Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a3a2f33322d3336203d3e20323633373632.roa
File:                     323830333a353138303a3a2f33322d3336203d3e20323633373632.roa (raw, json)
Hash identifier:          udZAOlMIlnXK89GrgzpImNo2mXwNQ32WvI11GTJr2H4=
Subject key identifier:   09:48:4C:C6:7F:97:44:37:A0:6C:33:5A:2E:CA:80:B9:42:CF:85:78
Certificate issuer:       /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial:       1796F42AA53698C7A8E6D08CCE226093EE8CDFB9
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a3a2f33322d3336203d3e20323633373632.roa
Signing time:             Tue 05 Mar 2024 18:04:39 +0000
ROA not before:           Tue 05 Mar 2024 17:59:39 +0000
ROA not after:            Tue 04 Mar 2025 18:04:39 +0000
asID:                     263762
IP address blocks:        2803:5180::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:96:f4:2a:a5:36:98:c7:a8:e6:d0:8c:ce:22:60:93:ee:8c:df:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
        Validity
            Not Before: Mar  5 17:59:39 2024 GMT
            Not After : Mar  4 18:04:39 2025 GMT
        Subject: CN=09484CC67F974437A06C335A2ECA80B942CF8578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:7d:ee:7e:2e:08:a8:bd:19:63:b6:8f:8d:
                    88:7f:17:a7:97:04:ea:db:62:32:be:bd:81:da:3b:
                    9f:94:f4:a9:60:30:5f:71:b5:00:57:3e:0c:07:73:
                    cc:2f:8d:4e:eb:42:09:69:81:f2:4f:0d:d2:a2:8f:
                    2f:4c:15:a7:43:51:26:65:6b:77:19:a9:82:6d:fe:
                    e0:c8:7f:58:d9:96:22:a4:93:80:92:c9:35:ab:34:
                    21:b5:ae:6f:df:23:30:bc:3c:29:c0:a8:5f:af:9a:
                    9b:cd:53:b7:92:21:ce:4e:65:2a:f7:da:2f:07:74:
                    7d:f6:8e:c1:a2:b6:d3:9f:2b:c5:a2:35:cf:28:5d:
                    f7:fe:58:89:4c:d5:d4:a0:34:01:31:db:5d:c2:11:
                    35:60:ea:63:56:78:8a:fb:b9:cb:d0:70:f5:dd:66:
                    c2:1a:8d:6c:43:38:a1:f6:24:12:6b:67:33:7c:ae:
                    5e:34:72:99:9b:bd:3b:72:d4:32:44:ea:0d:fe:1e:
                    34:b9:7d:27:e1:81:4a:49:71:ae:07:21:61:45:f5:
                    5b:1d:e5:32:b3:72:48:79:0d:24:20:e6:4e:02:0c:
                    6c:d1:0c:3b:06:cc:92:25:06:b9:b8:aa:4c:64:03:
                    d3:27:04:8a:4d:cf:e7:7e:28:4f:31:df:3c:f5:a4:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:4C:C6:7F:97:44:37:A0:6C:33:5A:2E:CA:80:B9:42:CF:85:78
            X509v3 Authority Key Identifier:
                keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/323830333a353138303a3a2f33322d3336203d3e20323633373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:03:ce:e4:ce:4c:12:56:0c:1e:ae:4c:a2:da:f3:d7:4c:
         55:3e:93:3b:97:c0:53:ae:54:f8:d3:ee:eb:0c:48:5f:d0:72:
         47:76:29:c2:d8:e1:45:ef:62:57:2d:cd:5b:85:08:07:34:fc:
         b5:5c:c0:55:39:4d:ef:24:61:74:35:dd:29:0f:7f:3e:68:17:
         1f:f8:5e:ec:2d:eb:9f:ad:80:54:ed:8c:d5:fc:6e:f1:55:b2:
         65:0b:a3:ff:0a:97:f1:f5:b4:21:49:50:96:1d:2a:da:88:6f:
         ba:10:91:ea:bf:a3:6d:6b:66:fd:cf:ef:43:05:fc:17:04:63:
         86:8e:f8:de:41:50:7d:92:3e:09:18:44:c1:ee:00:d3:9c:af:
         7b:35:05:e7:7a:ba:ee:6e:f4:c1:5d:19:9d:36:74:3c:f1:1d:
         b7:24:6e:73:36:96:a9:18:b8:94:df:e6:82:34:c1:7f:0a:a2:
         76:c0:da:10:54:9e:e5:2b:50:4f:3f:e5:74:c4:21:b7:72:47:
         6d:37:1c:46:52:98:4d:4e:e8:02:2b:ab:d9:62:d8:0a:cd:7c:
         66:ba:f1:5c:ce:cd:2e:94:4e:dc:45:b9:86:f6:03:91:81:a9:
         ff:09:69:d6:3f:f7:37:9c:9b:0d:d2:02:0b:d0:d1:6f:20:32:
         8f:e1:87:59
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUF5b0KqU2mMeo5tCMziJgk+6M37kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU2MDI0NTU1MkFCQTQwMTk5NzJGOUY1RDE4NDIzNTRG
QzJDREI0ODAeFw0yNDAzMDUxNzU5MzlaFw0yNTAzMDQxODA0MzlaMDMxMTAvBgNV
BAMTKDA5NDg0Q0M2N0Y5NzQ0MzdBMDZDMzM1QTJFQ0E4MEI5NDJDRjg1NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNM33ufi4IqL0ZY7aPjYh/F6eX
BOrbYjK+vYHaO5+U9KlgMF9xtQBXPgwHc8wvjU7rQglpgfJPDdKijy9MFadDUSZl
a3cZqYJt/uDIf1jZliKkk4CSyTWrNCG1rm/fIzC8PCnAqF+vmpvNU7eSIc5OZSr3
2i8HdH32jsGittOfK8WiNc8oXff+WIlM1dSgNAEx213CETVg6mNWeIr7ucvQcPXd
ZsIajWxDOKH2JBJrZzN8rl40cpmbvTty1DJE6g3+HjS5fSfhgUpJca4HIWFF9Vsd
5TKzckh5DSQg5k4CDGzRDDsGzJIlBrm4qkxkA9MnBIpNz+d+KE8x3zz1pGPpAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUCUhMxn+XRDegbDNaLsqAuULPhXgwHwYDVR0j
BBgwFoAU9WAkVVKrpAGZcvn10YQjVPws20gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjg4REVFRUI2RUU0NzBFMkY0MDY0MTIzMUIyQzM4OUND
NjVDMEFGQTVCQTZDQjVBNkU1MjI5RDNBNDYzNDc5LzAvRjU2MDI0NTU1MkFCQTQw
MTk5NzJGOUY1RDE4NDIzNTRGQzJDREI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTYwMjQ1NTUyQUJBNDAxOTk3
MkY5RjVEMTg0MjM1NEZDMkNEQjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY4OERFRUVCNkVFNDcwRTJGNDA2NDEyMzFCMkMzODlDQzY1QzBBRkE1
QkE2Q0I1QTZFNTIyOUQzQTQ2MzQ3OS8wLzMyMzgzMDMzM2EzNTMxMzgzMDNhM2Ey
ZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzMzM3MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDUYAw
DQYJKoZIhvcNAQELBQADggEBACbEA87kzkwSVgwerkyi2vPXTFU+kzuXwFOuVPjT
7usMSF/Qckd2KcLY4UXvYlctzVuFCAc0/LVcwFU5Te8kYXQ13SkPfz5oFx/4Xuwt
65+tgFTtjNX8bvFVsmULo/8Kl/H1tCFJUJYdKtqIb7oQkeq/o21rZv3P70MF/BcE
Y4aO+N5BUH2SPgkYRMHuANOcr3s1Bed6uu5u9MFdGZ02dDzxHbckbnM2lqkYuJTf
5oI0wX8KonbA2hBUnuUrUE8/5XTEIbdyR203HEZSmE1O6AIrq9li2ArNfGa68VzO
zS6UTtxFuYb2A5GBqf8JadY/9zecmw3SAgvQ0W8gMo/hh1k=
-----END CERTIFICATE-----