Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa
File:                     323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          eVFWxXAfZ7VQOiCVY593cp+kEipGGO2SzXuDNyHodyc=
Subject key identifier:   87:22:89:62:17:FD:43:64:54:2E:73:B0:61:02:D2:A3:84:62:6F:4C
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       7DB733EE9CB631F77CB1E2396806419614554F0D
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa
Signing time:             Tue 05 Mar 2024 18:04:37 +0000
ROA not before:           Tue 05 Mar 2024 17:59:37 +0000
ROA not after:            Tue 04 Mar 2025 18:04:37 +0000
asID:                     263762
IP address blocks:        2803:5180:7000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b7:33:ee:9c:b6:31:f7:7c:b1:e2:39:68:06:41:96:14:55:4f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Mar  5 17:59:37 2024 GMT
            Not After : Mar  4 18:04:37 2025 GMT
        Subject: CN=8722896217FD4364542E73B06102D2A384626F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:08:30:2a:54:db:c6:cc:e0:54:5a:95:cd:
                    70:8d:cd:9b:45:d7:09:fe:74:e7:ba:46:89:b5:8d:
                    9b:68:4b:21:45:84:70:89:4b:df:dd:ef:0b:fa:4f:
                    e9:08:d2:7b:0b:ba:6a:0c:60:9c:89:ee:1b:63:2e:
                    9f:e4:0f:f1:55:8c:b7:e9:e1:9e:58:87:12:85:99:
                    d6:bf:f2:2f:10:03:be:52:7d:a2:c0:82:d8:1d:00:
                    2c:7e:48:a5:27:21:48:58:4f:72:db:9b:2f:2a:c8:
                    ee:2a:72:14:e9:82:5e:8e:ba:78:a3:72:60:b7:28:
                    ee:47:09:98:12:31:53:b9:27:93:11:5f:87:50:72:
                    c8:56:b9:89:ee:af:46:57:10:a3:97:ac:47:8a:81:
                    25:fd:c3:c0:86:c0:0c:ca:2e:e7:cc:90:e5:e2:e6:
                    d1:b1:95:18:71:4e:23:de:d6:04:19:12:98:ba:6e:
                    eb:de:f3:9f:c5:44:29:b1:47:fe:33:3c:f2:fd:3e:
                    e3:0f:84:84:0f:93:dd:6e:98:09:02:b0:1a:25:a1:
                    ad:38:8d:e5:6d:1e:f7:06:c8:bf:61:c5:1c:85:6d:
                    a2:f0:8a:1a:a9:24:5b:f1:66:1d:7e:a6:99:fe:d7:
                    b9:7b:15:6d:58:0a:3e:98:eb:24:56:14:7d:a0:cc:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:22:89:62:17:FD:43:64:54:2E:73:B0:61:02:D2:A3:84:62:6F:4C
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a373030303a3a2f33362d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:1b:44:db:f1:8f:73:70:ac:d6:56:ea:e0:86:49:fb:90:
         06:2c:0a:87:dd:20:60:52:23:31:0e:70:64:cc:55:ff:21:4e:
         5b:65:5e:9d:5d:82:6e:ea:0c:32:7b:16:08:10:ee:04:74:88:
         bd:b1:a2:c8:40:4f:16:87:a6:2e:bf:39:f3:92:e9:61:fd:72:
         5b:2a:21:5a:9c:ea:bf:a6:d7:32:2e:a4:78:e4:6f:e3:03:44:
         05:4e:7d:7e:c5:9f:28:71:11:aa:a9:30:ec:9d:ed:54:c1:3c:
         33:b9:54:af:d2:bf:64:4e:85:bd:fe:5d:bf:c6:6e:5f:54:b8:
         27:89:14:12:3c:63:15:e6:ec:a5:7f:0c:36:01:ab:ab:12:74:
         f8:5b:38:2d:a2:2d:ef:f4:81:8a:fa:34:55:88:a5:10:31:ef:
         ac:fb:19:8b:db:90:dd:bc:41:41:2b:b6:1d:b8:61:fe:1d:b4:
         3f:49:71:a5:bf:7a:95:13:14:dc:cc:e4:71:38:ac:b1:cb:55:
         75:38:87:df:61:2f:bb:f5:45:6c:08:c7:0c:c7:28:2c:3c:d2:
         61:7b:00:58:7b:68:a8:91:e4:a8:18:51:e9:3d:2c:52:9f:ff:
         3d:d2:b5:4a:b9:6c:3a:3d:3d:c2:92:07:0e:b4:a0:9c:5b:f9:
         7d:b6:67:ae
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUfbcz7py2Mfd8seI5aAZBlhRVTw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG
QzJDREI0ODAeFw0yNDAzMDUxNzU5MzdaFw0yNTAzMDQxODA0MzdaMDMxMTAvBgNV
BAMTKDg3MjI4OTYyMTdGRDQzNjQ1NDJFNzNCMDYxMDJEMkEzODQ2MjZGNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNAggwKlTbxszgVFqVzXCNzZtF
1wn+dOe6Rom1jZtoSyFFhHCJS9/d7wv6T+kI0nsLumoMYJyJ7htjLp/kD/FVjLfp
4Z5YhxKFmda/8i8QA75SfaLAgtgdACx+SKUnIUhYT3Lbmy8qyO4qchTpgl6Ounij
cmC3KO5HCZgSMVO5J5MRX4dQcshWuYnur0ZXEKOXrEeKgSX9w8CGwAzKLufMkOXi
5tGxlRhxTiPe1gQZEpi6buve85/FRCmxR/4zPPL9PuMPhIQPk91umAkCsBoloa04
jeVtHvcGyL9hxRyFbaLwihqpJFvxZh1+ppn+17l7FW1YCj6Y6yRWFH2gzA5JAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUhyKJYhf9Q2RULnOwYQLSo4Rib0wwHwYDVR0j
BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND
NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw
MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3
MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1
QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhMzcz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNzM2MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA1GAcDANBgkqhkiG9w0BAQsFAAOCAQEAKpwbRNvxj3NwrNZW6uCGSfuQ
BiwKh90gYFIjMQ5wZMxV/yFOW2VenV2CbuoMMnsWCBDuBHSIvbGiyEBPFoemLr85
85LpYf1yWyohWpzqv6bXMi6keORv4wNEBU59fsWfKHERqqkw7J3tVME8M7lUr9K/
ZE6Fvf5dv8ZuX1S4J4kUEjxjFebspX8MNgGrqxJ0+Fs4LaIt7/SBivo0VYilEDHv
rPsZi9uQ3bxBQSu2Hbhh/h20P0lxpb96lRMU3MzkcTissctVdTiH32Evu/VFbAjH
DMcoLDzSYXsAWHtoqJHkqBhR6T0sUp//PdK1SrlsOj09wpIHDrSgnFv5fbZnrg==
-----END CERTIFICATE-----