Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203138373437.roa
File:                     323830333a323634303a3a2f33322d3332203d3e203138373437.roa (raw, json)
Hash identifier:          Y0UeVSwbaPFFGr52U+Z7u30BsmCQArRRNE+8EQRvmgo=
Subject key identifier:   1C:F9:4F:E8:4F:CF:1E:FD:73:2B:95:E4:FA:C2:58:3A:7B:3D:7F:DB
Certificate issuer:       /CN=E5AE7BFB852947BC2524209953A000E85EF4362B
Certificate serial:       153A86DA976949CF4B6728A334B42A8778192A90
Authority key identifier: E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203138373437.roa
Signing time:             Fri 30 Aug 2024 15:00:00 +0000
ROA not before:           Fri 30 Aug 2024 14:55:00 +0000
ROA not after:            Fri 29 Aug 2025 15:00:00 +0000
asID:                     18747
IP address blocks:        2803:2640::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3a:86:da:97:69:49:cf:4b:67:28:a3:34:b4:2a:87:78:19:2a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AE7BFB852947BC2524209953A000E85EF4362B
        Validity
            Not Before: Aug 30 14:55:00 2024 GMT
            Not After : Aug 29 15:00:00 2025 GMT
        Subject: CN=1CF94FE84FCF1EFD732B95E4FAC2583A7B3D7FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:0f:f5:98:c9:29:68:09:3b:95:97:fd:6e:
                    42:7e:ce:28:e0:82:34:05:04:33:a3:b8:cc:ac:67:
                    8e:24:0f:e4:48:5f:e6:a2:7d:1d:1c:db:cb:84:bb:
                    4b:e9:7e:a4:fe:22:19:2b:23:83:48:38:48:8f:30:
                    dd:67:5a:37:f2:93:8f:62:e2:04:7c:17:6b:1b:d8:
                    12:49:9a:84:14:ad:74:84:78:0e:e5:16:df:d2:bb:
                    e4:5b:3a:ec:5d:ed:72:23:8f:67:f2:40:26:e8:39:
                    a6:62:35:64:f6:26:09:00:da:e5:f9:17:7c:5f:d8:
                    cd:6c:83:f1:42:55:9a:61:2a:0d:bf:b9:3b:9b:70:
                    c8:a0:90:ad:b6:9f:24:17:ff:55:c2:ce:c5:dd:41:
                    28:f1:c9:b9:72:d6:45:c5:1c:29:32:3c:ad:0e:86:
                    05:59:56:d9:56:25:10:e8:fd:b8:27:f4:ed:a2:b3:
                    9b:e1:11:5d:d7:e6:b9:96:8e:4c:89:68:12:7b:92:
                    d4:7d:ad:4e:3c:23:f7:8c:14:85:de:0e:62:dd:a1:
                    53:e0:e4:13:50:c5:37:a4:0f:1a:8a:ec:a8:0c:bd:
                    d5:69:66:7d:24:50:b0:52:68:06:1c:58:44:a5:92:
                    2d:8b:8e:3d:f7:fc:4f:02:fa:48:d9:73:14:f9:1b:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F9:4F:E8:4F:CF:1E:FD:73:2B:95:E4:FA:C2:58:3A:7B:3D:7F:DB
            X509v3 Authority Key Identifier:
                keyid:E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:63:8d:54:be:71:87:53:39:34:ae:70:f5:88:bd:90:7a:91:
