Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          c/0nkhG3ptBHgrvXChIXWxmEYuQUNUuDqTnycGmFMNs=
Subject key identifier:   F8:84:03:AB:98:FF:3B:4C:88:51:D7:90:2B:E4:97:67:B9:FE:97:E6
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       686C4E4EAC1B656E0102C4682C098A02C4587BBE
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 29 Jan 2025 15:30:01 +0000
ROA not before:           Wed 29 Jan 2025 15:25:01 +0000
ROA not after:            Wed 28 Jan 2026 15:30:01 +0000
asID:                     270088
IP address blocks:        2803:bbe0:1b00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6c:4e:4e:ac:1b:65:6e:01:02:c4:68:2c:09:8a:02:c4:58:7b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Jan 29 15:25:01 2025 GMT
            Not After : Jan 28 15:30:01 2026 GMT
        Subject: CN=F88403AB98FF3B4C8851D7902BE49767B9FE97E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:79:3a:80:18:ba:be:da:63:4e:a6:2c:ac:
                    db:0b:cc:09:66:86:da:93:0f:01:e6:88:c1:6f:78:
                    55:14:75:8e:63:68:68:0e:71:3e:6c:2b:e8:28:6d:
                    46:4e:df:af:84:8e:30:04:6d:fa:3b:9e:f5:be:13:
                    9b:9e:11:6b:6d:25:fe:1f:06:36:27:f0:04:e9:07:
                    85:f0:3e:e6:1d:b8:56:d2:ac:32:17:e3:17:17:00:
                    bb:bd:3d:df:d9:f5:93:d5:2e:75:72:9a:e7:94:35:
                    bf:33:ee:48:a9:98:b7:6a:c3:2f:13:a9:dc:ae:9d:
                    df:22:fc:81:fb:bc:e3:1b:7d:dc:74:cb:21:d4:89:
                    15:e5:50:0a:1d:90:e9:df:90:f3:d2:b8:fb:85:b9:
                    6a:80:56:39:7f:37:ee:2c:b7:1b:5e:e0:b6:b3:d5:
                    3d:12:65:56:f6:bc:ab:0f:7c:7f:7a:01:0e:b3:06:
                    68:67:c3:e8:17:95:83:43:09:8c:29:f8:f4:8d:20:
                    55:62:1b:6c:d7:ef:ad:d4:89:0a:63:c3:93:d9:78:
                    71:93:09:7e:8c:65:50:c2:27:85:86:04:81:a1:8a:
                    4e:b2:30:ac:1f:ca:45:aa:60:46:04:97:69:91:68:
                    22:8b:1d:02:10:cb:8b:80:6e:4c:24:4e:26:a6:e1:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:84:03:AB:98:FF:3B:4C:88:51:D7:90:2B:E4:97:67:B9:FE:97:E6
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:d9:03:18:6d:93:13:b7:61:bd:1f:e7:ca:91:55:88:62:9c:
         e6:fe:4d:27:3c:b9:db:af:88:11:b7:99:f2:b7:a1:c2:b5:ca:
         43:76:32:0e:3e:6d:13:83:72:1f:71:42:9a:88:93:1a:bf:43:
         4c:e0:83:f3:78:0c:00:22:78:66:6a:55:ed:e9:ee:d4:86:ef:
         6b:29:2f:f9:07:b3:b7:5e:92:b6:a7:5e:77:61:d9:3f:7b:42:
