Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/323830333a393834303a3a2f33322d3332203d3e20323633373635.roa
File:                     323830333a393834303a3a2f33322d3332203d3e20323633373635.roa (raw, json)
Hash identifier:          aY1foBAwL3T3ykm+8Pyr+Ib7a/05VxtiyV+i+9YuijQ=
Subject key identifier:   40:0E:B3:43:AB:E9:26:FC:02:AD:3E:3B:AD:E4:25:75:6A:29:15:48
Certificate issuer:       /CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
Certificate serial:       43240651E05F482B224A684AE1F43EE3A04C3584
Authority key identifier: B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/323830333a393834303a3a2f33322d3332203d3e20323633373635.roa
Signing time:             Tue 17 Sep 2024 17:00:01 +0000
ROA not before:           Tue 17 Sep 2024 16:55:01 +0000
ROA not after:            Tue 16 Sep 2025 17:00:01 +0000
asID:                     263765
IP address blocks:        2803:9840::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:24:06:51:e0:5f:48:2b:22:4a:68:4a:e1:f4:3e:e3:a0:4c:35:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
        Validity
            Not Before: Sep 17 16:55:01 2024 GMT
            Not After : Sep 16 17:00:01 2025 GMT
        Subject: CN=400EB343ABE926FC02AD3E3BADE425756A291548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2a:73:6e:69:d5:18:8b:aa:ea:d7:de:4a:00:
                    e8:00:d8:4b:90:df:f5:28:60:1b:26:bd:16:32:c5:
                    53:63:46:00:34:42:77:e5:a4:26:bc:73:e3:0e:b0:
                    3d:c7:15:00:b1:7e:58:47:8b:a2:a7:3c:8b:2b:3e:
                    a2:2a:7b:2a:79:03:d3:29:11:ea:cc:77:48:63:71:
                    d6:87:85:24:b4:b1:ae:83:14:0c:25:e0:69:02:da:
                    99:55:83:46:9a:77:86:fe:2f:f7:da:08:84:c0:31:
                    9b:81:ea:87:70:a0:db:f4:79:ec:ca:fd:fb:fa:3d:
                    14:43:d8:b0:31:11:02:08:aa:ee:86:80:4b:d7:40:
                    a8:1b:e9:ec:69:76:bb:4f:e5:b7:27:e9:d8:88:c5:
                    00:09:b0:1b:21:7f:aa:db:06:b6:21:23:2f:6a:84:
                    e3:3e:7e:ac:02:6f:0a:0c:65:20:0b:12:1a:17:ff:
                    0e:1d:35:3e:ab:b0:d5:5d:12:a1:12:cd:4f:91:e2:
                    03:e9:80:b9:eb:7c:be:2b:66:2a:b2:80:80:5c:8d:
                    46:91:30:53:bd:15:59:fd:ef:c3:97:29:ee:82:82:
                    f3:41:47:8b:c3:55:9d:49:55:d6:ec:cf:3c:4b:4e:
                    2d:4c:86:68:20:57:92:41:97:ce:d9:22:b0:0b:05:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0E:B3:43:AB:E9:26:FC:02:AD:3E:3B:AD:E4:25:75:6A:29:15:48
            X509v3 Authority Key Identifier:
                keyid:B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/323830333a393834303a3a2f33322d3332203d3e20323633373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9840::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:fe:7c:a0:a9:96:74:03:39:d9:52:a4:cf:9e:59:d8:c8:83:
         26:ce:45:09:90:2d:5d:39:68:fa:28:6f:d9:97:db:16:b6:73:
         94:4b:fa:87:fc:84:f5:c0:36:94:8a:be:43:14:db:88:41:77:
         3a:5b:e7:15:20:e0:62:af:ae:05:db:e2:f6:fa:0f:df:26:65:
         39:be:cd:a6:9f:3e:af:8d:d9:8e:fd:15:46:71:59:55:95:60:
         7b:5d:18:a9:04:3f:60:4f:30:fd:19:f6:6f:28:84:9d:ac:78:
         3e:e1:10:1d:a9:4b:41:b8:4a:05:62:c5:e5:88:12:9e:88:fb:
         d9:1b:02:6a:6b:17:70:a8:7b:8d:51:17:b8:3c:1d:66:84:ed:
         b2:40:8a:5e:96:4b:bc:5d:a6:e4:39:8d:77:9e:76:aa:f0:3b:
         4d:37:9a:c8:d8:e9:3d:61:64:02:50:da:1b:6b:8b:e2:ea:ee:
         59:d9:8d:a3:14:36:64:12:27:12:c5:10:70:89:0e:5e:d8:a9:
         90:6a:99:b8:ad:da:59:e2:a3:61:3a:dd:9b:9c:84:e3:2d:a9:
         be:2a:1c:62:b6:4c:dc:3f:8a:e8:fb:b1:44:5d:ad:21:e7:08:
         c3:34:99:ad:a5:7e:a6:bb:fc:08:73:70:8a:47:59:b5:75:8d:
         11:86:f0:82
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUQyQGUeBfSCsiSmhK4fQ+46BMNYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlDOTIwQzNGODJFMDgwRUZGNkNEMDI2OTk2MkREM0JF
Q0Q1Njk3QTAeFw0yNDA5MTcxNjU1MDFaFw0yNTA5MTYxNzAwMDFaMDMxMTAvBgNV
BAMTKDQwMEVCMzQzQUJFOTI2RkMwMkFEM0UzQkFERTQyNTc1NkEyOTE1NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQKnNuadUYi6rq195KAOgA2EuQ
3/UoYBsmvRYyxVNjRgA0QnflpCa8c+MOsD3HFQCxflhHi6KnPIsrPqIqeyp5A9Mp
EerMd0hjcdaHhSS0sa6DFAwl4GkC2plVg0aad4b+L/faCITAMZuB6odwoNv0eezK
/fv6PRRD2LAxEQIIqu6GgEvXQKgb6expdrtP5bcn6diIxQAJsBshf6rbBrYhIy9q
hOM+fqwCbwoMZSALEhoX/w4dNT6rsNVdEqESzU+R4gPpgLnrfL4rZiqygIBcjUaR
MFO9FVn978OXKe6CgvNBR4vDVZ1JVdbszzxLTi1MhmggV5JBl87ZIrALBfDBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUQA6zQ6vpJvwCrT47reQldWopFUgwHwYDVR0j
BBgwFoAUuckgw/guCA7/bNAmmWLdO+zVaXowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRUM5MUZFRkRDQjM4MzI2MDlEQ0E1RjRDQzYwMjMzOUVC
QzVDNEFFNDc2RTgzMUQwOEZBNjJEMTNCMEUyRTBDLzAvQjlDOTIwQzNGODJFMDgw
RUZGNkNEMDI2OTk2MkREM0JFQ0Q1Njk3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUM5MjBDM0Y4MkUwODBFRkY2
Q0QwMjY5OTYyREQzQkVDRDU2OTdBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkVDOTFGRUZEQ0IzODMyNjA5RENBNUY0Q0M2MDIzMzlFQkM1QzRBRTQ3
NkU4MzFEMDhGQTYyRDEzQjBFMkUwQy8wLzMyMzgzMDMzM2EzOTM4MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzYzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDmEAw
DQYJKoZIhvcNAQELBQADggEBAGj+fKCplnQDOdlSpM+eWdjIgybORQmQLV05aPoo
b9mX2xa2c5RL+of8hPXANpSKvkMU24hBdzpb5xUg4GKvrgXb4vb6D98mZTm+zaaf
Pq+N2Y79FUZxWVWVYHtdGKkEP2BPMP0Z9m8ohJ2seD7hEB2pS0G4SgVixeWIEp6I
+9kbAmprF3Coe41RF7g8HWaE7bJAil6WS7xdpuQ5jXeedqrwO003msjY6T1hZAJQ
2htri+Lq7lnZjaMUNmQSJxLFEHCJDl7YqZBqmbit2lnio2E63ZuchOMtqb4qHGK2
TNw/iuj7sURdrSHnCMM0ma2lfqa7/AhzcIpHWbV1jRGG8II=
-----END CERTIFICATE-----