Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3230303a3a2f34302d3430203d3e20323733303638.roa
File:                     323830333a623739303a3230303a3a2f34302d3430203d3e20323733303638.roa (raw, json)
Hash identifier:          2jvINL+yOHdrHhxmBn+yaIywL1QtVsq3HQjehlXtw6w=
Subject key identifier:   17:7D:3E:BB:41:71:9A:77:64:9A:C1:40:7E:42:42:1E:8F:E6:25:F8
Certificate issuer:       /CN=0DFF2DC79EE538393460BA53D01DC71916150D41
Certificate serial:       513CF02617AEA7A7017A6491C282CC968DFE86A8
Authority key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3230303a3a2f34302d3430203d3e20323733303638.roa
Signing time:             Thu 04 Jul 2024 20:10:02 +0000
ROA not before:           Thu 04 Jul 2024 20:05:02 +0000
ROA not after:            Thu 03 Jul 2025 20:10:02 +0000
asID:                     273068
IP address blocks:        2803:b790:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3c:f0:26:17:ae:a7:a7:01:7a:64:91:c2:82:cc:96:8d:fe:86:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DFF2DC79EE538393460BA53D01DC71916150D41
        Validity
            Not Before: Jul  4 20:05:02 2024 GMT
            Not After : Jul  3 20:10:02 2025 GMT
        Subject: CN=177D3EBB41719A77649AC1407E42421E8FE625F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:2a:a9:5a:c0:09:d4:cb:03:a0:8f:9c:80:
                    c1:be:58:f6:c2:2a:72:b3:bf:92:cd:8d:05:f2:1d:
                    aa:cf:40:4d:e7:16:d4:68:c6:10:fe:62:1e:13:0e:
                    f7:4f:69:c6:8c:dd:dd:3a:a5:5e:d6:73:da:b0:03:
                    d7:be:ee:63:61:2f:f8:c5:01:00:a4:6b:e2:e8:62:
                    4f:21:8e:1e:35:b0:61:e6:f7:b9:c4:51:19:64:06:
                    b5:1f:2a:1d:80:bc:78:47:24:d5:f0:84:0a:03:61:
                    d9:93:38:eb:9b:4c:09:d1:93:88:54:6a:bb:4b:09:
                    64:fa:3c:64:40:42:34:c2:2b:79:bf:7d:a1:b0:f6:
                    6f:c2:26:d5:6e:8d:69:40:8f:c6:c8:34:6a:49:83:
                    bd:53:0f:46:0e:e2:d4:c1:90:0a:f6:e6:d0:7b:5b:
                    19:75:15:3e:bb:5f:cc:3e:d7:a0:6c:f5:bf:02:aa:
                    dd:57:9e:ec:a8:89:0e:aa:53:40:69:a5:a7:62:23:
                    a3:73:2c:05:36:ee:68:49:0a:12:ca:8a:a9:5d:7a:
                    d1:57:7c:9e:d0:92:b1:79:4b:82:83:15:24:5a:60:
                    8e:fe:33:34:23:9b:48:f3:87:1b:e4:fa:eb:27:b2:
                    73:4b:df:e3:bd:24:2d:03:9d:aa:35:8c:f7:88:13:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7D:3E:BB:41:71:9A:77:64:9A:C1:40:7E:42:42:1E:8F:E6:25:F8
            X509v3 Authority Key Identifier:
                keyid:0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/323830333a623739303a3230303a3a2f34302d3430203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:3a:d2:c5:3c:bd:43:5a:04:78:7c:1e:f2:66:32:f6:d7:
         bb:87:14:bc:29:95:5e:e5:a4:87:ab:cb:04:a9:68:f5:ae:a4:
         c7:5b:e9:6e:e5:53:3d:8a:59:b2:e6:4f:5f:41:6d:3f:7f:a0:
         4c:43:18:c8:51:63:3b:b4:69:4a:b7:89:45:84:8b:11:4f:7b:
         a9:18:d7:43:fd:8e:ee:e9:4b:a1:94:55:57:8b:be:34:3a:e3:
         63:4a:2e:7c:ed:7f:27:74:47:b5:d1:80:b0:5f:b8:51:c8:f2:
         94:cb:fe:0d:2a:bf:5f:12:8c:d3:67:48:7c:90:8e:46:2a:1a:
         83:f6:a7:36:42:63:6b:6a:d3:5b:6f:92:58:80:25:47:78:41:
         81:34:3e:48:36:43:f2:c1:0b:3a:8d:e1:90:9b:83:89:82:8f:
         a8:97:76:ca:79:07:a2:5b:c1:8f:9d:f1:cd:a4:ce:bc:d9:84:
         62:3e:27:a5:24:37:cd:73:13:72:fe:77:5f:a3:01:ca:48:2b:
         66:02:b6:1e:b5:c5:19:d8:a0:3f:97:e9:33:9c:fb:c7:d5:5a:
         60:8f:3f:c1:fd:77:1a:e3:d3:7f:73:0b:9f:a3:b4:7c:c9:2d:
         97:86:e1:7c:68:0b:3e:58:b5:90:c1:4f:9b:4f:4a:3d:56:ef:
         37:d3:49:1f
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUUTzwJheup6cBemSRwoLMlo3+hqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERGRjJEQzc5RUU1MzgzOTM0NjBCQTUzRDAxREM3MTkx
NjE1MEQ0MTAeFw0yNDA3MDQyMDA1MDJaFw0yNTA3MDMyMDEwMDJaMDMxMTAvBgNV
BAMTKDE3N0QzRUJCNDE3MTlBNzc2NDlBQzE0MDdFNDI0MjFFOEZFNjI1RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvSqpWsAJ1MsDoI+cgMG+WPbC
KnKzv5LNjQXyHarPQE3nFtRoxhD+Yh4TDvdPacaM3d06pV7Wc9qwA9e+7mNhL/jF
AQCka+LoYk8hjh41sGHm97nEURlkBrUfKh2AvHhHJNXwhAoDYdmTOOubTAnRk4hU
artLCWT6PGRAQjTCK3m/faGw9m/CJtVujWlAj8bINGpJg71TD0YO4tTBkAr25tB7
Wxl1FT67X8w+16Bs9b8Cqt1XnuyoiQ6qU0BppadiI6NzLAU27mhJChLKiqldetFX
fJ7QkrF5S4KDFSRaYI7+MzQjm0jzhxvk+usnsnNL3+O9JC0Dnao1jPeIE0dLAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUF30+u0FxmndkmsFAfkJCHo/mJfgwHwYDVR0j
BBgwFoAUDf8tx57lODk0YLpT0B3HGRYVDUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzk5Q0M5RTM1ODNENEU4RTc5NEEwQUJFRUM1OUY5QjE3
MkU2NDg5Q0JDQkZBMkU2NjQ5MTM2MkMzQzU5NjRGLzAvMERGRjJEQzc5RUU1Mzgz
OTM0NjBCQTUzRDAxREM3MTkxNjE1MEQ0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREZGMkRDNzlFRTUzODM5MzQ2
MEJBNTNEMDFEQzcxOTE2MTUwRDQxLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTc5OUNDOUUzNTgzRDRFOEU3OTRBMEFCRUVDNTlGOUIxNzJFNjQ4OUNC
Q0JGQTJFNjY0OTEzNjJDM0M1OTY0Ri8wLzMyMzgzMDMzM2E2MjM3MzkzMDNhMzIz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzAzNjM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAO3kAIwDQYJKoZIhvcNAQELBQADggEBAGzVOtLFPL1DWgR4fB7yZjL217uH
FLwplV7lpIerywSpaPWupMdb6W7lUz2KWbLmT19BbT9/oExDGMhRYzu0aUq3iUWE
ixFPe6kY10P9ju7pS6GUVVeLvjQ642NKLnztfyd0R7XRgLBfuFHI8pTL/g0qv18S
jNNnSHyQjkYqGoP2pzZCY2tq01tvkliAJUd4QYE0Pkg2Q/LBCzqN4ZCbg4mCj6iX
dsp5B6JbwY+d8c2kzrzZhGI+J6UkN81zE3L+d1+jAcpIK2YCth61xRnYoD+X6TOc
+8fVWmCPP8H9dxrj039zC5+jtHzJLZeG4XxoCz5YtZDBT5tPSj1W7zfTSR8=
-----END CERTIFICATE-----