Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/323830333a616661303a3a2f33322d3332203d3e20323637373931.roa
File:                     323830333a616661303a3a2f33322d3332203d3e20323637373931.roa (raw, json)
Hash identifier:          7oXvWze3WugHEkfpQqycCtCtn2eh0Rz/RvluLO6bAyQ=
Subject key identifier:   6F:C8:BF:13:6D:F7:56:5E:E0:78:71:1E:1C:24:05:BD:FE:23:D2:99
Certificate issuer:       /CN=353F7C9A66591AC01FC52C773EE1A04559086A6B
Certificate serial:       2F84E7F657C6EE91BF9A221375896130839638F9
Authority key identifier: 35:3F:7C:9A:66:59:1A:C0:1F:C5:2C:77:3E:E1:A0:45:59:08:6A:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/323830333a616661303a3a2f33322d3332203d3e20323637373931.roa
Signing time:             Tue 05 Mar 2024 18:12:43 +0000
ROA not before:           Tue 05 Mar 2024 18:07:43 +0000
ROA not after:            Tue 04 Mar 2025 18:12:43 +0000
asID:                     267791
IP address blocks:        2803:afa0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:84:e7:f6:57:c6:ee:91:bf:9a:22:13:75:89:61:30:83:96:38:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353F7C9A66591AC01FC52C773EE1A04559086A6B
        Validity
            Not Before: Mar  5 18:07:43 2024 GMT
            Not After : Mar  4 18:12:43 2025 GMT
        Subject: CN=6FC8BF136DF7565EE078711E1C2405BDFE23D299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:52:a3:38:fd:55:a6:0c:6c:9c:69:a3:50:55:
                    07:90:7b:bf:77:94:65:27:98:62:e8:d0:8a:11:5f:
                    b7:c0:84:a3:2f:1a:2c:73:77:22:af:7d:58:ec:56:
                    9c:07:54:3a:b3:f2:b9:7e:0c:28:13:fe:4a:e1:d8:
                    f9:de:26:55:a2:f6:5d:7b:4b:89:53:1b:ba:60:40:
                    2a:23:0f:3d:bb:d8:b8:ee:37:9a:ba:04:e0:6d:a6:
                    4e:98:87:e1:7f:77:14:07:45:3f:58:25:c0:de:1e:
                    0b:0c:dc:40:db:fe:20:0e:fc:33:5c:74:2a:46:51:
                    bc:0b:42:78:f7:df:a9:72:18:bd:dd:8d:d4:e2:f9:
                    88:1a:7f:cc:66:17:93:f4:2c:c5:55:36:63:5c:18:
                    24:e6:f3:d8:b4:e3:96:ba:a1:fe:9d:35:f6:8f:fe:
                    44:f4:1b:64:ce:6d:6e:f6:61:20:85:1d:70:85:c4:
                    bc:7a:6b:bf:f6:36:1f:63:7a:66:da:55:5e:65:d2:
                    fc:16:db:e7:2b:7b:d4:34:66:ab:ca:2c:14:18:ce:
                    33:9a:7b:62:5c:5f:f8:8d:75:ae:ce:d2:fd:27:aa:
                    3f:41:e5:f8:ed:98:87:45:c9:d9:97:5c:0b:2d:71:
                    15:20:7a:83:25:24:2d:7d:97:28:8f:cf:2c:cd:7b:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C8:BF:13:6D:F7:56:5E:E0:78:71:1E:1C:24:05:BD:FE:23:D2:99
            X509v3 Authority Key Identifier:
                keyid:35:3F:7C:9A:66:59:1A:C0:1F:C5:2C:77:3E:E1:A0:45:59:08:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/323830333a616661303a3a2f33322d3332203d3e20323637373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:afa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:ce:e7:25:f4:73:7b:eb:62:6a:4c:84:d5:ee:96:5a:06:80:
         b3:ff:78:75:bb:2e:48:14:91:ee:83:a7:d4:55:b8:a2:7d:80:
         07:1e:75:c5:ce:b1:69:6d:94:6c:f5:83:75:44:6c:36:5c:36:
         57:f0:10:db:e9:3e:ff:83:38:fc:9e:59:25:6c:f7:5a:ab:f3:
         93:4d:cf:49:ac:ca:4f:62:b8:39:c2:05:8f:62:dc:b6:89:01:
         dc:c2:59:a0:3b:b9:56:41:11:47:d8:ba:74:4b:d7:3c:09:26:
         ae:86:3c:b3:91:b4:72:48:de:74:0a:e0:42:20:c2:19:24:70:
         28:2b:be:c2:70:27:5f:ee:88:bd:35:e8:5b:09:98:91:e7:ed:
         95:2c:c2:12:fa:7a:17:22:6a:ab:d5:94:2c:18:ed:7d:91:a3:
         54:14:44:6b:ee:bf:51:a9:72:52:bb:8e:14:7d:39:d0:d3:1e:
         76:7e:d9:97:23:02:01:5b:d4:71:92:4c:91:06:19:8e:d0:e3:
         eb:23:18:d9:e2:2d:66:34:8a:97:46:7d:19:43:cf:57:35:ca:
         ba:f9:55:68:88:65:f8:63:49:0c:91:50:13:a7:07:98:19:7e:
         79:2b:bb:a7:cd:ed:bf:78:e5:d3:e6:80:a7:52:41:0d:9c:35:
         e3:06:15:08
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUL4Tn9lfG7pG/miITdYlhMIOWOPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzRjdDOUE2NjU5MUFDMDFGQzUyQzc3M0VFMUEwNDU1
OTA4NkE2QjAeFw0yNDAzMDUxODA3NDNaFw0yNTAzMDQxODEyNDNaMDMxMTAvBgNV
BAMTKDZGQzhCRjEzNkRGNzU2NUVFMDc4NzExRTFDMjQwNUJERkUyM0QyOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeUqM4/VWmDGycaaNQVQeQe793
lGUnmGLo0IoRX7fAhKMvGixzdyKvfVjsVpwHVDqz8rl+DCgT/krh2PneJlWi9l17
S4lTG7pgQCojDz272LjuN5q6BOBtpk6Yh+F/dxQHRT9YJcDeHgsM3EDb/iAO/DNc
dCpGUbwLQnj336lyGL3djdTi+Ygaf8xmF5P0LMVVNmNcGCTm89i045a6of6dNfaP
/kT0G2TObW72YSCFHXCFxLx6a7/2Nh9jembaVV5l0vwW2+cre9Q0ZqvKLBQYzjOa
e2JcX/iNda7O0v0nqj9B5fjtmIdFydmXXAstcRUgeoMlJC19lyiPzyzNewDbAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUb8i/E233Vl7geHEeHCQFvf4j0pkwHwYDVR0j
BBgwFoAUNT98mmZZGsAfxSx3PuGgRVkIamswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQkMyOURBRTJCQjk5OUNGNEZGMzY3RDA1NzA1NDUxRkI0
MkVFOEUyREE5QkNDMkJDNUNFM0NDMjJFMzJFNUQwLzAvMzUzRjdDOUE2NjU5MUFD
MDFGQzUyQzc3M0VFMUEwNDU1OTA4NkE2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTNGN0M5QTY2NTkxQUMwMUZD
NTJDNzczRUUxQTA0NTU5MDg2QTZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUJDMjlEQUUyQkI5OTlDRjRGRjM2N0QwNTcwNTQ1MUZCNDJFRThFMkRB
OUJDQzJCQzVDRTNDQzIyRTMyRTVEMC8wLzMyMzgzMDMzM2E2MTY2NjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM3MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDr6Aw
DQYJKoZIhvcNAQELBQADggEBAHzO5yX0c3vrYmpMhNXulloGgLP/eHW7LkgUke6D
p9RVuKJ9gAcedcXOsWltlGz1g3VEbDZcNlfwENvpPv+DOPyeWSVs91qr85NNz0ms
yk9iuDnCBY9i3LaJAdzCWaA7uVZBEUfYunRL1zwJJq6GPLORtHJI3nQK4EIgwhkk
cCgrvsJwJ1/uiL016FsJmJHn7ZUswhL6ehciaqvVlCwY7X2Ro1QURGvuv1GpclK7
jhR9OdDTHnZ+2ZcjAgFb1HGSTJEGGY7Q4+sjGNniLWY0ipdGfRlDz1c1yrr5VWiI
ZfhjSQyRUBOnB5gZfnkru6fN7b945dPmgKdSQQ2cNeMGFQg=
-----END CERTIFICATE-----