Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/323830333a376336303a3a2f33322d3438203d3e203237393531.roa
File:                     323830333a376336303a3a2f33322d3438203d3e203237393531.roa (raw, json)
Hash identifier:          qr+p+RRm3G1cDBJYjhJaJ9r2ouEmCjMbkHRDMddzrbo=
Subject key identifier:   24:8B:9D:73:A7:C6:30:26:5A:A1:35:35:29:EE:48:DD:19:C4:79:CF
Certificate issuer:       /CN=50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A
Certificate serial:       3ED017D3880107E673479EF4326434F8C679354D
Authority key identifier: 50:AF:2A:53:60:96:4C:4E:EE:F3:CD:FC:03:ED:A5:C0:D2:F0:64:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/323830333a376336303a3a2f33322d3438203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:19:03 +0000
ROA not before:           Tue 05 Mar 2024 18:14:03 +0000
ROA not after:            Tue 04 Mar 2025 18:19:03 +0000
asID:                     27951
IP address blocks:        2803:7c60::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d0:17:d3:88:01:07:e6:73:47:9e:f4:32:64:34:f8:c6:79:35:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A
        Validity
            Not Before: Mar  5 18:14:03 2024 GMT
            Not After : Mar  4 18:19:03 2025 GMT
        Subject: CN=248B9D73A7C630265AA1353529EE48DD19C479CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:af:1a:f2:97:ce:c1:3f:01:bd:dd:02:58:
                    24:1a:80:89:0b:95:79:cf:28:bd:23:b6:e1:27:e9:
                    31:16:38:0f:79:c2:59:20:ba:c1:2e:da:74:74:b9:
                    04:83:8d:83:9d:e1:4a:e0:ec:83:ac:8a:2b:6e:c3:
                    c0:c7:4a:9d:ba:3a:79:c0:23:3d:19:f1:0d:19:7c:
                    d0:c9:cb:6f:ca:82:96:fc:5f:8e:8f:8b:dc:bc:2c:
                    d1:73:b5:a8:28:2a:e9:3c:2e:4f:9d:b2:c0:76:8a:
                    f5:77:a5:cd:9d:db:e5:71:51:71:20:74:ea:25:ee:
                    40:37:42:63:c3:71:2e:56:2f:46:21:c4:24:10:72:
                    33:3c:81:40:92:ca:b4:72:68:63:78:6c:4e:21:40:
                    28:35:7e:0d:5b:7a:89:82:70:58:c9:b6:90:19:9c:
                    26:dc:5f:08:11:b7:be:71:f5:d3:be:74:a4:78:f3:
                    bb:8f:16:d3:6a:7e:d1:d3:4f:b5:de:48:98:a4:9b:
                    ea:b6:c4:80:6f:f7:96:a4:9d:b7:6a:2e:ee:08:d2:
                    67:85:ea:af:dc:32:ff:4c:f4:3d:f6:1f:a3:2b:81:
                    78:02:0a:aa:06:53:e3:96:43:a4:22:e9:35:9c:08:
                    e6:2f:6c:20:e3:62:f3:fb:48:59:0b:01:f3:a1:7e:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8B:9D:73:A7:C6:30:26:5A:A1:35:35:29:EE:48:DD:19:C4:79:CF
            X509v3 Authority Key Identifier:
                keyid:50:AF:2A:53:60:96:4C:4E:EE:F3:CD:FC:03:ED:A5:C0:D2:F0:64:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50AF2A5360964C4EEEF3CDFC03EDA5C0D2F0646A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9793F80CEBE394B7E14D0706C26740581F858392DDF00AE779DEBA6364D9B326/0/323830333a376336303a3a2f33322d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:4c:f3:6b:1e:8b:f4:99:c8:4f:03:10:16:5f:26:f9:ee:
