Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/323830333a633565303a3a2f33322d3438203d3e20323731383135.roa
File:                     323830333a633565303a3a2f33322d3438203d3e20323731383135.roa (raw, json)
Hash identifier:          EqkDsyNrMRqvco9SzseiSm4aTy4upRqId+tsMyjMOyo=
Subject key identifier:   B7:63:67:BC:4C:AF:35:78:74:FE:0B:C5:5A:BC:7C:99:D9:3A:15:0D
Certificate issuer:       /CN=68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837
Certificate serial:       72EF7A4ADF6921C40C5602EA9C5BF2F8088D6993
Authority key identifier: 68:F9:C8:35:8C:43:BD:C6:EB:43:2A:48:7D:BF:DE:9F:AB:9B:38:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/323830333a633565303a3a2f33322d3438203d3e20323731383135.roa
Signing time:             Tue 05 Mar 2024 17:44:05 +0000
ROA not before:           Tue 05 Mar 2024 17:39:05 +0000
ROA not after:            Tue 04 Mar 2025 17:44:05 +0000
asID:                     271815
IP address blocks:        2803:c5e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ef:7a:4a:df:69:21:c4:0c:56:02:ea:9c:5b:f2:f8:08:8d:69:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837
        Validity
            Not Before: Mar  5 17:39:05 2024 GMT
            Not After : Mar  4 17:44:05 2025 GMT
        Subject: CN=B76367BC4CAF357874FE0BC55ABC7C99D93A150D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:fc:49:2b:2a:b5:3d:b7:bd:85:4d:e3:22:
                    5e:4c:7d:b0:2b:84:b4:b3:57:56:10:f5:2e:93:35:
                    01:03:ff:c9:c0:97:b4:c3:e7:85:c7:4a:1f:90:43:
                    3e:56:0b:be:74:80:ba:f0:6d:c2:d4:50:fb:31:34:
                    50:dd:49:9f:ee:c4:d4:77:31:98:a6:d0:f2:c7:a6:
                    39:68:48:90:75:4e:c1:ca:24:40:bd:64:20:44:48:
                    1c:2f:3c:f5:44:aa:b4:09:46:86:83:32:62:9a:e5:
                    71:b8:64:c2:df:37:11:cb:76:5d:91:10:70:bb:4c:
                    4d:41:d1:8d:1c:d2:a0:87:a3:e7:e5:cc:d1:ec:fb:
                    38:3c:b4:14:e8:6d:ac:fa:91:9d:2d:b9:8c:01:e3:
                    d2:5c:2f:98:89:9c:b2:ad:e4:ad:b9:a0:25:b6:b1:
                    79:04:36:66:b8:d5:cd:71:a6:98:c6:81:25:93:27:
                    8c:b7:49:39:af:80:d8:6c:f3:41:92:fb:fc:b0:19:
                    37:5b:21:d5:9f:f2:06:66:32:d1:d5:be:6e:42:30:
                    d7:0c:0f:83:71:a1:af:e8:9b:52:ea:f9:32:1a:53:
                    68:ab:4c:8f:8a:fa:be:36:52:74:aa:f8:d3:94:a5:
                    7c:db:08:a5:c6:9d:90:08:ba:64:5c:00:66:7a:0a:
                    6b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:63:67:BC:4C:AF:35:78:74:FE:0B:C5:5A:BC:7C:99:D9:3A:15:0D
            X509v3 Authority Key Identifier:
                keyid:68:F9:C8:35:8C:43:BD:C6:EB:43:2A:48:7D:BF:DE:9F:AB:9B:38:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68F9C8358C43BDC6EB432A487DBFDE9FAB9B3837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6418905D1824D550529E830EC3AEDB01BED46418535D6869DC09D4D9DBF49CC/0/323830333a633565303a3a2f33322d3438203d3e20323731383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:98:89:92:42:87:fb:84:b3:00:80:dc:e2:73:9d:1a:48:50:
         a4:a7:1b:91:03:26:22:96:6a:67:eb:1e:ed:a6:bc:3a:9d:1e:
         d0:24:a8:b7:77:d7:76:4b:6a:d6:42:37:cb:c0:39:06:c4:bf:
         a6:ec:85:90:4b:8e:f6:45:09:8b:2a:69:46:82:ba:a7:71:05:
         4a:8a:50:53:51:4c:4a:2b:99:13:d9:f9:7d:3e:fd:86:0a:6e:
         83:0e:c8:f3:a8:0a:35:54:64:0c:a0:4f:d9:df:b8:fc:fc:c3:
         51:cb:af:b0:65:8a:d6:3d:f6:b1:a1:e4:f3:9f:59:f1:83:31:
         86:46:e5:97:73:a3:53:af:92:7d:b6:2d:56:e2:da:1e:d5:55:
         f1:0d:ed:38:41:c0:e6:86:94:fd:d2:a4:24:87:64:75:54:53:
         44:c8:0b:c4:20:5e:10:ec:30:cb:87:a2:31:3f:dc:11:e3:65:
         8a:f4:ec:48:a7:b2:a4:7b:b7:7e:72:df:38:f3:2c:69:78:32:
         39:c2:a4:b9:34:56:b7:ed:36:be:82:51:28:7a:d1:18:21:b0:
         a0:e5:d5:9e:97:ce:ac:79:07:d6:74:1a:7c:97:63:fb:50:7c:
         e0:ef:1f:77:b3:66:ff:28:8f:c5:db:e3:32:d6:5e:7c:b2:cf:
         df:ca:6c:6e
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcu96St9pIcQMVgLqnFvy+AiNaZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhGOUM4MzU4QzQzQkRDNkVCNDMyQTQ4N0RCRkRFOUZB
QjlCMzgzNzAeFw0yNDAzMDUxNzM5MDVaFw0yNTAzMDQxNzQ0MDVaMDMxMTAvBgNV
BAMTKEI3NjM2N0JDNENBRjM1Nzg3NEZFMEJDNTVBQkM3Qzk5RDkzQTE1MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBj/xJKyq1Pbe9hU3jIl5MfbAr
hLSzV1YQ9S6TNQED/8nAl7TD54XHSh+QQz5WC750gLrwbcLUUPsxNFDdSZ/uxNR3
MZim0PLHpjloSJB1TsHKJEC9ZCBESBwvPPVEqrQJRoaDMmKa5XG4ZMLfNxHLdl2R
EHC7TE1B0Y0c0qCHo+flzNHs+zg8tBTobaz6kZ0tuYwB49JcL5iJnLKt5K25oCW2
sXkENma41c1xppjGgSWTJ4y3STmvgNhs80GS+/ywGTdbIdWf8gZmMtHVvm5CMNcM
D4Nxoa/om1Lq+TIaU2irTI+K+r42UnSq+NOUpXzbCKXGnZAIumRcAGZ6CmvxAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUt2NnvEyvNXh0/gvFWrx8mdk6FQ0wHwYDVR0j
BBgwFoAUaPnINYxDvcbrQypIfb/en6ubODcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNjQxODkwNUQxODI0RDU1MDUyOUU4MzBFQzNBRURCMDFC
RUQ0NjQxODUzNUQ2ODY5REMwOUQ0RDlEQkY0OUNDLzAvNjhGOUM4MzU4QzQzQkRD
NkVCNDMyQTQ4N0RCRkRFOUZBQjlCMzgzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEY5QzgzNThDNDNCREM2RUI0
MzJBNDg3REJGREU5RkFCOUIzODM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzY0MTg5MDVEMTgyNEQ1NTA1MjlFODMwRUMzQUVEQjAxQkVENDY0MTg1
MzVENjg2OURDMDlENEQ5REJGNDlDQy8wLzMyMzgzMDMzM2E2MzM1NjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMTM4MzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDxeAw
DQYJKoZIhvcNAQELBQADggEBAEGYiZJCh/uEswCA3OJznRpIUKSnG5EDJiKWamfr
Hu2mvDqdHtAkqLd313ZLatZCN8vAOQbEv6bshZBLjvZFCYsqaUaCuqdxBUqKUFNR
TEormRPZ+X0+/YYKboMOyPOoCjVUZAygT9nfuPz8w1HLr7BlitY99rGh5POfWfGD
MYZG5Zdzo1Ovkn22LVbi2h7VVfEN7ThBwOaGlP3SpCSHZHVUU0TIC8QgXhDsMMuH
ojE/3BHjZYr07EinsqR7t35y3zjzLGl4MjnCpLk0VrftNr6CUSh60RghsKDl1Z6X
zqx5B9Z0GnyXY/tQfODvH3ezZv8oj8Xb4zLWXnyyz9/KbG4=
-----END CERTIFICATE-----