Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3130303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3130303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          h+M7Fopr+GxQ9wlrgmVo+CUcf6kW7da4mfPjhL/RXP0=
Subject key identifier:   57:89:E7:AF:F6:2D:0F:0C:0F:28:06:F6:0D:61:35:FA:D0:D2:59:C3
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       0FE67224B21D2578CEC470BB61489C9DB24DB7E1
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3130303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 27 Jun 2024 03:50:00 +0000
ROA not before:           Thu 27 Jun 2024 03:45:00 +0000
ROA not after:            Thu 26 Jun 2025 03:50:00 +0000
asID:                     273858
IP address blocks:        2803:3550:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e6:72:24:b2:1d:25:78:ce:c4:70:bb:61:48:9c:9d:b2:4d:b7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: Jun 27 03:45:00 2024 GMT
            Not After : Jun 26 03:50:00 2025 GMT
        Subject: CN=5789E7AFF62D0F0C0F2806F60D6135FAD0D259C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7a:69:2c:ac:63:c9:cc:fd:d0:0e:25:80:3c:
                    9d:cc:fc:01:42:7f:eb:83:f9:e2:13:ce:a9:69:2d:
                    cd:75:e2:91:cc:b6:45:be:61:47:f1:cd:ff:a4:3c:
                    b7:a5:5d:13:a0:f2:aa:4a:ef:f4:b0:03:a2:ba:5a:
                    7c:43:a3:73:44:9c:d3:f5:c3:1a:5f:6b:5b:07:57:
                    6c:ca:69:09:70:cc:90:54:fc:ce:21:34:3f:90:6f:
                    e7:eb:d7:14:cd:31:86:e6:0a:eb:12:8d:c2:48:55:
                    f4:7f:9a:1e:bc:86:9e:e2:16:34:91:6e:76:c9:98:
                    4e:7a:a2:c2:8e:72:43:b9:a6:12:30:ca:36:b1:de:
                    b7:ed:f2:c5:49:dc:73:58:ec:bf:69:ff:d4:6d:ed:
                    1e:21:2f:b1:44:c3:bd:7a:1b:27:21:20:6d:64:74:
                    46:f4:5c:71:df:18:2c:4c:a3:90:c1:c8:5a:e8:d9:
                    57:72:21:2f:a0:af:98:3f:3f:85:bb:4c:22:94:30:
                    75:75:b1:8b:6f:ae:ff:60:62:69:be:a7:b9:4c:98:
                    8f:84:33:e6:7e:bc:de:81:ff:1a:a1:74:c2:cc:44:
                    a7:f3:de:42:56:b1:bc:b7:df:49:7f:98:20:b0:2c:
                    ba:16:94:6c:bb:3f:d7:ac:b9:c8:01:e4:7f:a0:f2:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:89:E7:AF:F6:2D:0F:0C:0F:28:06:F6:0D:61:35:FA:D0:D2:59:C3
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3130303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:9a:2a:17:9c:c3:e9:f5:a0:37:29:61:63:8c:84:a8:24:2a:
         7c:35:c1:66:e7:9d:9c:11:5a:26:35:7f:2f:34:76:c7:66:68:
         04:88:c1:22:91:80:b9:11:03:7d:a1:27:82:fb:de:6e:3c:c0:
         26:d1:8b:92:be:02:6d:d3:67:e8:72:71:49:11:cf:79:2f:9b:
         76:20:d8:07:8f:65:20:08:fe:cc:74:c1:f0:b1:82:6a:11:1f:
         0a:21:41:55:7f:e4:0f:89:ce:c2:d5:87:1f:96:a3:8e:13:5a:
         dd:76:c1:4b:e9:e1:9b:e0:2a:bf:ae:07:74:ed:4c:1b:52:14:
         5b:50:56:c2:03:04:2c:73:72:8e:b6:7d:2e:a6:b3:cf:08:38:
         16:ca:12:b6:7c:34:be:b9:c5:96:40:ff:be:52:c4:2a:f2:7f:
         bb:b2:be:e8:a6:ce:49:77:5e:50:a6:4f:6e:5e:c0:2b:26:24:
         50:b7:03:17:a9:92:35:94:72:41:22:58:26:df:31:62:c6:fd:
         01:76:9c:14:61:5e:39:24:0d:47:fd:c5:0d:40:d9:ca:64:b8:
         ae:75:a7:17:11:e1:d1:7f:7a:2b:a7:d7:11:6a:a9:49:b2:db:
         b5:40:23:fd:b1:6f:16:61:7a:01:d9:00:0a:be:48:86:65:d0:
         3e:db:94:e6
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUD+ZyJLIdJXjOxHC7YUicnbJNt+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVDM0ZDNkZBNUQ5RDAzNDNBQjkzN0UzMEE0RDZFREFB
NUM4N0Q1QzAeFw0yNDA2MjcwMzQ1MDBaFw0yNTA2MjYwMzUwMDBaMDMxMTAvBgNV
BAMTKDU3ODlFN0FGRjYyRDBGMEMwRjI4MDZGNjBENjEzNUZBRDBEMjU5QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbemksrGPJzP3QDiWAPJ3M/AFC
f+uD+eITzqlpLc114pHMtkW+YUfxzf+kPLelXROg8qpK7/SwA6K6WnxDo3NEnNP1
wxpfa1sHV2zKaQlwzJBU/M4hND+Qb+fr1xTNMYbmCusSjcJIVfR/mh68hp7iFjSR
bnbJmE56osKOckO5phIwyjax3rft8sVJ3HNY7L9p/9Rt7R4hL7FEw716GychIG1k
dEb0XHHfGCxMo5DByFro2VdyIS+gr5g/P4W7TCKUMHV1sYtvrv9gYmm+p7lMmI+E
M+Z+vN6B/xqhdMLMRKfz3kJWsby330l/mCCwLLoWlGy7P9esucgB5H+g8qUHAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUV4nnr/YtDwwPKAb2DWE1+tDSWcMwHwYDVR0j
BBgwFoAUXsP8b6XZ0DQ6uTfjCk1u2qXIfVwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTEzMkU2Njk3QzRFOEFGOEYzRkU2NUE5N0UxOTA5NTk3
MDdCMEMwRUI3OTkwMEFEMkM4Q0JENjE1QkY0QjY2LzAvNUVDM0ZDNkZBNUQ5RDAz
NDNBQjkzN0UzMEE0RDZFREFBNUM4N0Q1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RUMzRkM2RkE1RDlEMDM0M0FC
OTM3RTMwQTRENkVEQUE1Qzg3RDVDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEExMzJFNjY5N0M0RThBRjhGM0ZFNjVBOTdFMTkwOTU5NzA3QjBDMEVC
Nzk5MDBBRDJDOENCRDYxNUJGNEI2Ni8wLzMyMzgzMDMzM2EzMzM1MzUzMDNhMzEz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzgzNTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAM1UAEwDQYJKoZIhvcNAQELBQADggEBAMeaKhecw+n1oDcpYWOMhKgkKnw1
wWbnnZwRWiY1fy80dsdmaASIwSKRgLkRA32hJ4L73m48wCbRi5K+Am3TZ+hycUkR
z3kvm3Yg2AePZSAI/sx0wfCxgmoRHwohQVV/5A+JzsLVhx+Wo44TWt12wUvp4Zvg
Kr+uB3TtTBtSFFtQVsIDBCxzco62fS6ms88IOBbKErZ8NL65xZZA/75SxCryf7uy
vuimzkl3XlCmT25ewCsmJFC3AxepkjWUckEiWCbfMWLG/QF2nBRhXjkkDUf9xQ1A
2cpkuK51pxcR4dF/eiun1xFqqUmy27VAI/2xbxZhegHZAAq+SIZl0D7blOY=
-----END CERTIFICATE-----