         87:81:0b:30:af:3d:ee:6c:e9:a5:cf:e4:c0:7e:d9:2e:3f:c0:
         bd:4b:d0:9b:40:0b:06:b8:a0:1a:e7:8e:a3:8b:23:8d:55:5c:
         f1:fd:0a:fa:43:d6:a1:5d:f6:b4:d7:90:50:0b:62:4a:c6:a5:
         e8:4a:47:c1:b3:35:22:f9:0e:96:46:cb:58:aa:f0:2e:9a:3d:
         2f:65:8d:2f:a5:e4:04:d2:9a:5a:f9:20:91:41:76:75:59:3b:
         73:e2:9c:f5:8b:91:fc:b1:eb:8d:29:00:02:3c:58:ca:c4:fb:
         04:af:bc:58:84:fd:1b:e7:f2:08:88:38:19:71:5a:6c:19:51:
         87:56:13:a2:59:15:b9:8b:f0:2c:68:39:17:70:d4:3a:55:67:
         c3:9a:1a:2d:24:56:ad:e2:e8:fa:80:c0:41:18:ec:c9:d7:1f:
         0a:4f:14:ef:24:c8:69:98:86:c7:ad:e1:ec:79:85:a2:78:c9:
         3b:3c:91:cc:aa:69:05:de:c2:8f:f2:c8:39:e4:5d:60:56:c4:
         14:35:89:d9:8c:f0:7e:f9:9b:eb:c5:bb:7c:e2:18:ac:84:7a:
         75:fa:13:5b:11:85:8c:b1:4d:ea:c3:1b:d4:b0:fb:be:1d:65:
         15:0b:8d:35
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUPtAX04gBB+ZzR570MmQ0+MZ5NU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBBRjJBNTM2MDk2NEM0RUVFRjNDREZDMDNFREE1QzBE
MkYwNjQ2QTAeFw0yNDAzMDUxODE0MDNaFw0yNTAzMDQxODE5MDNaMDMxMTAvBgNV
BAMTKDI0OEI5RDczQTdDNjMwMjY1QUExMzUzNTI5RUU0OEREMTlDNDc5Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeeK8a8pfOwT8Bvd0CWCQagIkL
lXnPKL0jtuEn6TEWOA95wlkgusEu2nR0uQSDjYOd4Urg7IOsiituw8DHSp26OnnA
Iz0Z8Q0ZfNDJy2/Kgpb8X46Pi9y8LNFztagoKuk8Lk+dssB2ivV3pc2d2+VxUXEg
dOol7kA3QmPDcS5WL0YhxCQQcjM8gUCSyrRyaGN4bE4hQCg1fg1beomCcFjJtpAZ
nCbcXwgRt75x9dO+dKR487uPFtNqftHTT7XeSJikm+q2xIBv95aknbdqLu4I0meF
6q/cMv9M9D32H6MrgXgCCqoGU+OWQ6Qi6TWcCOYvbCDjYvP7SFkLAfOhfmZvAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUJIudc6fGMCZaoTU1Ke5I3RnEec8wHwYDVR0j
BBgwFoAUUK8qU2CWTE7u8838A+2lwNLwZGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzkzRjgwQ0VCRTM5NEI3RTE0RDA3MDZDMjY3NDA1ODFG
ODU4MzkyRERGMDBBRTc3OURFQkE2MzY0RDlCMzI2LzAvNTBBRjJBNTM2MDk2NEM0
RUVFRjNDREZDMDNFREE1QzBEMkYwNjQ2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEFGMkE1MzYwOTY0QzRFRUVG
M0NERkMwM0VEQTVDMEQyRjA2NDZBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTc5M0Y4MENFQkUzOTRCN0UxNEQwNzA2QzI2NzQwNTgxRjg1ODM5MkRE
RjAwQUU3NzlERUJBNjM2NEQ5QjMyNi8wLzMyMzgzMDMzM2EzNzYzMzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczOTM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA3xgMA0G
CSqGSIb3DQEBCwUAA4IBAQCNKUzzax6L9JnITwMQFl8m+e6HgQswrz3ubOmlz+TA
ftkuP8C9S9CbQAsGuKAa546jiyONVVzx/Qr6Q9ahXfa015BQC2JKxqXoSkfBszUi
+Q6WRstYqvAumj0vZY0vpeQE0ppa+SCRQXZ1WTtz4pz1i5H8seuNKQACPFjKxPsE
r7xYhP0b5/IIiDgZcVpsGVGHVhOiWRW5i/AsaDkXcNQ6VWfDmhotJFat4uj6gMBB
GOzJ1x8KTxTvJMhpmIbHreHseYWieMk7PJHMqmkF3sKP8sg55F1gVsQUNYnZjPB+
+Zvrxbt84hishHp1+hNbEYWMsU3qwxvUsPu+HWUVC401
-----END CERTIFICATE-----