Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9F55107D4895CC3462F428F8135E59C9723E1FFE3D4B4A3CF4C2E7B3090F4F2/0/323830333a343835303a3a2f33322d3332203d3e20323733313038.roa
File:                     323830333a343835303a3a2f33322d3332203d3e20323733313038.roa (raw, json)
Hash identifier:          i6j8jH4C+bry7pcb8Nk1UbtV4DYG/jgKQIX6WyXpeEA=
Subject key identifier:   8E:3F:12:76:12:0F:1D:95:2A:7C:24:35:4A:D4:DE:49:E5:F7:91:C2
Certificate issuer:       /CN=E74FE2313D0FAF42C98F95C2A73E7D52F157329A
Certificate serial:       69DA9679E7FDD38088C722E233B84078BF9AB9A0
Authority key identifier: E7:4F:E2:31:3D:0F:AF:42:C9:8F:95:C2:A7:3E:7D:52:F1:57:32:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74FE2313D0FAF42C98F95C2A73E7D52F157329A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9F55107D4895CC3462F428F8135E59C9723E1FFE3D4B4A3CF4C2E7B3090F4F2/0/323830333a343835303a3a2f33322d3332203d3e20323733313038.roa
Signing time:             Mon 01 Jul 2024 21:50:00 +0000
ROA not before:           Mon 01 Jul 2024 21:45:00 +0000
ROA not after:            Mon 30 Jun 2025 21:50:00 +0000
asID:                     273108
IP address blocks:        2803:4850::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:da:96:79:e7:fd:d3:80:88:c7:22:e2:33:b8:40:78:bf:9a:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74FE2313D0FAF42C98F95C2A73E7D52F157329A
        Validity
            Not Before: Jul  1 21:45:00 2024 GMT
            Not After : Jun 30 21:50:00 2025 GMT
        Subject: CN=8E3F1276120F1D952A7C24354AD4DE49E5F791C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:5c:39:ba:4a:c5:f8:a1:5e:67:d0:03:60:
                    6c:9e:1c:e8:bd:f8:9d:51:92:a8:19:1d:0f:58:99:
                    5a:e4:c0:bc:ee:64:10:9c:21:26:60:f1:ba:88:e0:
                    b7:ac:f2:ce:d8:42:08:3e:00:c1:dd:d8:ab:ae:c0:
                    43:ab:20:e8:bb:77:6a:f4:98:94:60:ce:2f:c7:07:
                    01:17:93:e9:05:f8:55:bc:39:f9:24:f1:b0:ed:fc:
                    25:84:d2:54:50:59:f2:36:7f:82:77:1a:bd:bb:0e:
                    5a:89:69:c4:ed:d6:55:d9:fa:b8:b3:b8:28:a5:d7:
                    f9:f5:5d:f0:4e:41:a4:c4:35:25:cf:b8:f5:51:93:
                    26:75:bc:ea:50:c6:73:68:d1:c5:b6:29:cc:f2:e3:
                    d6:21:24:30:35:ad:af:6a:e6:9b:59:fb:e4:96:c4:
                    8f:e9:4d:a9:48:61:a9:ce:b9:30:f8:56:ad:34:ba:
                    0c:98:f2:cf:bc:ce:cb:f4:5c:5c:19:02:36:e2:f3:
                    f0:18:0c:23:96:36:c0:7c:84:fa:f5:35:7c:20:77:
                    9c:d9:9b:e8:0b:9c:34:58:7f:25:2d:1c:fb:08:59:
                    71:ab:6e:5a:62:ef:69:52:db:ac:5b:94:88:92:11:
                    7c:9c:4c:97:fa:45:39:45:fc:80:64:28:11:16:7c:
                    53:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3F:12:76:12:0F:1D:95:2A:7C:24:35:4A:D4:DE:49:E5:F7:91:C2
            X509v3 Authority Key Identifier:
                keyid:E7:4F:E2:31:3D:0F:AF:42:C9:8F:95:C2:A7:3E:7D:52:F1:57:32:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9F55107D4895CC3462F428F8135E59C9723E1FFE3D4B4A3CF4C2E7B3090F4F2/0/E74FE2313D0FAF42C98F95C2A73E7D52F157329A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74FE2313D0FAF42C98F95C2A73E7D52F157329A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9F55107D4895CC3462F428F8135E59C9723E1FFE3D4B4A3CF4C2E7B3090F4F2/0/323830333a343835303a3a2f33322d3332203d3e20323733313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4850::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:9c:c2:64:ee:c1:3b:14:2a:dd:d7:99:b6:1a:a8:07:e6:37:
         dd:a4:bc:85:0a:d7:bb:ed:21:9d:a3:01:23:ca:7e:37:47:f0:
         ee:9b:dd:b2:e5:2b:97:4c:e5:f0:2f:28:a1:3d:37:64:22:9a:
         76:98:60:02:b8:ed:89:cc:73:be:7d:a5:0a:72:a4:05:4e:77:
         2b:1b:83:6b:65:1a:d7:7c:22:14:e6:95:c2:cb:49:41:de:87:
         f7:db:d6:2e:31:3e:ce:da:67:8c:5f:2a:fb:52:8a:eb:49:a7:
         23:07:0d:d9:33:e5:7a:f2:ed:0b:77:7e:27:28:7e:bb:91:f3:
         2c:97:7c:11:94:49:13:d4:89:4d:28:96:26:f9:d9:33:03:01:
         e9:81:4a:74:b9:28:12:e7:df:9a:8a:38:3c:c5:aa:ce:58:24:
         62:8c:85:76:03:01:a6:a9:5c:ef:18:4c:27:80:49:58:07:2c:
         c2:a4:c9:27:0f:69:b3:d3:b2:8f:63:8f:49:7b:a5:89:1e:93:
         2a:63:1c:e9:61:04:f0:f5:72:d8:48:81:76:89:47:66:71:ca:
         61:58:83:f3:3c:f5:86:8e:38:70:10:12:1e:ac:3c:5d:22:78:
         46:d5:10:d6:91:7c:47:4e:b5:21:d5:a1:f8:dc:0a:f1:96:7e:
         ae:5a:a8:54
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUadqWeef904CIxyLiM7hAeL+auaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc0RkUyMzEzRDBGQUY0MkM5OEY5NUMyQTczRTdENTJG
MTU3MzI5QTAeFw0yNDA3MDEyMTQ1MDBaFw0yNTA2MzAyMTUwMDBaMDMxMTAvBgNV
BAMTKDhFM0YxMjc2MTIwRjFEOTUyQTdDMjQzNTRBRDRERTQ5RTVGNzkxQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCps1w5ukrF+KFeZ9ADYGyeHOi9
+J1RkqgZHQ9YmVrkwLzuZBCcISZg8bqI4Les8s7YQgg+AMHd2KuuwEOrIOi7d2r0
mJRgzi/HBwEXk+kF+FW8Ofkk8bDt/CWE0lRQWfI2f4J3Gr27DlqJacTt1lXZ+riz
uCil1/n1XfBOQaTENSXPuPVRkyZ1vOpQxnNo0cW2Kczy49YhJDA1ra9q5ptZ++SW
xI/pTalIYanOuTD4Vq00ugyY8s+8zsv0XFwZAjbi8/AYDCOWNsB8hPr1NXwgd5zZ
m+gLnDRYfyUtHPsIWXGrblpi72lS26xblIiSEXycTJf6RTlF/IBkKBEWfFO1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUjj8SdhIPHZUqfCQ1StTeSeX3kcIwHwYDVR0j
BBgwFoAU50/iMT0Pr0LJj5XCpz59UvFXMpowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOUY1NTEwN0Q0ODk1Q0MzNDYyRjQyOEY4MTM1RTU5Qzk3
MjNFMUZGRTNENEI0QTNDRjRDMkU3QjMwOTBGNEYyLzAvRTc0RkUyMzEzRDBGQUY0
MkM5OEY5NUMyQTczRTdENTJGMTU3MzI5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzRGRTIzMTNEMEZBRjQyQzk4
Rjk1QzJBNzNFN0Q1MkYxNTczMjlBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTlGNTUxMDdENDg5NUNDMzQ2MkY0MjhGODEzNUU1OUM5NzIzRTFGRkUz
RDRCNEEzQ0Y0QzJFN0IzMDkwRjRGMi8wLzMyMzgzMDMzM2EzNDM4MzUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzMxMzAzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDSFAw
DQYJKoZIhvcNAQELBQADggEBAAScwmTuwTsUKt3XmbYaqAfmN92kvIUK17vtIZ2j
ASPKfjdH8O6b3bLlK5dM5fAvKKE9N2QimnaYYAK47YnMc759pQpypAVOdysbg2tl
Gtd8IhTmlcLLSUHeh/fb1i4xPs7aZ4xfKvtSiutJpyMHDdkz5Xry7Qt3ficofruR
8yyXfBGUSRPUiU0olib52TMDAemBSnS5KBLn35qKODzFqs5YJGKMhXYDAaapXO8Y
TCeASVgHLMKkyScPabPTso9jj0l7pYkekypjHOlhBPD1cthIgXaJR2ZxymFYg/M8
9YaOOHAQEh6sPF0ieEbVENaRfEdOtSHVofjcCvGWfq5aqFQ=
-----END CERTIFICATE-----