Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/323830333a373930303a3a2f33322d3332203d3e203238303934.roa
File:                     323830333a373930303a3a2f33322d3332203d3e203238303934.roa (raw, json)
Hash identifier:          pLgJ3Srnfr5ux7Ig8M6Y77ShpoLUwStjnpihaWCwyO0=
Subject key identifier:   A1:D2:6F:C8:97:87:B9:43:4C:60:F3:F1:2E:F0:D9:3B:2A:F2:A1:67
Certificate issuer:       /CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
Certificate serial:       23FC9F6865244D64DA61E59164183F92749ACF26
Authority key identifier: E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/323830333a373930303a3a2f33322d3332203d3e203238303934.roa
Signing time:             Tue 04 Feb 2025 18:40:58 +0000
ROA not before:           Tue 04 Feb 2025 18:35:58 +0000
ROA not after:            Tue 03 Feb 2026 18:40:58 +0000
asID:                     28094
IP address blocks:        2803:7900::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fc:9f:68:65:24:4d:64:da:61:e5:91:64:18:3f:92:74:9a:cf:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
        Validity
            Not Before: Feb  4 18:35:58 2025 GMT
            Not After : Feb  3 18:40:58 2026 GMT
        Subject: CN=A1D26FC89787B9434C60F3F12EF0D93B2AF2A167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:5a:50:94:d3:e4:62:0c:7d:b9:80:94:a1:
                    40:0c:88:64:93:69:6e:5d:61:33:cc:3c:70:0c:05:
                    a1:43:5b:a3:ca:8d:0e:7f:58:4d:d6:58:2e:0e:2b:
                    c6:df:ae:86:ea:9a:91:55:2d:cc:99:19:37:5f:94:
                    bb:de:74:4f:a0:ab:f6:88:f0:b2:8c:d0:43:b8:ec:
                    69:eb:15:a6:97:f9:0b:f5:8a:a1:cc:47:39:e5:d4:
                    be:ab:d2:e3:67:42:79:2c:56:ef:22:68:32:b3:36:
                    00:4d:3c:db:bc:76:a2:07:af:98:cc:4f:30:1d:6e:
                    86:57:ce:31:28:a6:1a:2c:c8:f3:2c:3e:bd:ef:06:
                    0d:a4:c0:a9:e8:ff:d8:8d:ca:42:98:ec:46:5a:65:
                    b2:98:0c:d2:52:a8:be:6f:c4:91:4d:a4:4e:20:c7:
                    77:70:5c:90:d1:cb:13:fc:c7:98:8d:5d:a5:30:96:
                    c0:52:9b:db:d4:51:2e:59:56:08:28:a2:73:43:ec:
                    51:cd:44:eb:d5:30:89:9e:5f:33:fc:36:9b:7c:e2:
                    2c:7e:28:05:c5:44:d5:73:f8:ec:7d:60:df:cf:55:
                    cd:ed:7d:ae:a0:ca:56:4f:d5:e8:95:3d:77:17:13:
                    6f:e9:2a:e2:df:dd:cd:dc:86:1d:e9:99:a0:48:5c:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D2:6F:C8:97:87:B9:43:4C:60:F3:F1:2E:F0:D9:3B:2A:F2:A1:67
            X509v3 Authority Key Identifier:
                keyid:E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/323830333a373930303a3a2f33322d3332203d3e203238303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7900::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:5c:b6:fe:74:b8:cf:d7:af:66:ab:27:7e:6b:cf:ba:c9:ae:
         7f:99:04:0d:ae:72:f0:65:c8:e6:70:19:a5:73:b6:20:c8:09:
         2f:84:7a:56:8c:18:cf:53:dc:01:15:2c:05:3d:f1:9d:31:2f:
         33:62:b5:5d:f4:4d:f7:a1:75:bc:cf:0e:01:45:ac:1c:0c:ac:
         4b:bc:42:50:c3:2d:96:eb:81:b8:52:6e:9b:c1:36:e2:21:a2:
         0d:8e:91:3b:83:a5:e4:35:c7:f5:73:81:db:7d:22:5d:57:80:
         0d:8c:f1:4a:7d:33:d1:18:4e:55:07:51:f0:f9:a7:cb:a4:b2:
         3e:d7:6f:55:b3:b9:a8:ef:0d:72:1d:2c:bf:d5:16:a1:8f:86:
         8b:32:a5:ce:f2:62:f1:37:97:38:7f:e1:81:56:58:30:c6:86:
         3a:c5:b8:38:21:89:c9:e1:8b:d5:d0:ba:46:7b:91:6a:81:11:
         48:12:75:1b:44:e6:a4:99:f8:8b:f5:4b:23:96:65:89:bd:64:
         6a:cb:23:c2:54:51:d1:74:9c:fd:03:1f:56:bb:15:04:10:2e:
         95:54:b5:25:68:7d:04:38:34:64:ed:0c:62:c8:ac:a4:96:b6:
         b4:60:37:f4:1a:10:46:53:6d:19:81:22:5e:af:71:40:66:75:
         00:52:39:f8
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUI/yfaGUkTWTaYeWRZBg/knSazyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY2NDNDRDI4MzVCOEFGOTZDMTAyNDhFMjM4MkNCM0JB
ODFFQTEyQTAeFw0yNTAyMDQxODM1NThaFw0yNjAyMDMxODQwNThaMDMxMTAvBgNV
BAMTKEExRDI2RkM4OTc4N0I5NDM0QzYwRjNGMTJFRjBEOTNCMkFGMkExNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzFpQlNPkYgx9uYCUoUAMiGST
aW5dYTPMPHAMBaFDW6PKjQ5/WE3WWC4OK8bfrobqmpFVLcyZGTdflLvedE+gq/aI
8LKM0EO47GnrFaaX+Qv1iqHMRznl1L6r0uNnQnksVu8iaDKzNgBNPNu8dqIHr5jM
TzAdboZXzjEophosyPMsPr3vBg2kwKno/9iNykKY7EZaZbKYDNJSqL5vxJFNpE4g
x3dwXJDRyxP8x5iNXaUwlsBSm9vUUS5ZVggoonND7FHNROvVMImeXzP8Npt84ix+
KAXFRNVz+Ox9YN/PVc3tfa6gylZP1eiVPXcXE2/pKuLf3c3chh3pmaBIXH6JAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUodJvyJeHuUNMYPPxLvDZOyryoWcwHwYDVR0j
BBgwFoAU5mQ80oNbivlsECSOI4LLO6geoSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMTI5RUFERUE1NUMwREI5QjAxRjIwM0I5MUIyOTNGOENC
REVCRkY0MzY2NTgzODNEMTNERkJCMzUwQTBDQTU1LzAvRTY2NDNDRDI4MzVCOEFG
OTZDMTAyNDhFMjM4MkNCM0JBODFFQTEyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNjY0M0NEMjgzNUI4QUY5NkMx
MDI0OEUyMzgyQ0IzQkE4MUVBMTJBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDEyOUVBREVBNTVDMERCOUIwMUYyMDNCOTFCMjkzRjhDQkRFQkZGNDM2
NjU4MzgzRDEzREZCQjM1MEEwQ0E1NS8wLzMyMzgzMDMzM2EzNzM5MzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzMDM5MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA3kAMA0G
CSqGSIb3DQEBCwUAA4IBAQAbXLb+dLjP169mqyd+a8+6ya5/mQQNrnLwZcjmcBml
c7YgyAkvhHpWjBjPU9wBFSwFPfGdMS8zYrVd9E33oXW8zw4BRawcDKxLvEJQwy2W
64G4Um6bwTbiIaINjpE7g6XkNcf1c4HbfSJdV4ANjPFKfTPRGE5VB1Hw+afLpLI+
129Vs7mo7w1yHSy/1Rahj4aLMqXO8mLxN5c4f+GBVlgwxoY6xbg4IYnJ4YvV0LpG
e5FqgRFIEnUbROakmfiL9UsjlmWJvWRqyyPCVFHRdJz9Ax9WuxUEEC6VVLUlaH0E
ODRk7QxiyKyklra0YDf0GhBGU20ZgSJer3FAZnUAUjn4
-----END CERTIFICATE-----