         67:07:95:d3:86:4f:04:be:2d:12:a5:f5:b8:a6:c0:85:af:ae:
         49:20:b1:2f:eb:20:15:27:b2:fa:74:b1:d1:5e:a2:90:9f:4e:
         90:e5:0d:6d:26:da:c6:5f:b5:66:75:90:dc:99:33:f4:1c:64:
         90:f0:40:19:d9:88:94:dd:35:be:49:55:1b:a8:c3:21:a3:1a:
         af:4f:bf:27:b0:11:b4:97:80:6a:72:97:c4:08:22:48:b1:c7:
         fb:0b:4c:16:a4:a9:18:9f:47:8f:61:18:eb:19:26:07:3c:5b:
         ea:b9:c5:bc:7f:27:bd:34:c0:1b:f5:70:8e:88:a7:11:d0:85:
         02:b5:08:bd:8d:4b:5c:44:99:0e:34:e9:33:30:e0:8a:91:67:
         60:b5:36:eb:cb:81:6f:36:de:c2:eb:e8:60:55:e6:2f:27:6b:
         e2:33:f5:bd:bb:f6:31:63:c7:dc:d2:9c:cd:22:55:7f:cc:46:
         7d:b4:7d:a9:b9:a4:e2:49:bd:20:39:94:53:16:eb:01:58:78:
         73:5d:1e:16:02:d8:d7:05:6b:dd:ae:97:34:a8:2f:be:a8:6c:
         df:82:8c:40:25:43:f5:50:d0:cb:8d:3d:e3:ec:8e:7c:ec:7b:
         d4:c9:ea:a3
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUFTqG2pdpSc9LZyijNLQqh3gZKpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBRTdCRkI4NTI5NDdCQzI1MjQyMDk5NTNBMDAwRTg1
RUY0MzYyQjAeFw0yNDA4MzAxNDU1MDBaFw0yNTA4MjkxNTAwMDBaMDMxMTAvBgNV
BAMTKDFDRjk0RkU4NEZDRjFFRkQ3MzJCOTVFNEZBQzI1ODNBN0IzRDdGREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJQ/1mMkpaAk7lZf9bkJ+zijg
gjQFBDOjuMysZ44kD+RIX+aifR0c28uEu0vpfqT+IhkrI4NIOEiPMN1nWjfyk49i
4gR8F2sb2BJJmoQUrXSEeA7lFt/Su+RbOuxd7XIjj2fyQCboOaZiNWT2JgkA2uX5
F3xf2M1sg/FCVZphKg2/uTubcMigkK22nyQX/1XCzsXdQSjxybly1kXFHCkyPK0O
hgVZVtlWJRDo/bgn9O2is5vhEV3X5rmWjkyJaBJ7ktR9rU48I/eMFIXeDmLdoVPg
5BNQxTekDxqK7KgMvdVpZn0kULBSaAYcWESlki2Ljj33/E8C+kjZcxT5G6pTAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUHPlP6E/PHv1zK5Xk+sJYOns9f9swHwYDVR0j
BBgwFoAU5a57+4UpR7wlJCCZU6AA6F70NiswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MzUxMzMyODRCNzFERjQzMjlGRTQxMkM1NjUyODNGMDY1
RDU1RkE2NzIzNTI0RkVCMzg5MjNCM0M0REU1MzJGLzAvRTVBRTdCRkI4NTI5NDdC
QzI1MjQyMDk5NTNBMDAwRTg1RUY0MzYyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUFFN0JGQjg1Mjk0N0JDMjUy
NDIwOTk1M0EwMDBFODVFRjQzNjJCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTM1MTMzMjg0QjcxREY0MzI5RkU0MTJDNTY1MjgzRjA2NUQ1NUZBNjcy
MzUyNEZFQjM4OTIzQjNDNERFNTMyRi8wLzMyMzgzMDMzM2EzMjM2MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzgzNzM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAyZAMA0G
CSqGSIb3DQEBCwUAA4IBAQBRY41UvnGHUzk0rnD1iL2QepFnB5XThk8Evi0SpfW4
psCFr65JILEv6yAVJ7L6dLHRXqKQn06Q5Q1tJtrGX7VmdZDcmTP0HGSQ8EAZ2YiU
3TW+SVUbqMMhoxqvT78nsBG0l4BqcpfECCJIscf7C0wWpKkYn0ePYRjrGSYHPFvq
ucW8fye9NMAb9XCOiKcR0IUCtQi9jUtcRJkONOkzMOCKkWdgtTbry4FvNt7C6+hg
VeYvJ2viM/W9u/YxY8fc0pzNIlV/zEZ9tH2puaTiSb0gOZRTFusBWHhzXR4WAtjX
BWvdrpc0qC++qGzfgoxAJUP1UNDLjT3j7I587HvUyeqj
-----END CERTIFICATE-----