Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3130303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3130303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          vCw8LU4xQ00/Ihue2PoqlJIyRN01t9Mjh6GE8NOKgzg=
Subject key identifier:   8D:3F:A3:55:8D:10:71:28:64:F8:A9:D0:4F:9B:18:73:CF:D2:80:7E
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       2309C5BDC67535DE6EC6E361C1BAE804399D674E
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3130303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:56 +0000
ROA not before:           Tue 05 Mar 2024 17:42:56 +0000
ROA not after:            Tue 04 Mar 2025 17:47:56 +0000
asID:                     264824
IP address blocks:        2803:e360:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:09:c5:bd:c6:75:35:de:6e:c6:e3:61:c1:ba:e8:04:39:9d:67:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:56 2024 GMT
            Not After : Mar  4 17:47:56 2025 GMT
        Subject: CN=8D3FA3558D10712864F8A9D04F9B1873CFD2807E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:15:e3:79:38:26:02:35:0e:bf:20:8e:50:
                    33:17:33:b5:e2:12:e4:b2:ae:e5:fe:2f:31:b8:ac:
                    23:93:6d:a0:3f:b8:8a:5c:d8:ac:31:46:dd:e8:e5:
                    4d:48:7c:ab:5d:5e:89:03:24:0b:f9:97:7d:4e:79:
                    8a:94:6d:53:e5:b3:3f:72:86:63:fa:87:d3:d0:64:
                    1f:d7:05:ed:e7:68:d3:28:8b:9e:f9:ca:ac:e7:33:
                    0a:e1:91:34:b9:40:8e:9b:61:4c:68:05:c7:42:bd:
                    e7:96:96:b5:80:2a:25:06:e9:eb:17:9b:85:06:cf:
                    f6:0c:a4:c8:34:ed:b5:10:69:e4:a1:65:fb:dd:0b:
                    be:a9:d5:e7:5d:2e:a1:14:43:98:4e:32:14:cd:96:
                    02:9f:dc:e6:97:97:7d:fb:ec:e8:ae:63:1d:f4:85:
                    22:27:65:e2:27:95:ae:51:c1:cf:9d:57:75:0d:2d:
                    2a:a7:a1:53:45:34:28:30:67:5f:41:1e:6f:4e:7d:
                    97:c0:14:1f:c8:8e:85:21:0c:4f:a6:98:9b:10:19:
                    6e:0d:44:87:fb:0d:c2:47:22:d1:87:f9:ef:72:e9:
                    0a:3c:75:f4:c0:f4:7b:82:a2:4a:46:5f:83:62:71:
                    5a:11:e0:6f:96:14:0e:44:67:51:38:c9:02:93:37:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3F:A3:55:8D:10:71:28:64:F8:A9:D0:4F:9B:18:73:CF:D2:80:7E
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3130303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:51:64:81:0b:d9:eb:f5:6d:5c:33:de:b0:dc:c8:61:85:56:
         0e:a7:0f:f1:ae:95:a8:f1:b9:f9:d9:1e:8f:53:d5:aa:44:ad:
         a7:40:5c:6b:34:11:08:81:3c:89:e2:27:bf:54:fb:14:7c:89:
         5d:14:f1:0a:c3:cf:27:8c:a8:78:d4:13:32:84:14:6b:91:97:
         63:0f:dd:42:4a:f9:e5:94:02:f1:73:3b:10:19:d8:63:9d:f2:
         51:86:d7:cf:01:16:22:3d:c9:ce:64:f5:29:dd:13:c2:fc:1b:
         2c:03:4d:70:1e:98:72:7c:8e:44:13:7f:2f:45:78:45:ab:d4:
         77:29:89:68:26:5f:45:a9:6a:ef:61:b9:4d:7c:35:0b:e4:f5:
         31:35:b9:c9:74:21:74:e7:e8:7b:39:20:92:97:c4:07:37:77:
         61:a0:b6:93:05:2d:09:6d:5c:9d:70:b3:21:f2:45:b3:6b:62:
         5c:ef:3a:5f:d5:a3:fa:5e:f8:6d:96:67:bc:8c:8d:d9:4f:db:
         f3:4c:d1:53:62:cb:54:1c:e7:cc:5a:41:72:e9:03:be:aa:3c:
         6e:da:32:4f:be:1f:e0:88:9a:0a:81:23:a0:34:67:ff:77:77:
         fe:ab:8f:e9:a6:7d:f4:69:49:62:48:3a:d3:0a:32:17:b3:ef:
         54:12:81:97
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUIwnFvcZ1Nd5uxuNhwbroBDmdZ04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMwNkI2RkE2Q0IyQjgxMjJGQjU4REM1MjU0MzY3MTA5
M0IwNUZBQTAeFw0yNDAzMDUxNzQyNTZaFw0yNTAzMDQxNzQ3NTZaMDMxMTAvBgNV
BAMTKDhEM0ZBMzU1OEQxMDcxMjg2NEY4QTlEMDRGOUIxODczQ0ZEMjgwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDChXjeTgmAjUOvyCOUDMXM7Xi
EuSyruX+LzG4rCOTbaA/uIpc2KwxRt3o5U1IfKtdXokDJAv5l31OeYqUbVPlsz9y
hmP6h9PQZB/XBe3naNMoi575yqznMwrhkTS5QI6bYUxoBcdCveeWlrWAKiUG6esX
m4UGz/YMpMg07bUQaeShZfvdC76p1eddLqEUQ5hOMhTNlgKf3OaXl3377OiuYx30
hSInZeInla5Rwc+dV3UNLSqnoVNFNCgwZ19BHm9OfZfAFB/IjoUhDE+mmJsQGW4N
RIf7DcJHItGH+e9y6Qo8dfTA9HuCokpGX4NicVoR4G+WFA5EZ1E4yQKTNxWnAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUjT+jVY0QcShk+KnQT5sYc8/SgH4wHwYDVR0j
BBgwFoAULAa2+myyuBIvtY3FJUNnEJOwX6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTNCRDBDM0UzQTdCM0Q2NkU4NDEyQ0JDQjZCQjIxMjM2
MDI0NEZENDk1QkFGOUI1OTYxM0FEOEExRjVFMTYyLzAvMkMwNkI2RkE2Q0IyQjgx
MjJGQjU4REM1MjU0MzY3MTA5M0IwNUZBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzA2QjZGQTZDQjJCODEyMkZC
NThEQzUyNTQzNjcxMDkzQjA1RkFBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzkzQkQwQzNFM0E3QjNENjZFODQxMkNCQ0I2QkIyMTIzNjAyNDRGRDQ5
NUJBRjlCNTk2MTNBRDhBMUY1RTE2Mi8wLzMyMzgzMDMzM2E2NTMzMzYzMDNhMzEz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM0MzgzMjM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPjYAEwDQYJKoZIhvcNAQELBQADggEBAHJRZIEL2ev1bVwz3rDcyGGFVg6n
D/GulajxufnZHo9T1apEradAXGs0EQiBPIniJ79U+xR8iV0U8QrDzyeMqHjUEzKE
FGuRl2MP3UJK+eWUAvFzOxAZ2GOd8lGG188BFiI9yc5k9SndE8L8GywDTXAemHJ8
jkQTfy9FeEWr1HcpiWgmX0Wpau9huU18NQvk9TE1ucl0IXTn6Hs5IJKXxAc3d2Gg
tpMFLQltXJ1wsyHyRbNrYlzvOl/Vo/pe+G2WZ7yMjdlP2/NM0VNiy1Qc58xaQXLp
A76qPG7aMk++H+CImgqBI6A0Z/93d/6rj+mmffRpSWJIOtMKMhez71QSgZc=
-----END CERTIFICATE-----