Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323637383137.roa
File:                     323830333a373036303a3a2f33322d3332203d3e20323637383137.roa (raw, json)
Hash identifier:          88tyMlC5G2wN1fM6bxCWOxtVyo+8gTnFKOX2AWVewCE=
Subject key identifier:   08:82:6C:C7:1F:ED:FA:11:C2:D3:85:C4:77:2C:22:7F:D1:3D:F8:63
Certificate issuer:       /CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
Certificate serial:       4E5F25D9CA1FAD85D5DA6062E0B4A6A58EC42E74
Authority key identifier: C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323637383137.roa
Signing time:             Tue 05 Mar 2024 18:16:51 +0000
ROA not before:           Tue 05 Mar 2024 18:11:51 +0000
ROA not after:            Tue 04 Mar 2025 18:16:51 +0000
asID:                     267817
IP address blocks:        2803:7060::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5f:25:d9:ca:1f:ad:85:d5:da:60:62:e0:b4:a6:a5:8e:c4:2e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
        Validity
            Not Before: Mar  5 18:11:51 2024 GMT
            Not After : Mar  4 18:16:51 2025 GMT
        Subject: CN=08826CC71FEDFA11C2D385C4772C227FD13DF863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:bd:cd:8e:75:44:7f:cd:4f:da:89:91:95:
                    4f:0d:a5:2f:de:05:41:47:ec:16:60:da:1d:6b:e9:
                    32:52:de:f9:f4:f0:b3:81:ca:18:94:69:db:92:89:
                    2c:71:cd:07:f6:4e:92:55:9e:ee:17:04:6e:65:3f:
                    10:de:08:d7:12:d7:4c:a9:c5:2e:45:a8:bc:49:e7:
                    9d:38:eb:f5:a0:25:47:b6:5a:a6:48:c1:16:09:17:
                    87:b9:e3:73:71:bf:48:53:ac:b1:66:8e:6c:b9:9c:
                    f0:c4:b4:8c:45:6f:b3:b6:4f:aa:af:fb:74:c2:6a:
                    cd:c1:34:44:90:db:93:f6:8d:1d:42:f2:3f:fb:18:
                    72:8c:99:81:f9:db:c4:2d:76:37:3b:87:a1:bf:40:
                    62:69:e7:c8:17:6c:09:21:8a:de:72:69:9e:6f:83:
                    4f:a0:3a:de:26:20:59:b9:86:d6:9f:ee:9d:78:d6:
                    af:c8:ba:ff:db:67:eb:e3:df:f1:ae:30:c4:78:18:
                    8b:6f:94:23:15:30:3a:9a:40:e6:bc:8f:28:1c:fb:
                    7a:ec:33:56:1c:9a:32:82:e4:e0:04:46:b1:28:46:
                    dd:55:77:c0:2b:a2:83:33:63:ed:bf:7a:b5:16:76:
                    98:30:95:20:60:93:60:6e:ed:c1:90:fa:d0:e8:01:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:82:6C:C7:1F:ED:FA:11:C2:D3:85:C4:77:2C:22:7F:D1:3D:F8:63
            X509v3 Authority Key Identifier:
                keyid:C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/323830333a373036303a3a2f33322d3332203d3e20323637383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7060::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:27:3a:5d:7c:1a:b4:ac:00:65:bc:23:03:c3:70:aa:40:
         cd:56:3e:1e:13:d0:48:6c:83:30:aa:7b:a0:2e:99:b0:82:d7:
         61:a2:c9:eb:58:f5:7f:66:64:2b:82:43:16:9a:b8:bf:42:44:
         4c:b9:19:c2:bb:05:f1:75:dd:98:b3:a1:31:59:e4:f3:bd:19:
         74:15:48:6b:a9:79:08:5b:3a:a8:b9:e4:3c:af:f3:cd:63:ba:
         00:50:68:cb:4b:38:52:99:5f:de:ae:b9:f4:0e:4e:0f:60:e2:
         d1:a5:9c:37:b9:58:69:1b:70:e7:2a:1b:79:9a:79:fb:09:8e:
         70:05:69:03:15:22:65:f9:ed:b1:52:b4:34:7d:5f:b2:41:eb:
         2e:42:f7:25:2b:c3:24:93:0c:28:a0:a2:64:0e:9e:84:62:f7:
         3c:41:73:fc:9c:5c:db:3c:91:c2:40:8e:43:89:17:a3:79:02:
         98:43:91:b8:0a:ac:fd:37:15:7e:33:84:9c:c6:1b:2e:b4:23:
         b5:66:b1:ca:2f:43:ac:ce:a9:c2:df:6f:90:58:56:b0:7d:e6:
         de:a1:48:c6:e3:7c:69:71:17:f4:db:b4:f5:ce:77:94:85:57:
         d8:a3:e4:6e:7e:a8:4b:83:e3:5a:74:09:d8:3d:b0:07:a7:99:
         d2:ca:ad:60
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUTl8l2cofrYXV2mBi4LSmpY7ELnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzExMUUyMkI4OEFCM0RGNzEzRUNFRjNCNDNEOTcxOTdG
MTQzNDdENzAeFw0yNDAzMDUxODExNTFaFw0yNTAzMDQxODE2NTFaMDMxMTAvBgNV
BAMTKDA4ODI2Q0M3MUZFREZBMTFDMkQzODVDNDc3MkMyMjdGRDEzREY4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Wb3NjnVEf81P2omRlU8NpS/e
BUFH7BZg2h1r6TJS3vn08LOByhiUaduSiSxxzQf2TpJVnu4XBG5lPxDeCNcS10yp
xS5FqLxJ55046/WgJUe2WqZIwRYJF4e543Nxv0hTrLFmjmy5nPDEtIxFb7O2T6qv
+3TCas3BNESQ25P2jR1C8j/7GHKMmYH528Qtdjc7h6G/QGJp58gXbAkhit5yaZ5v
g0+gOt4mIFm5htaf7p141q/Iuv/bZ+vj3/GuMMR4GItvlCMVMDqaQOa8jygc+3rs
M1YcmjKC5OAERrEoRt1Vd8ArooMzY+2/erUWdpgwlSBgk2Bu7cGQ+tDoAaKdAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUCIJsxx/t+hHC04XEdywif9E9+GMwHwYDVR0j
BBgwFoAUwRHiK4irPfcT7O87Q9lxl/FDR9cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNUM2MzU1QkY4QkJBMDJBRkRFQzAxNzQwNDE4Q0JEQTUy
RkFGRDExOUUxNkQ1MzlDMTFDQTk5NzY4RUE5NzdGLzAvQzExMUUyMkI4OEFCM0RG
NzEzRUNFRjNCNDNEOTcxOTdGMTQzNDdENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMTExRTIyQjg4QUIzREY3MTNF
Q0VGM0I0M0Q5NzE5N0YxNDM0N0Q3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzVDNjM1NUJGOEJCQTAyQUZERUMwMTc0MDQxOENCREE1MkZBRkQxMTlF
MTZENTM5QzExQ0E5OTc2OEVBOTc3Ri8wLzMyMzgzMDMzM2EzNzMwMzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDcGAw
DQYJKoZIhvcNAQELBQADggEBACezJzpdfBq0rABlvCMDw3CqQM1WPh4T0EhsgzCq
e6AumbCC12GiyetY9X9mZCuCQxaauL9CREy5GcK7BfF13ZizoTFZ5PO9GXQVSGup
eQhbOqi55Dyv881jugBQaMtLOFKZX96uufQOTg9g4tGlnDe5WGkbcOcqG3maefsJ
jnAFaQMVImX57bFStDR9X7JB6y5C9yUrwySTDCigomQOnoRi9zxBc/ycXNs8kcJA
jkOJF6N5AphDkbgKrP03FX4zhJzGGy60I7VmscovQ6zOqcLfb5BYVrB95t6hSMbj
fGlxF/TbtPXOd5SFV9ij5G5+qEuD41p0Cdg9sAenmdLKrWA=
-----END CERTIFICATE-----