Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa
File:                     323830333a663532303a3a2f33322d3332203d3e20323636363935.roa (raw, json)
Hash identifier:          GVvqQQ41bGXtiCzFkj6m8H7ose/URrowoppPVM23svc=
Subject key identifier:   7D:41:6D:FD:43:87:A8:B2:6A:70:1D:FF:22:5C:35:30:19:01:05:97
Certificate issuer:       /CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
Certificate serial:       517DF0FCF88465A7FDECD854CC1C8802A6285B15
Authority key identifier: 9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa
Signing time:             Tue 05 Mar 2024 18:13:33 +0000
ROA not before:           Tue 05 Mar 2024 18:08:33 +0000
ROA not after:            Tue 04 Mar 2025 18:13:33 +0000
asID:                     266695
IP address blocks:        2803:f520::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7d:f0:fc:f8:84:65:a7:fd:ec:d8:54:cc:1c:88:02:a6:28:5b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
        Validity
            Not Before: Mar  5 18:08:33 2024 GMT
            Not After : Mar  4 18:13:33 2025 GMT
        Subject: CN=7D416DFD4387A8B26A701DFF225C353019010597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:3f:3f:14:ba:bd:84:00:b5:e5:d1:04:ab:
                    b7:c5:e7:94:ae:b5:1b:c1:eb:51:96:50:03:a2:b2:
                    c7:4b:45:98:9a:53:f0:2d:6e:0f:9e:bc:85:28:b7:
                    de:5f:d5:bf:4b:4b:14:86:a6:8c:d2:fc:e9:c2:da:
                    32:ef:29:49:bd:35:b3:fe:0b:76:92:23:d7:4f:0e:
                    69:d6:6d:dd:0d:03:c8:cc:f1:c2:54:69:ea:f0:ca:
                    82:22:ca:49:f3:0a:00:3a:8a:e2:f8:31:e1:6c:a8:
                    20:66:b8:bf:de:72:9f:50:80:ea:14:2d:4b:a9:64:
                    27:a2:2a:0d:2d:f2:0a:95:30:96:c8:65:22:97:04:
                    22:75:aa:05:e5:81:4a:7b:f8:5d:81:c2:f5:73:8f:
                    38:6e:7f:33:4c:88:c9:6d:e3:ca:83:28:86:ab:0b:
                    5f:03:f2:67:50:e6:9e:c2:80:12:84:d3:77:f3:46:
                    aa:61:93:1b:63:17:67:4b:33:de:b3:00:cf:b2:4e:
                    89:37:45:08:53:d2:1f:c7:71:33:45:de:9c:b4:bf:
                    b6:71:5d:55:7d:56:b9:91:bb:fb:38:bc:bf:9a:79:
                    d9:11:9e:79:aa:cc:28:4c:96:fe:0e:e6:f8:73:71:
                    42:f6:17:70:2d:42:59:45:4e:17:55:f5:ca:e6:5d:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:6D:FD:43:87:A8:B2:6A:70:1D:FF:22:5C:35:30:19:01:05:97
            X509v3 Authority Key Identifier:
                keyid:9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/323830333a663532303a3a2f33322d3332203d3e20323636363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f520::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:cf:9a:75:f1:d5:f1:20:f5:ba:45:f3:a9:b4:dd:77:db:f4:
