Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/323830333a626261303a3a2f33322d3332203d3e20323637373638.roa
File:                     323830333a626261303a3a2f33322d3332203d3e20323637373638.roa (raw, json)
Hash identifier:          Cujbkv/oAMnJug203WGPcPobsLrSyXBpHuZqvQq/HDI=
Subject key identifier:   29:CF:F3:33:53:D0:9A:A0:83:09:C6:6A:1E:3A:F0:D6:CC:76:4B:BF
Certificate issuer:       /CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
Certificate serial:       38DE3238022CB8DC262D26ECB730C33DAA50D0B1
Authority key identifier: 92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/323830333a626261303a3a2f33322d3332203d3e20323637373638.roa
Signing time:             Tue 05 Mar 2024 18:22:55 +0000
ROA not before:           Tue 05 Mar 2024 18:17:55 +0000
ROA not after:            Tue 04 Mar 2025 18:22:55 +0000
asID:                     267768
IP address blocks:        2803:bba0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:de:32:38:02:2c:b8:dc:26:2d:26:ec:b7:30:c3:3d:aa:50:d0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
        Validity
            Not Before: Mar  5 18:17:55 2024 GMT
            Not After : Mar  4 18:22:55 2025 GMT
        Subject: CN=29CFF33353D09AA08309C66A1E3AF0D6CC764BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:02:34:a1:b9:c2:af:c7:fe:44:ed:4e:49:
                    02:8b:9a:f5:b9:1d:ef:63:5b:8d:be:1a:a0:53:d6:
                    6e:bd:1d:89:8e:d1:85:34:52:85:d2:f3:62:63:46:
                    5c:00:67:04:f9:70:a6:87:12:97:67:ee:cb:74:c1:
                    8e:ee:cc:f4:2a:24:ab:2e:15:fb:48:e2:e4:15:81:
                    a9:43:27:48:9d:1b:5c:fa:e3:87:f0:a4:69:c9:4d:
                    d1:82:64:95:d2:ee:70:8f:79:55:a9:5c:87:13:ff:
                    85:17:96:70:59:8f:a5:9b:75:c7:f3:25:d1:91:94:
                    84:8d:49:f9:bc:51:d6:1f:92:7f:38:b7:9e:63:09:
                    e9:c5:b3:2f:ea:dd:b8:36:a4:5e:42:eb:d3:12:53:
                    23:8b:78:c3:b8:df:91:b5:6d:5f:40:3e:97:f9:2d:
                    94:5e:94:48:f0:a3:43:ff:de:62:30:d6:a9:82:d5:
                    3e:7b:e9:c5:4f:72:9f:a4:62:96:9e:67:34:19:74:
                    2a:d9:47:17:a6:88:32:41:ed:71:95:a3:df:96:be:
                    4e:c4:65:5c:05:64:35:0e:74:f1:93:20:b0:bc:0d:
                    6f:a9:a6:bd:63:63:95:04:f6:8e:51:16:3f:01:8d:
                    75:3f:8b:de:11:54:87:c1:c4:cd:bf:82:ce:a0:1b:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CF:F3:33:53:D0:9A:A0:83:09:C6:6A:1E:3A:F0:D6:CC:76:4B:BF
            X509v3 Authority Key Identifier:
                keyid:92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/323830333a626261303a3a2f33322d3332203d3e20323637373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:f8:50:28:d6:58:b3:5d:0d:67:a0:74:26:4a:0d:40:82:
