Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3634203d3e20323634373630.roa
File:                     323830333a323063303a3a2f33322d3634203d3e20323634373630.roa (raw, json)
Hash identifier:          HFtLBpSAiJjYmWfO+u+JMWiWdg2tXPN59EJcUW7W0d0=
Subject key identifier:   54:4E:46:3F:D3:73:4B:3A:A8:2C:E0:C9:AB:B3:FE:19:5D:05:52:F3
Certificate issuer:       /CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
Certificate serial:       6C44225888544220D94B84EC7CA75ECC5417B235
Authority key identifier: 88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3634203d3e20323634373630.roa
Signing time:             Sat 06 Apr 2024 15:55:00 +0000
ROA not before:           Sat 06 Apr 2024 15:50:00 +0000
ROA not after:            Sat 05 Apr 2025 15:55:00 +0000
asID:                     264760
IP address blocks:        2803:20c0::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:44:22:58:88:54:42:20:d9:4b:84:ec:7c:a7:5e:cc:54:17:b2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
        Validity
            Not Before: Apr  6 15:50:00 2024 GMT
            Not After : Apr  5 15:55:00 2025 GMT
        Subject: CN=544E463FD3734B3AA82CE0C9ABB3FE195D0552F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:ad:8a:ad:93:50:5a:91:d0:6b:fa:61:5a:
                    ae:11:80:b9:59:a9:34:77:5d:ae:22:68:9d:18:46:
                    77:40:9d:7b:b1:e9:85:50:07:1c:9e:6c:e9:44:26:
                    e8:81:14:78:2e:d7:32:60:47:b1:22:c7:bf:dc:d2:
                    d8:5d:95:64:97:47:0a:90:4a:2a:59:c1:6a:7f:a0:
                    79:92:fc:b3:4a:bd:04:f6:6f:41:64:10:8a:8e:0f:
                    9e:69:71:27:39:78:11:1a:09:17:ae:71:c2:b9:98:
                    21:30:98:33:86:76:66:46:47:d1:e3:1b:39:bc:29:
                    c9:06:17:43:d3:6b:d2:2b:b2:ba:02:e8:5a:19:f4:
                    5f:68:f8:3b:79:17:32:29:63:53:fd:53:9d:a5:0f:
                    10:01:3f:de:fe:8e:1d:12:6c:da:1c:c9:71:74:a7:
                    2a:a3:96:4d:80:db:97:cd:4a:28:bf:87:d7:af:81:
                    52:b7:6b:c5:d6:fb:6c:18:11:2c:7f:36:f7:8e:0a:
                    d4:44:dc:58:d4:26:8b:7a:3e:da:ec:0a:9f:a6:e6:
                    8f:dd:e5:17:d4:54:dc:3e:de:de:37:ea:c2:70:fd:
                    ca:61:88:88:26:b6:5a:50:26:96:9c:e1:4d:be:26:
                    41:77:31:87:82:52:ce:e5:d6:9a:09:c0:1b:0a:89:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:46:3F:D3:73:4B:3A:A8:2C:E0:C9:AB:B3:FE:19:5D:05:52:F3
            X509v3 Authority Key Identifier:
                keyid:88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3634203d3e20323634373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:a7:83:75:fb:9e:b3:bb:65:db:e1:d8:07:fa:2b:43:f1:
         cb:c7:c4:bd:1d:42:46:c4:af:75:00:40:2b:6f:69:5a:c8:0a:
         b5:d6:6a:12:07:82:e6:5a:f5:e1:fe:a1:e7:57:26:ba:d2:42:
         0c:df:03:7f:73:db:13:1e:e9:56:e8:92:d6:da:74:74:80:b9:
         df:f0:b8:61:c9:be:85:f0:8d:fb:f2:e4:8f:0e:24:31:17:83:
         65:40:a0:21:1f:7a:79:56:28:ec:c8:38:82:e8:cc:b8:ec:7a:
         88:d8:61:97:16:73:38:54:43:c5:88:0c:56:e9:41:bf:5e:2c:
         8b:74:e0:ec:a9:9e:61:49:ed:6c:ee:66:61:97:28:e2:0f:86:
         ce:52:6d:4f:26:14:84:40:37:75:56:e5:00:a8:af:2b:17:ae:
         73:ac:0f:71:df:cc:be:40:9d:1b:8f:13:09:50:f2:8a:d4:6f:
         01:ea:13:b1:69:5e:7b:fd:46:fd:02:e3:fb:6e:53:5f:99:00:
         13:54:30:99:63:3e:23:be:f8:79:fd:f3:aa:d6:9a:64:c1:1c:
         48:57:ad:a5:75:f8:1e:6c:ca:37:78:cb:a5:ae:a3:75:c9:c5:
         e1:61:38:40:3b:5e:ae:1f:01:ea:52:ce:a0:b0:23:d7:e4:08:
         01:a3:65:98
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUbEQiWIhUQiDZS4TsfKdezFQXsjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhERTUzRTAwMTAzMzhBREUwNTBFRkZBQTQ2OThCRjM3
NDg4RUU3MTAeFw0yNDA0MDYxNTUwMDBaFw0yNTA0MDUxNTU1MDBaMDMxMTAvBgNV
BAMTKDU0NEU0NjNGRDM3MzRCM0FBODJDRTBDOUFCQjNGRTE5NUQwNTUyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhK2KrZNQWpHQa/phWq4RgLlZ
qTR3Xa4iaJ0YRndAnXux6YVQBxyebOlEJuiBFHgu1zJgR7Eix7/c0thdlWSXRwqQ
SipZwWp/oHmS/LNKvQT2b0FkEIqOD55pcSc5eBEaCReuccK5mCEwmDOGdmZGR9Hj
Gzm8KckGF0PTa9IrsroC6FoZ9F9o+Dt5FzIpY1P9U52lDxABP97+jh0SbNocyXF0
pyqjlk2A25fNSii/h9evgVK3a8XW+2wYESx/NveOCtRE3FjUJot6PtrsCp+m5o/d
5RfUVNw+3t436sJw/cphiIgmtlpQJpac4U2+JkF3MYeCUs7l1poJwBsKiePfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUVE5GP9NzSzqoLODJq7P+GV0FUvMwHwYDVR0j
BBgwFoAUiN5T4AEDOK3gUO/6pGmL83SI7nEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzMzOUYzMDJCRjlEQTExNzJCNDhDNDg4RkRBODNGNUQ1
REQzRkZFQ0FDOUU1RjUyREUzOTE2OUY3NjkxQkZBLzAvODhERTUzRTAwMTAzMzhB
REUwNTBFRkZBQTQ2OThCRjM3NDg4RUU3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OERFNTNFMDAxMDMzOEFERTA1
MEVGRkFBNDY5OEJGMzc0ODhFRTcxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkMzMzlGMzAyQkY5REExMTcyQjQ4QzQ4OEZEQTgzRjVENUREM0ZGRUNB
QzlFNUY1MkRFMzkxNjlGNzY5MUJGQS8wLzMyMzgzMDMzM2EzMjMwNjMzMDNhM2Ey
ZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDIMAw
DQYJKoZIhvcNAQELBQADggEBAHSOp4N1+56zu2Xb4dgH+itD8cvHxL0dQkbEr3UA
QCtvaVrICrXWahIHguZa9eH+oedXJrrSQgzfA39z2xMe6VboktbadHSAud/wuGHJ
voXwjfvy5I8OJDEXg2VAoCEfenlWKOzIOILozLjseojYYZcWczhUQ8WIDFbpQb9e
LIt04OypnmFJ7WzuZmGXKOIPhs5SbU8mFIRAN3VW5QCorysXrnOsD3HfzL5AnRuP
EwlQ8orUbwHqE7FpXnv9Rv0C4/tuU1+ZABNUMJljPiO++Hn986rWmmTBHEhXraV1
+B5syjd4y6Wuo3XJxeFhOEA7Xq4fAepSzqCwI9fkCAGjZZg=
-----END CERTIFICATE-----