Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/323830333a326130303a3a2f33312d3438203d3e203237383935.roa
File:                     323830333a326130303a3a2f33312d3438203d3e203237383935.roa (raw, json)
Hash identifier:          oi7EyLGky+VlBn5w3wetyyB48b+8Y1lMJzWBair3uSM=
Subject key identifier:   12:FA:6A:0D:25:2C:65:F7:D0:53:96:50:77:C3:0D:5E:FE:13:94:9A
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       11B279F35BEE346B8D10A22895CF615964D5D690
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/323830333a326130303a3a2f33312d3438203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:24 +0000
ROA not before:           Tue 05 Mar 2024 18:07:24 +0000
ROA not after:            Tue 04 Mar 2025 18:12:24 +0000
asID:                     27895
IP address blocks:        2803:2a00::/31 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b2:79:f3:5b:ee:34:6b:8d:10:a2:28:95:cf:61:59:64:d5:d6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:24 2024 GMT
            Not After : Mar  4 18:12:24 2025 GMT
        Subject: CN=12FA6A0D252C65F7D053965077C30D5EFE13949A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:68:05:8d:f6:34:cc:76:63:34:03:3a:8f:
                    38:e4:63:b1:35:dd:0f:0c:59:5b:86:ff:f0:d9:ea:
                    27:07:17:75:2f:57:da:f7:ad:43:99:2b:52:45:66:
                    71:53:3d:9d:44:c8:1e:c6:0d:39:68:60:f3:03:ce:
                    48:f7:05:a2:42:70:0e:21:33:41:ee:ec:bf:6e:52:
                    82:b1:67:cf:c7:3b:7b:56:da:c7:6f:8d:21:6b:c7:
                    cb:ce:cb:aa:5a:79:65:ae:6a:cf:6d:5d:2c:e8:f4:
                    17:13:6c:66:12:ff:a5:95:c9:7a:f9:9a:5f:1b:99:
                    e7:af:7a:00:5e:6e:74:48:6f:74:d0:7f:df:c2:86:
                    2b:64:3d:8e:3e:8a:fd:7c:c1:b8:7d:d0:e8:02:93:
                    f8:70:22:d5:ad:00:42:a6:a3:50:03:48:27:6b:fd:
                    43:ae:30:03:a2:25:85:bb:38:61:9b:c8:4e:06:42:
                    35:5d:f4:62:65:58:f0:52:8a:ad:09:f9:4e:10:8c:
                    e3:53:d7:84:f2:0e:2d:04:7e:38:76:05:ef:57:e9:
                    a8:40:74:2d:00:e9:f2:59:5d:6f:95:04:96:7a:0b:
                    cc:3b:48:04:37:3d:66:ea:41:b8:d4:3c:a2:8c:0d:
                    8b:3b:d3:df:d7:97:1d:fd:41:33:c4:a3:29:24:48:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FA:6A:0D:25:2C:65:F7:D0:53:96:50:77:C3:0D:5E:FE:13:94:9A
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/323830333a326130303a3a2f33312d3438203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a00::/31

    Signature Algorithm: sha256WithRSAEncryption
         26:64:04:1a:de:81:c8:0e:6f:9a:bf:db:9f:d6:04:58:16:e0:
         d8:42:b6:5e:04:20:e1:8f:07:5a:09:34:a3:c7:4f:b5:4b:27:
         f0:8e:49:20:89:1b:be:37:e3:67:a9:92:ba:61:5e:ea:37:0d:
         3a:9e:98:14:5c:2f:dd:06:09:fa:4f:03:e6:6f:b5:50:9a:2c:
         7b:3a:20:13:d8:b7:bd:d4:38:7d:f3:5d:49:d8:53:c4:85:7d:
         73:a6:17:21:e2:de:2d:05:66:bc:12:e7:38:15:85:ee:a8:aa:
         0f:fc:35:da:4a:ec:8b:2c:02:9c:d4:98:b0:f2:11:50:05:6b:
         b3:bd:e9:f6:96:59:9f:1e:67:2a:0d:a7:bc:b9:6b:3e:31:c6:
         67:27:2a:2d:42:a3:64:62:2a:8a:87:11:22:63:65:b6:fe:04:
         04:d9:84:7d:29:b9:89:36:d1:ca:72:e1:6a:13:88:e4:ba:05:
         10:45:54:a4:d3:68:f5:67:96:0b:99:74:6d:f0:ae:87:e0:7b:
         5d:ee:54:02:53:a9:b6:c6:37:5a:e6:f6:90:f5:aa:2a:c7:c5:
         33:a9:7a:66:04:60:57:d8:a9:8a:5e:23:76:60:83:2c:ee:6a:
         af:be:26:7d:49:7d:f3:8a:80:72:46:29:ee:46:d6:fc:25:47:
         f4:dc:74:2e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUEbJ581vuNGuNEKIolc9hWWTV1pAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZDQkFBMDgwRTIxOUM3M0Y5QkJGNTUyRDgxQjY1QzA1
MDYzRDQyNzAeFw0yNDAzMDUxODA3MjRaFw0yNTAzMDQxODEyMjRaMDMxMTAvBgNV
BAMTKDEyRkE2QTBEMjUyQzY1RjdEMDUzOTY1MDc3QzMwRDVFRkUxMzk0OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+WgFjfY0zHZjNAM6jzjkY7E1
3Q8MWVuG//DZ6icHF3UvV9r3rUOZK1JFZnFTPZ1EyB7GDTloYPMDzkj3BaJCcA4h
M0Hu7L9uUoKxZ8/HO3tW2sdvjSFrx8vOy6paeWWuas9tXSzo9BcTbGYS/6WVyXr5
ml8bmeevegBebnRIb3TQf9/ChitkPY4+iv18wbh90OgCk/hwItWtAEKmo1ADSCdr
/UOuMAOiJYW7OGGbyE4GQjVd9GJlWPBSiq0J+U4QjONT14TyDi0Efjh2Be9X6ahA
dC0A6fJZXW+VBJZ6C8w7SAQ3PWbqQbjUPKKMDYs709/Xlx39QTPEoykkSGh3AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUEvpqDSUsZffQU5ZQd8MNXv4TlJowHwYDVR0j
BBgwFoAUL8uqCA4hnHP5u/VS2BtlwFBj1CcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEJCMDQwMDQ1M0I1RDE3RkM1Mzc3RDFDMTdDMzhFM0FB
NTgwMjQ2RjAwNzM4MDIyMzY5RDQ4MDA3MTYyREQyLzAvMkZDQkFBMDgwRTIxOUM3
M0Y5QkJGNTUyRDgxQjY1QzA1MDYzRDQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkNCQUEwODBFMjE5QzczRjlC
QkY1NTJEODFCNjVDMDUwNjNENDI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCQjA0MDA0NTNCNUQxN0ZDNTM3N0QxQzE3QzM4RTNBQTU4MDI0NkYw
MDczODAyMjM2OUQ0ODAwNzE2MkREMi8wLzMyMzgzMDMzM2EzMjYxMzAzMDNhM2Ey
ZjMzMzEyZDM0MzgyMDNkM2UyMDMyMzczODM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEoAyoAMA0G
CSqGSIb3DQEBCwUAA4IBAQAmZAQa3oHIDm+av9uf1gRYFuDYQrZeBCDhjwdaCTSj
x0+1SyfwjkkgiRu+N+NnqZK6YV7qNw06npgUXC/dBgn6TwPmb7VQmix7OiAT2Le9
1Dh9811J2FPEhX1zphch4t4tBWa8Euc4FYXuqKoP/DXaSuyLLAKc1Jiw8hFQBWuz
ven2llmfHmcqDae8uWs+McZnJyotQqNkYiqKhxEiY2W2/gQE2YR9KbmJNtHKcuFq
E4jkugUQRVSk02j1Z5YLmXRt8K6H4Htd7lQCU6m2xjda5vaQ9aoqx8UzqXpmBGBX
2KmKXiN2YIMs7mqvviZ9SX3zioByRinuRtb8JUf03HQu
-----END CERTIFICATE-----