         08:ad:d3:0e:07:22:47:51:9c:1f:80:42:58:1e:48:d9:74:5e:
         6e:93:f4:74:b9:57:f5:8d:c0:94:91:36:59:9a:45:0d:99:d9:
         5f:d0:36:2c:1f:ad:8a:50:da:07:b1:5c:03:0b:64:8f:a6:01:
         92:75:cb:66:70:84:12:f2:9f:e8:ec:ba:52:71:07:af:15:66:
         98:5e:ae:ff:02:51:d1:52:93:b7:2c:71:91:a6:99:86:fa:66:
         3c:e2:cc:39:4f:ac:f3:35:44:66:e4:ca:04:d3:f7:e4:ca:3e:
         00:92:0a:57:83:bf:be:f5:32:a5:d3:b0:e9:1a:d9:74:9d:78:
         e2:11:d0:37:bf:b6:14:f7:5b:3e:7e:11:37:ca:ca:e2:65:7d:
         d9:12:9d:ef:a6:a3:76:b5:a2:05:66:a4:19:85:05:da:5a:6e:
         17:4c:4d:bb
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUaGxOTqwbZW4BAsRoLAmKAsRYe74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBQTJFNEQzQzdDREY5NjI2RDMzMUFDRDM4RDE3MTlG
M0Q0QTcyRDAeFw0yNTAxMjkxNTI1MDFaFw0yNjAxMjgxNTMwMDFaMDMxMTAvBgNV
BAMTKEY4ODQwM0FCOThGRjNCNEM4ODUxRDc5MDJCRTQ5NzY3QjlGRTk3RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5d3k6gBi6vtpjTqYsrNsLzAlm
htqTDwHmiMFveFUUdY5jaGgOcT5sK+gobUZO36+EjjAEbfo7nvW+E5ueEWttJf4f
BjYn8ATpB4XwPuYduFbSrDIX4xcXALu9Pd/Z9ZPVLnVymueUNb8z7kipmLdqwy8T
qdyund8i/IH7vOMbfdx0yyHUiRXlUAodkOnfkPPSuPuFuWqAVjl/N+4stxte4Laz
1T0SZVb2vKsPfH96AQ6zBmhnw+gXlYNDCYwp+PSNIFViG2zX763UiQpjw5PZeHGT
CX6MZVDCJ4WGBIGhik6yMKwfykWqYEYEl2mRaCKLHQIQy4uAbkwkTiam4dLhAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQU+IQDq5j/O0yIUdeQK+SXZ7n+l+YwHwYDVR0j
BBgwFoAUCKouTTx835Ym0zGs040XGfPUpy0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RDRCQjI0MjFDMjREMTlGMzEyM0IwQzY4MUIwMUFEODJB
OTI5NDE1ODJDOURBQkI5NDkzRTA5N0YzRjJGODkzLzAvMDhBQTJFNEQzQzdDREY5
NjI2RDMzMUFDRDM4RDE3MTlGM0Q0QTcyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEFBMkU0RDNDN0NERjk2MjZE
MzMxQUNEMzhEMTcxOUYzRDRBNzJELmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEQ0QkIyNDIxQzI0RDE5RjMxMjNCMEM2ODFCMDFBRDgyQTkyOTQxNTgy
QzlEQUJCOTQ5M0UwOTdGM0YyRjg5My8wLzMyMzgzMDMzM2E2MjYyNjUzMDNhMzE2
MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzAzMDM4Mzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoA7vgGzANBgkqhkiG9w0BAQsFAAOCAQEACNkDGG2TE7dhvR/nypFViGKc
5v5NJzy526+IEbeZ8rehwrXKQ3YyDj5tE4NyH3FCmoiTGr9DTOCD83gMACJ4ZmpV
7enu1Ibvaykv+Qezt16Stqded2HZP3tCCK3TDgciR1GcH4BCWB5I2XRebpP0dLlX
9Y3AlJE2WZpFDZnZX9A2LB+tilDaB7FcAwtkj6YBknXLZnCEEvKf6Oy6UnEHrxVm
mF6u/wJR0VKTtyxxkaaZhvpmPOLMOU+s8zVEZuTKBNP35Mo+AJIKV4O/vvUypdOw
6RrZdJ144hHQN7+2FPdbPn4RN8rK4mV92RKd76ajdrWiBWakGYUF2lpuF0xNuw==
-----END CERTIFICATE-----