Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/323830333a653163303a3a2f33322d3332203d3e20323635363834.roa
File:                     323830333a653163303a3a2f33322d3332203d3e20323635363834.roa (raw, json)
Hash identifier:          oIHHdwrwBuQYpEiIbNvKRZ4R12gyYgrhUu/2H7U2M/8=
Subject key identifier:   E2:81:6A:71:BA:4D:06:15:C6:C1:82:EE:03:EF:98:46:FD:27:3D:B5
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       540FE110F6FA3A5A74584A84A25DEB6FED3E2A6C
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/323830333a653163303a3a2f33322d3332203d3e20323635363834.roa
Signing time:             Thu 21 Mar 2024 19:15:00 +0000
ROA not before:           Thu 21 Mar 2024 19:10:00 +0000
ROA not after:            Thu 20 Mar 2025 19:15:00 +0000
asID:                     265684
IP address blocks:        2803:e1c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0f:e1:10:f6:fa:3a:5a:74:58:4a:84:a2:5d:eb:6f:ed:3e:2a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Mar 21 19:10:00 2024 GMT
            Not After : Mar 20 19:15:00 2025 GMT
        Subject: CN=E2816A71BA4D0615C6C182EE03EF9846FD273DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:56:a3:3d:d8:ef:35:8f:ba:d5:36:a9:e2:
                    72:90:05:5e:15:63:47:73:51:df:83:08:8c:9e:f6:
                    bb:29:8d:b3:e2:06:07:49:82:3f:de:b2:af:38:65:
                    6a:43:19:b5:18:03:ba:50:f7:5b:5b:67:b0:29:13:
                    f1:02:04:be:88:86:94:0b:c9:83:8d:eb:be:b3:c6:
                    ab:59:51:09:ce:ae:bc:88:69:f0:5d:cb:40:2e:19:
                    81:40:a8:cf:ac:63:e2:56:0e:88:93:e4:f7:94:95:
                    a3:bb:2a:cd:4f:2b:db:26:54:29:f3:10:83:d8:f2:
                    e9:dc:de:b5:8c:20:85:7b:3f:f5:17:08:75:e5:93:
                    33:86:51:df:f6:0c:ab:69:63:b6:51:f3:53:32:c6:
                    d5:82:91:82:57:b1:5e:e6:18:da:35:e5:a1:49:03:
                    b5:a4:10:98:a0:c8:ea:37:80:5f:f5:7f:61:f9:68:
                    94:40:1f:da:94:27:90:51:08:08:57:a1:af:ea:45:
                    fe:8b:58:4a:82:56:4a:b1:57:4c:9e:b6:37:0a:f1:
                    f5:54:22:fe:c6:5d:18:fe:1c:dc:93:f4:2b:b2:7c:
                    da:24:28:ab:33:8c:b3:83:a0:80:58:23:a4:5b:b5:
                    ba:46:ec:bd:18:b5:2e:96:88:c8:36:0c:40:40:da:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:81:6A:71:BA:4D:06:15:C6:C1:82:EE:03:EF:98:46:FD:27:3D:B5
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/323830333a653163303a3a2f33322d3332203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:78:3b:0a:af:fc:5b:88:d8:b7:be:49:a8:64:76:4a:ca:d5:
         7b:b6:17:fb:df:ec:e1:3c:9e:b2:67:8c:c7:d6:b7:fd:aa:93:
         29:4b:fa:d9:26:41:45:48:60:82:c6:c6:bb:29:56:f9:20:97:
         31:f4:36:c0:24:1d:c9:66:52:1c:09:fa:d0:43:f7:fe:50:b5:
         a4:aa:7b:b1:59:87:50:e9:aa:f6:51:33:5f:e3:80:f1:0a:3b:
         67:1a:c9:6b:c5:da:22:f9:86:88:46:74:28:82:48:be:dd:a3:
         12:ab:b0:d9:e3:89:b2:d5:eb:c9:ab:8a:51:db:51:f7:5a:6e:
         d1:5b:64:d2:b5:3c:de:e2:fe:2e:b6:06:94:61:b1:c0:bc:d1:
         fc:cf:0b:60:f5:1b:c7:71:51:cf:41:47:d8:d8:7f:4b:b8:5f:
         e6:b1:53:67:31:bc:e9:31:98:86:fe:37:88:4a:64:8a:dd:bc:
         f8:85:f0:bf:46:a0:c8:58:3b:6c:77:6e:fe:5c:76:77:84:16:
         e2:59:e6:90:bf:26:81:53:84:f0:f9:14:fd:49:0b:4e:b5:30:
         a3:4e:1d:78:47:ec:05:af:6a:18:1a:04:09:f8:a8:5e:4b:58:
         ed:1a:eb:8f:ad:76:6e:0f:84:79:58:d1:22:48:6c:78:14:84:
         29:c0:1e:de
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVA/hEPb6Olp0WEqEol3rb+0+KmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA0RTYyRjQyRThDNzU0MTMyQzQxMzc1MjE4NzNDRkNF
M0MyQkI0ODAeFw0yNDAzMjExOTEwMDBaFw0yNTAzMjAxOTE1MDBaMDMxMTAvBgNV
BAMTKEUyODE2QTcxQkE0RDA2MTVDNkMxODJFRTAzRUY5ODQ2RkQyNzNEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTlajPdjvNY+61Tap4nKQBV4V
Y0dzUd+DCIye9rspjbPiBgdJgj/esq84ZWpDGbUYA7pQ91tbZ7ApE/ECBL6IhpQL
yYON676zxqtZUQnOrryIafBdy0AuGYFAqM+sY+JWDoiT5PeUlaO7Ks1PK9smVCnz
EIPY8unc3rWMIIV7P/UXCHXlkzOGUd/2DKtpY7ZR81MyxtWCkYJXsV7mGNo15aFJ
A7WkEJigyOo3gF/1f2H5aJRAH9qUJ5BRCAhXoa/qRf6LWEqCVkqxV0yetjcK8fVU
Iv7GXRj+HNyT9CuyfNokKKszjLODoIBYI6RbtbpG7L0YtS6WiMg2DEBA2i8nAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU4oFqcbpNBhXGwYLuA++YRv0nPbUwHwYDVR0j
BBgwFoAU8E5i9C6MdUEyxBN1IYc8/OPCu0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REQwOEI1NDU4M0U0MkI0Nzc2MkE0QTlCQjA0MjMyOTAx
N0ZEQjQ0NTRFQzExNDNBN0E2MjU1RDNBOTdFQjM2LzAvRjA0RTYyRjQyRThDNzU0
MTMyQzQxMzc1MjE4NzNDRkNFM0MyQkI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDRFNjJGNDJFOEM3NTQxMzJD
NDEzNzUyMTg3M0NGQ0UzQzJCQjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUREMDhCNTQ1ODNFNDJCNDc3NjJBNEE5QkIwNDIzMjkwMTdGREI0NDU0
RUMxMTQzQTdBNjI1NUQzQTk3RUIzNi8wLzMyMzgzMDMzM2E2NTMxNjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM2MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD4cAw
DQYJKoZIhvcNAQELBQADggEBADN4Owqv/FuI2Le+SahkdkrK1Xu2F/vf7OE8nrJn
jMfWt/2qkylL+tkmQUVIYILGxrspVvkglzH0NsAkHclmUhwJ+tBD9/5QtaSqe7FZ
h1DpqvZRM1/jgPEKO2cayWvF2iL5hohGdCiCSL7doxKrsNnjibLV68mrilHbUfda
btFbZNK1PN7i/i62BpRhscC80fzPC2D1G8dxUc9BR9jYf0u4X+axU2cxvOkxmIb+
N4hKZIrdvPiF8L9GoMhYO2x3bv5cdneEFuJZ5pC/JoFThPD5FP1JC061MKNOHXhH
7AWvahgaBAn4qF5LWO0a64+tdm4PhHlY0SJIbHgUhCnAHt4=
-----END CERTIFICATE-----