Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/323830333a383965303a3a2f33322d3332203d3e20323730303038.roa
File:                     323830333a383965303a3a2f33322d3332203d3e20323730303038.roa (raw, json)
Hash identifier:          4ZovRqwD28+4NDtCEVMzlvficyOcztbirAGojtVuWg8=
Subject key identifier:   5A:FF:FE:3C:0A:92:6C:0E:0B:65:30:2F:4D:95:24:4C:7A:80:87:E4
Certificate issuer:       /CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
Certificate serial:       574B7A4642EF7FF3E68D6BD1262F368976F88F97
Authority key identifier: 0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/323830333a383965303a3a2f33322d3332203d3e20323730303038.roa
Signing time:             Thu 07 Mar 2024 15:20:00 +0000
ROA not before:           Thu 07 Mar 2024 15:15:00 +0000
ROA not after:            Thu 06 Mar 2025 15:20:00 +0000
asID:                     270008
IP address blocks:        2803:89e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4b:7a:46:42:ef:7f:f3:e6:8d:6b:d1:26:2f:36:89:76:f8:8f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
        Validity
            Not Before: Mar  7 15:15:00 2024 GMT
            Not After : Mar  6 15:20:00 2025 GMT
        Subject: CN=5AFFFE3C0A926C0E0B65302F4D95244C7A8087E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:49:8b:56:ba:ac:7d:d9:36:da:37:9d:62:
                    c5:39:99:77:cd:09:3c:91:4c:c0:aa:7f:4a:aa:af:
                    00:35:47:1f:45:8f:c1:50:20:ca:54:f5:ec:32:64:
                    98:4a:00:f8:9f:8c:1a:a9:c5:41:90:a5:da:36:d7:
                    4a:34:e3:be:39:49:03:ee:dd:8f:ca:a6:4b:c0:33:
                    a8:0d:82:94:91:53:a8:5b:28:e7:77:17:94:67:37:
                    73:b8:80:eb:82:80:c9:1a:e9:90:52:2d:2e:f8:d1:
                    79:31:75:e2:00:37:d6:3a:18:28:52:94:25:b2:29:
                    cd:1a:42:97:64:b1:38:f8:58:c8:e5:3e:2f:5f:d5:
                    d8:82:b6:e3:ea:02:69:a5:bd:d4:72:a5:70:df:8d:
                    dd:82:bd:d3:d2:df:36:c6:5a:2e:ef:8b:1c:68:cb:
                    47:17:f5:aa:04:d2:0e:be:e0:da:db:f1:32:0f:20:
                    22:cd:5d:ba:26:82:ba:f8:7f:76:da:60:b7:17:39:
                    43:c9:ca:bb:b4:77:c9:04:05:0b:e5:de:43:fe:8d:
                    6a:5d:db:a2:0a:88:a6:f6:59:b2:1b:22:2a:b4:a2:
                    bc:14:dc:7c:c1:7a:e8:75:47:b0:fb:fe:3e:c9:df:
                    24:2f:0c:5e:0c:e1:ba:7c:43:b9:20:58:a4:32:b4:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FF:FE:3C:0A:92:6C:0E:0B:65:30:2F:4D:95:24:4C:7A:80:87:E4
            X509v3 Authority Key Identifier:
                keyid:0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/323830333a383965303a3a2f33322d3332203d3e20323730303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:89e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:33:ab:9f:bc:74:8c:5a:8c:f5:29:30:b5:98:57:71:ee:73:
         3d:74:41:a4:60:b1:fe:15:f9:2b:e4:e1:58:76:ea:ac:52:99:
         62:0f:aa:ca:86:e4:0d:19:f8:52:24:38:fe:1c:9a:d1:9d:f1:
         b5:ff:7f:f6:5a:ff:67:92:4c:19:45:85:3b:51:b8:3a:bd:e0:
         cf:7b:eb:ab:1d:b6:ed:88:17:60:cd:c6:e5:09:67:14:9f:34:
         09:21:c6:92:1d:fa:24:be:95:2d:d6:c8:8b:f3:c4:ca:a6:07:
         6b:4e:60:b2:9d:63:ec:ed:82:69:a5:da:bc:36:92:5b:cf:0b:
         d7:5d:cb:3e:b7:65:7e:a3:27:dc:eb:74:75:b6:69:1c:75:f5:
         91:c1:59:bc:f8:48:be:8c:44:36:fa:14:2a:9d:e0:40:c9:74:
         33:5c:43:66:6e:0b:12:bb:87:f8:1d:87:92:9c:c7:93:15:de:
         e9:e4:54:f9:1a:41:fe:0c:77:31:64:fd:b2:0c:43:54:7e:7d:
         60:3c:29:58:c1:97:22:bb:7d:ed:e4:28:83:2e:16:71:f0:29:
         ab:e0:09:61:65:a8:77:e3:b9:1b:2d:90:a5:5b:25:1e:0d:8f:
         d3:57:fb:23:32:22:1e:f9:1e:1c:cc:7c:92:84:88:0f:9a:2b:
         f7:b1:85:9d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUV0t6RkLvf/PmjWvRJi82iXb4j5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMDY2RDhCRTAxNjUwMTJBNjdGRDRGQUVCQkM0QjlG
MENFOUE3ODAeFw0yNDAzMDcxNTE1MDBaFw0yNTAzMDYxNTIwMDBaMDMxMTAvBgNV
BAMTKDVBRkZGRTNDMEE5MjZDMEUwQjY1MzAyRjREOTUyNDRDN0E4MDg3RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcBEmLVrqsfdk22jedYsU5mXfN
CTyRTMCqf0qqrwA1Rx9Fj8FQIMpU9ewyZJhKAPifjBqpxUGQpdo210o04745SQPu
3Y/KpkvAM6gNgpSRU6hbKOd3F5RnN3O4gOuCgMka6ZBSLS740XkxdeIAN9Y6GChS
lCWyKc0aQpdksTj4WMjlPi9f1diCtuPqAmmlvdRypXDfjd2CvdPS3zbGWi7vixxo
y0cX9aoE0g6+4Nrb8TIPICLNXbomgrr4f3baYLcXOUPJyru0d8kEBQvl3kP+jWpd
26IKiKb2WbIbIiq0orwU3HzBeuh1R7D7/j7J3yQvDF4M4bp8Q7kgWKQytDrtAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUWv/+PAqSbA4LZTAvTZUkTHqAh+QwHwYDVR0j
BBgwFoAUDQBm2L4BZQEqZ/1PrrvEufDOmngwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOUQ5RkE3RjkwNDU0RUI1RjRDMUQ4ODBGMjkxNDU1MTNB
QjFBNTUxMTQzNDZFQUEyMDNFMzlDMUYwMTQyODExLzAvMEQwMDY2RDhCRTAxNjUw
MTJBNjdGRDRGQUVCQkM0QjlGMENFOUE3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAwNjZEOEJFMDE2NTAxMkE2
N0ZENEZBRUJCQzRCOUYwQ0U5QTc4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTlEOUZBN0Y5MDQ1NEVCNUY0QzFEODgwRjI5MTQ1NTEzQUIxQTU1MTE0
MzQ2RUFBMjAzRTM5QzFGMDE0MjgxMS8wLzMyMzgzMDMzM2EzODM5NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzAzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDieAw
DQYJKoZIhvcNAQELBQADggEBAK8zq5+8dIxajPUpMLWYV3Hucz10QaRgsf4V+Svk
4Vh26qxSmWIPqsqG5A0Z+FIkOP4cmtGd8bX/f/Za/2eSTBlFhTtRuDq94M9766sd
tu2IF2DNxuUJZxSfNAkhxpId+iS+lS3WyIvzxMqmB2tOYLKdY+ztgmml2rw2klvP
C9ddyz63ZX6jJ9zrdHW2aRx19ZHBWbz4SL6MRDb6FCqd4EDJdDNcQ2ZuCxK7h/gd
h5Kcx5MV3unkVPkaQf4MdzFk/bIMQ1R+fWA8KVjBlyK7fe3kKIMuFnHwKavgCWFl
qHfjuRstkKVbJR4Nj9NX+yMyIh75HhzMfJKEiA+aK/exhZ0=
-----END CERTIFICATE-----