         4b:60:2b:e1:73:a4:b7:87:e6:41:d4:c5:a9:cd:2e:d9:d4:01:
         ab:96:cf:ef:5f:f3:82:b8:c1:39:fd:ce:67:15:13:e5:bf:fb:
         e6:64:86:2f:df:fa:f9:1c:70:c4:fa:fa:7b:0c:a8:b3:08:e7:
         73:ca:48:8d:bf:60:d2:25:f0:58:81:58:24:b4:92:1d:ba:a3:
         2d:13:9c:04:e0:e8:38:5f:69:92:7b:88:c0:15:a1:43:ed:a6:
         a5:1b:9d:c2:69:7b:84:a3:0c:71:1b:1a:93:1e:5c:66:f7:df:
         a9:7a:19:51:cb:fc:ef:98:80:2d:ec:85:93:df:2b:9e:f0:4b:
         96:a1:f6:31:a4:e5:4c:bd:81:7c:59:97:92:91:f5:ea:f6:26:
         5d:a2:61:41:32:c4:6b:0c:f4:6f:1c:a1:96:8a:45:ae:53:66:
         49:4d:d3:9c:d7:62:87:de:41:41:f2:96:f8:74:c8:df:3d:67:
         26:e7:92:e2:a4:15:0f:28:5a:7e:22:d4:20:f7:b3:39:1e:46:
         b6:f9:78:8b:78:4f:47:94:8f:ce:2a:13:1e:3b:0c:10:de:7b:
         64:30:a4:82:4d:a4:81:77:8c:23:81:70:4a:e6:8c:de:60:f4:
         6e:4f:bd:b5
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUON4yOAIsuNwmLSbstzDDPapQ0LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI3RTAwMTIwNzA1NzBBQjRERkE0REQxOTEzRUYxMkIw
QzVBMUZCQTAeFw0yNDAzMDUxODE3NTVaFw0yNTAzMDQxODIyNTVaMDMxMTAvBgNV
BAMTKDI5Q0ZGMzMzNTNEMDlBQTA4MzA5QzY2QTFFM0FGMEQ2Q0M3NjRCQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCgI0obnCr8f+RO1OSQKLmvW5
He9jW42+GqBT1m69HYmO0YU0UoXS82JjRlwAZwT5cKaHEpdn7st0wY7uzPQqJKsu
FftI4uQVgalDJ0idG1z644fwpGnJTdGCZJXS7nCPeVWpXIcT/4UXlnBZj6Wbdcfz
JdGRlISNSfm8UdYfkn84t55jCenFsy/q3bg2pF5C69MSUyOLeMO435G1bV9APpf5
LZRelEjwo0P/3mIw1qmC1T576cVPcp+kYpaeZzQZdCrZRxemiDJB7XGVo9+Wvk7E
ZVwFZDUOdPGTILC8DW+ppr1jY5UE9o5RFj8BjXU/i94RVIfBxM2/gs6gGxOFAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUKc/zM1PQmqCDCcZqHjrw1sx2S78wHwYDVR0j
BBgwFoAUkn4AEgcFcKtN+k3RkT7xKwxaH7owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMEExQkNGQzBFMTFFODI2NTIyOEE2RDk4NkEzQjM0MkIy
MkVBQUExQTZENTcxOTNCRjkyRkQwNzY1MEVGRUZFLzAvOTI3RTAwMTIwNzA1NzBB
QjRERkE0REQxOTEzRUYxMkIwQzVBMUZCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjdFMDAxMjA3MDU3MEFCNERG
QTRERDE5MTNFRjEyQjBDNUExRkJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjBBMUJDRkMwRTExRTgyNjUyMjhBNkQ5ODZBM0IzNDJCMjJFQUFBMUE2
RDU3MTkzQkY5MkZEMDc2NTBFRkVGRS8wLzMyMzgzMDMzM2E2MjYyNjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDu6Aw
DQYJKoZIhvcNAQELBQADggEBACqK+FAo1lizXQ1noHQmSg1AgktgK+FzpLeH5kHU
xanNLtnUAauWz+9f84K4wTn9zmcVE+W/++Zkhi/f+vkccMT6+nsMqLMI53PKSI2/
YNIl8FiBWCS0kh26oy0TnATg6DhfaZJ7iMAVoUPtpqUbncJpe4SjDHEbGpMeXGb3
36l6GVHL/O+YgC3shZPfK57wS5ah9jGk5Uy9gXxZl5KR9er2Jl2iYUEyxGsM9G8c
oZaKRa5TZklN05zXYofeQUHylvh0yN89ZybnkuKkFQ8oWn4i1CD3szkeRrb5eIt4
T0eUj84qEx47DBDee2QwpIJNpIF3jCOBcErmjN5g9G5PvbU=
-----END CERTIFICATE-----