Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/323830333a376263303a3a2f33322d3438203d3e20323635373631.roa
File:                     323830333a376263303a3a2f33322d3438203d3e20323635373631.roa (raw, json)
Hash identifier:          kFukcd+auP79bvPMfJm6baQ1v2blOqVwHJxUEXsbYWQ=
Subject key identifier:   E5:25:00:8B:DD:82:C2:07:1F:0B:1C:5B:AF:B8:62:05:18:A6:21:A0
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       0DF64CB1A101DE7CA0CCE9ACB406214F8D92E5C9
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/323830333a376263303a3a2f33322d3438203d3e20323635373631.roa
Signing time:             Tue 05 Mar 2024 18:13:36 +0000
ROA not before:           Tue 05 Mar 2024 18:08:36 +0000
ROA not after:            Tue 04 Mar 2025 18:13:36 +0000
asID:                     265761
IP address blocks:        2803:7bc0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f6:4c:b1:a1:01:de:7c:a0:cc:e9:ac:b4:06:21:4f:8d:92:e5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Mar  5 18:08:36 2024 GMT
            Not After : Mar  4 18:13:36 2025 GMT
        Subject: CN=E525008BDD82C2071F0B1C5BAFB8620518A621A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:0e:ee:f5:92:64:14:7b:06:e0:0d:0a:bd:
                    be:3d:91:ca:b7:2b:22:7e:f6:0e:81:79:76:44:04:
                    13:d6:1b:45:54:56:a1:6e:08:00:bb:bf:dd:30:f9:
                    55:89:07:9f:ab:8b:9b:5e:fa:8a:2b:e3:02:63:68:
                    1c:1b:f1:6f:21:79:8a:f3:87:62:2b:0f:13:ae:63:
                    33:c3:50:6d:8b:6c:2c:16:54:9d:9b:f8:2b:ba:5a:
                    b3:73:1f:8d:e4:49:73:aa:36:67:9e:78:cb:f6:75:
                    f5:66:33:7a:bf:d7:02:f2:7f:60:b7:78:1a:65:85:
                    45:69:ce:21:66:6b:be:17:17:8a:93:2b:a3:2a:fa:
                    ce:a4:bf:fe:28:80:94:5c:49:1a:48:5d:e3:fd:46:
                    9a:32:68:cc:c6:e0:69:0c:48:e0:d8:84:de:c4:cb:
                    89:cb:5f:a4:b0:2c:18:fc:af:79:b6:8e:bd:54:b2:
                    d6:9c:85:71:c9:8a:02:25:7c:d9:95:3a:1c:fa:27:
                    88:53:45:5f:17:20:67:c9:74:27:80:00:59:67:07:
                    1a:32:c1:e5:3b:e2:11:b8:d3:68:7c:e0:0d:78:42:
                    6e:fb:53:2a:fa:42:b5:fa:3e:e8:f6:4f:6a:97:6e:
                    c3:77:0a:ee:07:67:aa:49:f1:89:2b:b0:72:25:12:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:25:00:8B:DD:82:C2:07:1F:0B:1C:5B:AF:B8:62:05:18:A6:21:A0
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/323830333a376263303a3a2f33322d3438203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:f2:8d:e5:eb:72:bb:e4:02:e1:53:cc:6d:d4:c2:94:43:bd:
         7f:77:4a:0b:be:5d:8e:47:4a:01:42:e9:44:f9:70:36:18:82:
         39:f7:d7:5f:65:72:07:75:2a:78:da:ad:48:54:31:66:46:e8:
         89:21:5b:c3:cc:99:68:07:bf:97:b4:5b:22:ee:66:74:01:cc:
         26:68:ba:d1:50:a9:c1:33:ee:8c:ac:2b:77:40:0e:91:f2:74:
         a6:8a:03:40:89:24:a6:98:0a:d9:fd:f5:01:be:23:4f:55:b7:
         01:7c:9a:4a:90:e2:f6:f8:6f:a0:1b:b3:0d:f1:b4:08:7a:a7:
         2c:7d:72:dd:29:7f:08:69:2f:40:3a:38:5c:72:a1:c1:dd:91:
         96:f8:05:98:1c:f0:ba:21:3e:c3:93:ed:be:f8:72:24:b6:dc:
         ab:af:a3:e1:8d:d0:5e:07:fa:69:ef:a2:20:4e:4b:8d:d1:12:
         46:dd:ba:b0:78:fc:c8:2d:3b:8b:da:90:55:a1:9d:0d:32:9b:
         6a:e3:ea:a6:be:f6:ef:cb:f2:df:06:51:d0:f6:19:6e:2e:38:
         01:8f:e0:da:5b:3a:3c:4e:fb:76:ef:f0:8b:79:2e:c4:2b:97:
         3b:b2:c4:68:5b:e7:aa:d8:16:8e:57:ab:87:c5:43:78:f3:96:
         f9:f5:9e:0b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDfZMsaEB3nygzOmstAYhT42S5ckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhBQkMxREQ2ODY0QzNDQzlGRTE4MTkyNzU2MEM3RjEw
QjgyQjQ0RDAeFw0yNDAzMDUxODA4MzZaFw0yNTAzMDQxODEzMzZaMDMxMTAvBgNV
BAMTKEU1MjUwMDhCREQ4MkMyMDcxRjBCMUM1QkFGQjg2MjA1MThBNjIxQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3A7u9ZJkFHsG4A0Kvb49kcq3
KyJ+9g6BeXZEBBPWG0VUVqFuCAC7v90w+VWJB5+ri5te+oor4wJjaBwb8W8heYrz
h2IrDxOuYzPDUG2LbCwWVJ2b+Cu6WrNzH43kSXOqNmeeeMv2dfVmM3q/1wLyf2C3
eBplhUVpziFma74XF4qTK6Mq+s6kv/4ogJRcSRpIXeP9RpoyaMzG4GkMSODYhN7E
y4nLX6SwLBj8r3m2jr1UstachXHJigIlfNmVOhz6J4hTRV8XIGfJdCeAAFlnBxoy
weU74hG402h84A14Qm77Uyr6QrX6Puj2T2qXbsN3Cu4HZ6pJ8YkrsHIlEqYHAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU5SUAi92CwgcfCxxbr7hiBRimIaAwHwYDVR0j
BBgwFoAUeKvB3Whkw8yf4YGSdWDH8QuCtE0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRTNFQkFERDg2OTkwQUFEQkY3MzRCMjA5NDREREMyOEUz
QjQ1NzRCRTRDNjAyRUQwQkQ2MDM2MjM3RDQ3M0FCLzAvNzhBQkMxREQ2ODY0QzND
QzlGRTE4MTkyNzU2MEM3RjEwQjgyQjQ0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OEFCQzFERDY4NjRDM0NDOUZF
MTgxOTI3NTYwQzdGMTBCODJCNDRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUUzRUJBREQ4Njk5MEFBREJGNzM0QjIwOTQ0RERDMjhFM0I0NTc0QkU0
QzYwMkVEMEJENjAzNjIzN0Q0NzNBQi8wLzMyMzgzMDMzM2EzNzYyNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM3MzYzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDe8Aw
DQYJKoZIhvcNAQELBQADggEBAKDyjeXrcrvkAuFTzG3UwpRDvX93Sgu+XY5HSgFC
6UT5cDYYgjn3119lcgd1KnjarUhUMWZG6IkhW8PMmWgHv5e0WyLuZnQBzCZoutFQ
qcEz7oysK3dADpHydKaKA0CJJKaYCtn99QG+I09VtwF8mkqQ4vb4b6Absw3xtAh6
pyx9ct0pfwhpL0A6OFxyocHdkZb4BZgc8LohPsOT7b74ciS23Kuvo+GN0F4H+mnv
oiBOS43REkbdurB4/MgtO4vakFWhnQ0ym2rj6qa+9u/L8t8GUdD2GW4uOAGP4Npb
OjxO+3bv8It5LsQrlzuyxGhb56rYFo5Xq4fFQ3jzlvn1ngs=
-----END CERTIFICATE-----