Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/323830333a393063303a3a2f33322d3438203d3e20323634373637.roa
File:                     323830333a393063303a3a2f33322d3438203d3e20323634373637.roa (raw, json)
Hash identifier:          oAQvLwNEfwJf+zBgf6u2ZgaxprZFtoPJaWaUWtDMXC8=
Subject key identifier:   24:5E:9B:64:68:0A:06:D2:74:A4:0D:A6:1F:F7:ED:BD:62:9B:50:77
Certificate issuer:       /CN=DAF4891978146B0CD7A7F84B2A82824830B88416
Certificate serial:       1A0A26DC96098F08153F802E3747CBBBBB18DCF9
Authority key identifier: DA:F4:89:19:78:14:6B:0C:D7:A7:F8:4B:2A:82:82:48:30:B8:84:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAF4891978146B0CD7A7F84B2A82824830B88416.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/323830333a393063303a3a2f33322d3438203d3e20323634373637.roa
Signing time:             Tue 17 Sep 2024 21:45:01 +0000
ROA not before:           Tue 17 Sep 2024 21:40:01 +0000
ROA not after:            Tue 16 Sep 2025 21:45:01 +0000
asID:                     264767
IP address blocks:        2803:90c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0a:26:dc:96:09:8f:08:15:3f:80:2e:37:47:cb:bb:bb:18:dc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF4891978146B0CD7A7F84B2A82824830B88416
        Validity
            Not Before: Sep 17 21:40:01 2024 GMT
            Not After : Sep 16 21:45:01 2025 GMT
        Subject: CN=245E9B64680A06D274A40DA61FF7EDBD629B5077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:ca:6a:05:d8:9d:fc:11:47:c2:c7:b9:b3:
                    90:57:c8:fa:7a:55:ba:77:07:87:d9:db:04:d9:4c:
                    07:08:52:5a:99:21:f2:e7:75:20:1a:61:43:02:52:
                    27:7d:60:9b:6e:93:47:4d:2a:57:05:7c:dc:52:01:
                    9f:eb:0a:ea:53:1b:4f:58:e9:86:d6:51:fd:94:2d:
                    39:88:08:49:ce:d7:0b:4e:f8:52:c5:b6:5e:90:e7:
                    ba:f0:94:a7:65:46:ae:79:41:3a:da:17:b4:f8:5c:
                    be:87:6a:53:6b:1f:00:a6:f7:30:51:e4:f3:9f:bc:
                    7f:fe:d1:7d:15:f2:01:95:da:50:79:9c:d7:8d:d1:
                    c2:3f:94:0a:b4:1c:b9:21:fd:c7:7b:b4:50:df:c2:
                    5e:3e:b8:b8:05:34:93:05:da:90:08:79:39:8c:df:
                    ec:39:65:88:b9:99:3d:8d:db:f2:48:2f:0b:0a:03:
                    40:56:9f:eb:76:b4:3f:6d:25:4a:6a:5f:6e:9f:10:
                    6e:5d:f3:9b:d5:76:09:81:e3:d4:12:d5:56:47:58:
                    1c:73:7e:07:33:20:48:31:05:d4:ea:56:12:54:eb:
                    ae:08:36:88:9a:80:19:b9:45:d8:87:44:c4:05:53:
                    02:c8:c6:af:e1:3c:64:7f:75:9f:89:26:17:3d:41:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5E:9B:64:68:0A:06:D2:74:A4:0D:A6:1F:F7:ED:BD:62:9B:50:77
            X509v3 Authority Key Identifier:
                keyid:DA:F4:89:19:78:14:6B:0C:D7:A7:F8:4B:2A:82:82:48:30:B8:84:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/DAF4891978146B0CD7A7F84B2A82824830B88416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAF4891978146B0CD7A7F84B2A82824830B88416.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91C2D064366F8DDC97479572A0F6F27DBE6D727577953757876088A7B0D537AF/0/323830333a393063303a3a2f33322d3438203d3e20323634373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:90c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:9b:e0:33:ff:41:ce:f1:04:0e:7c:a5:14:6b:28:36:78:
         ca:82:08:68:e0:81:74:7e:7d:9e:a0:14:79:92:56:15:22:9a:
         f8:a1:e0:e4:d0:a2:2c:c9:7f:dd:d2:6a:04:73:41:9e:07:4a:
         19:6f:dd:4a:97:1e:e9:a9:35:33:9b:87:c0:6b:1a:af:89:27:
         6f:2f:1b:70:02:1b:07:57:c2:88:c7:c2:45:8d:33:b8:5e:ac:
         d1:41:0c:a8:f3:db:7c:7c:65:5e:bd:2f:0f:34:f2:9e:43:67:
         24:43:31:d4:16:cc:8c:bf:67:a0:a7:9b:4e:88:70:26:d1:fe:
         0b:2f:26:96:81:07:3e:e8:3b:50:a4:73:f8:03:30:f7:af:1b:
         92:a1:99:24:f2:8d:79:f4:6e:45:44:c3:3d:a6:91:7a:09:d9:
         f6:7a:2b:62:0f:c2:7e:5c:c9:05:7a:f2:21:f7:cc:71:5b:1e:
         2a:3d:14:d8:eb:bd:e5:8f:5b:75:41:5a:89:35:94:55:8b:8d:
         8e:7f:5c:a8:09:08:b6:cc:02:09:51:79:b7:66:63:73:cd:23:
         1a:9b:9c:10:5a:bc:ba:a6:34:a9:3e:36:b4:e3:d0:4c:c5:81:
         99:68:db:01:be:66:fe:18:cc:ad:49:ce:0f:34:1c:ba:00:7f:
         58:d3:ac:de
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGgom3JYJjwgVP4AuN0fLu7sY3PkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFGNDg5MTk3ODE0NkIwQ0Q3QTdGODRCMkE4MjgyNDgz
MEI4ODQxNjAeFw0yNDA5MTcyMTQwMDFaFw0yNTA5MTYyMTQ1MDFaMDMxMTAvBgNV
BAMTKDI0NUU5QjY0NjgwQTA2RDI3NEE0MERBNjFGRjdFREJENjI5QjUwNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU+8pqBdid/BFHwse5s5BXyPp6
Vbp3B4fZ2wTZTAcIUlqZIfLndSAaYUMCUid9YJtuk0dNKlcFfNxSAZ/rCupTG09Y
6YbWUf2ULTmICEnO1wtO+FLFtl6Q57rwlKdlRq55QTraF7T4XL6HalNrHwCm9zBR
5POfvH/+0X0V8gGV2lB5nNeN0cI/lAq0HLkh/cd7tFDfwl4+uLgFNJMF2pAIeTmM
3+w5ZYi5mT2N2/JILwsKA0BWn+t2tD9tJUpqX26fEG5d85vVdgmB49QS1VZHWBxz
fgczIEgxBdTqVhJU664INoiagBm5RdiHRMQFUwLIxq/hPGR/dZ+JJhc9QVYfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUJF6bZGgKBtJ0pA2mH/ftvWKbUHcwHwYDVR0j
BBgwFoAU2vSJGXgUawzXp/hLKoKCSDC4hBYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MUMyRDA2NDM2NkY4RERDOTc0Nzk1NzJBMEY2RjI3REJF
NkQ3Mjc1Nzc5NTM3NTc4NzYwODhBN0IwRDUzN0FGLzAvREFGNDg5MTk3ODE0NkIw
Q0Q3QTdGODRCMkE4MjgyNDgzMEI4ODQxNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQUY0ODkxOTc4MTQ2QjBDRDdB
N0Y4NEIyQTgyODI0ODMwQjg4NDE2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTFDMkQwNjQzNjZGOEREQzk3NDc5NTcyQTBGNkYyN0RCRTZENzI3NTc3
OTUzNzU3ODc2MDg4QTdCMEQ1MzdBRi8wLzMyMzgzMDMzM2EzOTMwNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM3MzYzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDkMAw
DQYJKoZIhvcNAQELBQADggEBACqdm+Az/0HO8QQOfKUUayg2eMqCCGjggXR+fZ6g
FHmSVhUimvih4OTQoizJf93SagRzQZ4HShlv3UqXHumpNTObh8BrGq+JJ28vG3AC
GwdXwojHwkWNM7herNFBDKjz23x8ZV69Lw808p5DZyRDMdQWzIy/Z6Cnm06IcCbR
/gsvJpaBBz7oO1Ckc/gDMPevG5KhmSTyjXn0bkVEwz2mkXoJ2fZ6K2IPwn5cyQV6
8iH3zHFbHio9FNjrveWPW3VBWok1lFWLjY5/XKgJCLbMAglRebdmY3PNIxqbnBBa
vLqmNKk+NrTj0EzFgZlo2wG+Zv4YzK1Jzg80HLoAf1jTrN4=
-----END CERTIFICATE-----