         37:89:8d:90:c2:b9:d5:77:80:f2:34:50:dc:11:cc:d8:0f:eb:
         45:4b:83:dc:de:5e:45:9d:07:fc:c8:9d:9e:ee:9a:a2:32:7c:
         b2:90:a9:22:eb:be:a6:65:51:aa:57:9d:72:ba:ea:72:36:8c:
         07:67:89:01:d2:5f:b5:dc:ec:19:3a:41:b4:4d:57:62:09:59:
         97:71:3f:c2:d5:e3:f7:e4:91:32:4e:62:01:a1:f7:86:16:81:
         b5:9b:c9:45:85:9c:a7:5e:95:e2:c7:72:07:f8:35:59:52:d5:
         7f:a9:8d:85:e1:4d:bd:de:68:67:df:a5:38:79:b4:5f:7c:1f:
         d1:3d:6a:79:09:21:ed:ae:a5:c5:78:6c:eb:99:3f:a6:33:af:
         f6:3a:e3:ce:35:01:8b:c4:0d:9b:be:4d:ba:58:d1:8b:fa:42:
         9f:f5:01:43:d7:3c:3b:e7:8e:12:7c:00:8a:21:c2:6b:12:44:
         1d:14:da:0b:c4:93:69:73:b8:6d:1a:37:2c:11:38:77:e1:5b:
         e2:c7:c9:49:cb:7d:21:59:87:a3:81:cf:8f:73:18:15:69:25:
         56:cc:8c:e1:0c:b0:35:ce:bb:c0:4f:9d:a5:b9:10:fe:b1:2b:
         b5:39:8b:dd
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUUX3w/PiEZaf97NhUzByIAqYoWxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU2RTU2NkNDRkIzOTZGNTBBQTBFRThCNjAxMUNEMTdF
N0FGMkU1NzAeFw0yNDAzMDUxODA4MzNaFw0yNTAzMDQxODEzMzNaMDMxMTAvBgNV
BAMTKDdENDE2REZENDM4N0E4QjI2QTcwMURGRjIyNUMzNTMwMTkwMTA1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPT8/FLq9hAC15dEEq7fF55Su
tRvB61GWUAOissdLRZiaU/Atbg+evIUot95f1b9LSxSGpozS/OnC2jLvKUm9NbP+
C3aSI9dPDmnWbd0NA8jM8cJUaerwyoIiyknzCgA6iuL4MeFsqCBmuL/ecp9QgOoU
LUupZCeiKg0t8gqVMJbIZSKXBCJ1qgXlgUp7+F2BwvVzjzhufzNMiMlt48qDKIar
C18D8mdQ5p7CgBKE03fzRqphkxtjF2dLM96zAM+yTok3RQhT0h/HcTNF3py0v7Zx
XVV9VrmRu/s4vL+aedkRnnmqzChMlv4O5vhzcUL2F3AtQllFThdV9crmXT1TAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUfUFt/UOHqLJqcB3/Ilw1MBkBBZcwHwYDVR0j
BBgwFoAUnm5WbM+zlvUKoO6LYBHNF+evLlcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQjQ5ODI4MzU1Q0FFNzhCOEE3MTYyRUMzMkYzNzFFNjVD
RDg0MEE4MjIzQzMwNTRBMzNCNUM3REFFODE3RTIzLzAvOUU2RTU2NkNDRkIzOTZG
NTBBQTBFRThCNjAxMUNEMTdFN0FGMkU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTZFNTY2Q0NGQjM5NkY1MEFB
MEVFOEI2MDExQ0QxN0U3QUYyRTU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0I0OTgyODM1NUNBRTc4QjhBNzE2MkVDMzJGMzcxRTY1Q0Q4NDBBODIy
M0MzMDU0QTMzQjVDN0RBRTgxN0UyMy8wLzMyMzgzMDMzM2E2NjM1MzIzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM2MzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD9SAw
DQYJKoZIhvcNAQELBQADggEBAA/PmnXx1fEg9bpF86m03Xfb9DeJjZDCudV3gPI0
UNwRzNgP60VLg9zeXkWdB/zInZ7umqIyfLKQqSLrvqZlUapXnXK66nI2jAdniQHS
X7Xc7Bk6QbRNV2IJWZdxP8LV4/fkkTJOYgGh94YWgbWbyUWFnKdeleLHcgf4NVlS
1X+pjYXhTb3eaGffpTh5tF98H9E9ankJIe2upcV4bOuZP6Yzr/Y64841AYvEDZu+
TbpY0Yv6Qp/1AUPXPDvnjhJ8AIohwmsSRB0U2gvEk2lzuG0aNywROHfhW+LHyUnL
fSFZh6OBz49zGBVpJVbMjOEMsDXOu8BPnaW5EP6xK7U5i90=
-----END CERTIFICATE-----