Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203232373234.roa
File:                     323830333a623263303a3a2f33322d3438203d3e203232373234.roa (raw, json)
Hash identifier:          ZeGfFxSVzSzbCf8uwl2ie0Rwykq8YLtVgrtdXaAM5A8=
Subject key identifier:   C0:04:C3:D8:73:25:C0:EA:A9:BE:14:02:F9:7D:95:A1:F8:5A:7E:2A
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       0DD90E2B0C22A9F24EDBAFF419E1BF0D7EA0D09C
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 18:16:46 +0000
ROA not before:           Tue 04 Feb 2025 18:11:46 +0000
ROA not after:            Tue 03 Feb 2026 18:16:46 +0000
asID:                     22724
IP address blocks:        2803:b2c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d9:0e:2b:0c:22:a9:f2:4e:db:af:f4:19:e1:bf:0d:7e:a0:d0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Feb  4 18:11:46 2025 GMT
            Not After : Feb  3 18:16:46 2026 GMT
        Subject: CN=C004C3D87325C0EAA9BE1402F97D95A1F85A7E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b9:17:d6:03:43:4f:af:e8:f8:e9:82:e3:89:
                    a9:ad:e5:bb:20:95:ec:96:2b:4c:fe:fd:92:72:37:
                    dd:3e:10:97:b2:39:55:96:06:0f:22:96:9c:93:c7:
                    f1:cd:8e:f5:b2:71:63:97:ce:1a:68:08:d4:09:09:
                    e9:46:f9:1c:a8:eb:eb:2b:e3:b8:e5:b4:83:91:29:
                    32:11:3d:84:1d:d2:86:cf:82:0a:56:f9:af:8d:72:
                    e1:69:ea:4b:cc:eb:05:58:45:fd:77:5e:d9:94:40:
                    90:2c:e3:6f:28:7b:43:99:a1:27:a5:11:39:52:fe:
                    d1:42:4b:24:4d:98:b8:09:62:97:32:5e:eb:93:8b:
                    bc:b9:e3:30:55:d6:9b:eb:a9:2e:ad:e0:51:f8:f8:
                    d6:3e:b9:09:b9:73:3d:38:5f:84:5e:85:91:a2:31:
                    1c:be:7d:0b:6d:36:46:03:f7:64:3c:9d:3c:56:e2:
                    5d:a7:01:d1:52:eb:8a:25:5c:69:20:6c:a4:33:38:
                    10:3d:d7:7c:42:60:a5:e0:61:eb:90:42:75:bb:36:
                    7a:d4:09:08:c9:59:ba:58:56:d0:5c:26:d4:68:d2:
                    cc:ec:64:6d:49:eb:91:e7:01:5b:a0:0d:27:b2:c9:
                    6f:d2:7c:ba:9e:02:ea:26:ba:99:4d:10:f3:2c:43:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:04:C3:D8:73:25:C0:EA:A9:BE:14:02:F9:7D:95:A1:F8:5A:7E:2A
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:26:f3:41:2f:f9:1d:d7:e3:ad:02:02:70:c5:8a:1d:06:
         6c:be:b8:84:08:51:d3:8d:d2:68:c5:b7:ae:8e:70:e6:05:82:
         bb:4e:ae:76:b0:9d:65:ba:d2:a2:67:46:28:92:6b:33:6e:78:
         f5:3a:15:61:89:f8:5c:26:92:6f:89:9b:96:1c:be:4b:63:ce:
         83:42:90:05:09:40:fc:54:fa:74:a3:61:a5:f0:e1:62:6c:7d:
         4d:5f:f4:c0:38:9e:94:1c:c7:d8:3d:b3:57:29:fd:24:37:ad:
         05:66:9f:7e:49:17:96:01:66:af:b2:7e:28:a8:7c:72:7c:e6:
         a6:2d:f7:7e:cd:86:aa:d1:41:4f:6f:a2:9f:85:16:5c:6a:95:
         14:26:ad:26:d7:06:68:02:10:0b:85:ac:b9:b3:ac:51:04:e3:
         cc:9e:13:cf:d5:5e:14:ed:92:df:aa:d3:cc:6d:0c:f6:2d:34:
         64:f1:f2:90:ba:a6:0c:2b:81:36:af:0b:f7:ef:95:d7:b6:73:
         6e:69:46:67:7a:f7:8e:74:97:c0:bc:19:b8:e3:73:34:86:aa:
         57:d4:f0:6e:96:58:35:15:73:98:36:8a:74:7b:a2:29:de:3e:
         92:53:c1:59:c3:f8:d6:dc:ef:fe:12:64:2c:24:56:7d:42:a4:
         ec:db:4d:cd
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUDdkOKwwiqfJO26/0GeG/DX6g0JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFNzJCOEQ4MTVFOUEzRDNEODdDMTBCMzlFRDQxNjlB
ODRBQjY4RjAeFw0yNTAyMDQxODExNDZaFw0yNjAyMDMxODE2NDZaMDMxMTAvBgNV
BAMTKEMwMDRDM0Q4NzMyNUMwRUFBOUJFMTQwMkY5N0Q5NUExRjg1QTdFMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQuRfWA0NPr+j46YLjiamt5bsg
leyWK0z+/ZJyN90+EJeyOVWWBg8ilpyTx/HNjvWycWOXzhpoCNQJCelG+Ryo6+sr
47jltIORKTIRPYQd0obPggpW+a+NcuFp6kvM6wVYRf13XtmUQJAs428oe0OZoSel
ETlS/tFCSyRNmLgJYpcyXuuTi7y54zBV1pvrqS6t4FH4+NY+uQm5cz04X4RehZGi
MRy+fQttNkYD92Q8nTxW4l2nAdFS64olXGkgbKQzOBA913xCYKXgYeuQQnW7NnrU
CQjJWbpYVtBcJtRo0szsZG1J65HnAVugDSeyyW/SfLqeAuomuplNEPMsQ7hDAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUwATD2HMlwOqpvhQC+X2VofhafiowHwYDVR0j
BBgwFoAUy+crjYFemj09h8ELOe1BaahKto8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTdFMEYyOEQ3QjEwOTY0MzM4MjEzNEE5MjhBREI3RDhD
MTMxOTcyNzAyRUE0MkEwNDhDMjc2NEM4MERDN0MxLzAvQ0JFNzJCOEQ4MTVFOUEz
RDNEODdDMTBCMzlFRDQxNjlBODRBQjY4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkU3MkI4RDgxNUU5QTNEM0Q4
N0MxMEIzOUVENDE2OUE4NEFCNjhGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTE3RTBGMjhEN0IxMDk2NDMzODIxMzRBOTI4QURCN0Q4QzEzMTk3Mjcw
MkVBNDJBMDQ4QzI3NjRDODBEQzdDMS8wLzMyMzgzMDMzM2E2MjMyNjMzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzIzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA7LAMA0G
CSqGSIb3DQEBCwUAA4IBAQBsyCbzQS/5HdfjrQICcMWKHQZsvriECFHTjdJoxbeu
jnDmBYK7Tq52sJ1lutKiZ0Yokmszbnj1OhVhifhcJpJviZuWHL5LY86DQpAFCUD8
VPp0o2Gl8OFibH1NX/TAOJ6UHMfYPbNXKf0kN60FZp9+SReWAWavsn4oqHxyfOam
Lfd+zYaq0UFPb6KfhRZcapUUJq0m1wZoAhALhay5s6xRBOPMnhPP1V4U7ZLfqtPM
bQz2LTRk8fKQuqYMK4E2rwv375XXtnNuaUZneveOdJfAvBm443M0hqpX1PBullg1
FXOYNop0e6Ip3j6SU8FZw/jW3O/+EmQsJFZ9QqTs203N
-----END CERTIFICATE-----