRkYxODE4OTYy
QUZCOURBRDQ0OERFQjZCNEYwMkJERkJDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDcyRTFGRjE4MTg5NjJBRkI5
REFENDQ4REVCNkI0RjAyQkRGQkM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdENTlDRTAwMTcyMTQ2QjBDMTE2QTg0NTAwRjYzRkU3NTExQURBNjUw
REMxNkQ1N0VCQkZCREY3OTkyMDBCQi8wLzMyMzgzMDMzM2EzODYyNjEzMDNhM2Ey
ZjMzMzIyZDM0MzAyMDNkM2UyMDM2MzEzNTMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA4ugMA0G
CSqGSIb3DQEBCwUAA4IBAQBTEM5ceRi4p/w8SmHG4K+OGtoCy6lfr6YHBZiIokuU
c7C6xNh983jaIDXEqyOuXEtH2uQRQlogPP3hznAtEd/ahu5dCZ3Itm7PmR3Vak5Y
9ELDhMmAATQQiWtIdb4rpqZRMyOQ43ipplHL9d6NlhdXF01n+2t1JruwTawHaHT8
ke4EWYMDAPmR8LqmbyWCyTuDgSpCq8WD6vLBlGbyYcqfY8hvw8AFsxPFNSvIGMYg
OwAGbiwdNdDOBItSG+KoM+lTA5L/wDw+FtBMtGq6OGtw0UNWqcu+e33WqQ2eikse
soatP6ma0shYyV+VYfg1VKCooMSrw4FovJuxoNffig0X
-----END CERTIFICATE-----