Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/323830333a636238303a3a2f33322d3438203d3e20323635373938.roa
File:                     323830333a636238303a3a2f33322d3438203d3e20323635373938.roa (raw, json)
Hash identifier:          aCU6Rs9ePNEUWEjA4LL/xRFEOkM8xbSGTT38sL74FoA=
Subject key identifier:   39:72:B9:5A:DE:9A:AF:38:E0:94:F7:EB:07:04:1D:DB:EC:16:16:6D
Certificate issuer:       /CN=9D2820894F6D41941116396B192CCF8017618F44
Certificate serial:       17FFAFFAE3E34F66C6B9B999517C25DC145DAFB4
Authority key identifier: 9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/323830333a636238303a3a2f33322d3438203d3e20323635373938.roa
Signing time:             Tue 04 Feb 2025 18:20:02 +0000
ROA not before:           Tue 04 Feb 2025 18:15:02 +0000
ROA not after:            Tue 03 Feb 2026 18:20:02 +0000
asID:                     265798
IP address blocks:        2803:cb80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ff:af:fa:e3:e3:4f:66:c6:b9:b9:99:51:7c:25:dc:14:5d:af:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D2820894F6D41941116396B192CCF8017618F44
        Validity
            Not Before: Feb  4 18:15:02 2025 GMT
            Not After : Feb  3 18:20:02 2026 GMT
        Subject: CN=3972B95ADE9AAF38E094F7EB07041DDBEC16166D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:24:6f:50:09:4a:ba:7e:b7:8e:f4:64:08:
                    ec:b5:33:ab:dc:5a:e8:28:45:14:d1:1d:21:7d:0c:
                    bb:47:21:02:a8:0a:89:9a:5e:0a:86:65:2d:0b:39:
                    df:31:33:94:f5:e5:5a:ab:a9:f0:6f:11:6c:0c:6b:
                    9e:f8:d1:7f:04:a6:46:94:9a:3b:96:49:df:9c:63:
                    08:ec:5e:92:92:f3:14:d1:10:7d:a3:75:15:eb:76:
                    26:53:9f:55:ab:a4:f6:70:2f:e2:85:50:1c:10:f0:
                    23:3b:38:d2:88:6b:b4:04:b7:e5:ec:89:e4:83:f2:
                    5b:a0:69:cc:47:8c:7a:cf:45:d6:84:b3:11:f9:1b:
                    ab:8d:13:af:de:55:ac:eb:f5:2b:42:ee:3c:36:17:
                    77:7a:c3:44:a3:9f:a3:a1:68:5e:0a:ce:e1:98:8d:
                    97:17:e8:d9:e2:e4:7b:62:fc:c1:d1:cd:f4:4a:6b:
                    99:f5:64:94:0a:5f:61:44:39:19:8d:8c:06:d4:a2:
                    75:31:eb:d8:3d:78:00:28:72:dd:f1:98:6d:d5:54:
                    a4:5f:ab:64:d4:c7:e5:c2:f7:8c:47:a5:2c:a2:42:
                    86:f3:67:1e:87:64:03:b4:41:28:59:ca:cd:19:98:
                    1e:3c:08:80:a5:d5:d5:dd:1a:66:07:c1:69:03:d3:
                    8e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:72:B9:5A:DE:9A:AF:38:E0:94:F7:EB:07:04:1D:DB:EC:16:16:6D
            X509v3 Authority Key Identifier:
                keyid:9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/323830333a636238303a3a2f33322d3438203d3e20323635373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:95:db:48:07:30:d2:d2:df:c5:fd:cb:db:4b:0e:d5:23:ba:
         7e:96:cd:9b:83:cf:ad:77:1a:05:05:a9:c2:bd:d0:11:97:f6:
         19:44:30:15:5b:77:07:ad:50:1d:70:48:1f:3e:aa:f2:12:cd:
         85:75:5f:50:05:85:70:14:73:2c:1d:83:17:66:98:22:59:e1:
         4c:50:c2:5f:83:da:ab:45:2c:60:5c:6a:cb:35:5e:7f:93:49:
         31:f9:48:1c:66:47:dc:27:45:be:7a:31:01:05:9d:93:f2:45:
         88:a2:c0:f8:77:10:8a:48:20:2c:0e:3a:81:bc:92:36:7c:db:
         43:9e:4e:02:01:f0:3c:6b:65:3f:d2:51:1b:2e:18:10:c1:b7:
         51:45:8c:dc:c0:0f:94:9e:1a:fa:99:71:a6:a1:80:88:bd:26:
         d8:3b:fc:a9:b3:cf:e2:29:b1:fe:d5:56:e1:03:e5:b8:c1:f3:
         a2:28:de:da:6e:66:fe:0f:54:50:07:3a:52:7a:0d:49:7f:61:
         55:51:24:91:91:14:ca:cb:f0:95:b6:46:68:76:56:f9:99:19:
         3c:3c:1d:23:cd:b9:eb:26:ff:b0:13:26:9f:9e:5d:8d:5e:f8:
         d8:61:67:2d:74:a7:40:59:4f:30:ae:08:bc:85:72:99:cd:ff:
         d3:bd:73:cc
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUF/+v+uPjT2bGubmZUXwl3BRdr7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQyODIwODk0RjZENDE5NDExMTYzOTZCMTkyQ0NGODAx
NzYxOEY0NDAeFw0yNTAyMDQxODE1MDJaFw0yNjAyMDMxODIwMDJaMDMxMTAvBgNV
BAMTKDM5NzJCOTVBREU5QUFGMzhFMDk0RjdFQjA3MDQxRERCRUMxNjE2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6SRvUAlKun63jvRkCOy1M6vc
WugoRRTRHSF9DLtHIQKoComaXgqGZS0LOd8xM5T15VqrqfBvEWwMa5740X8EpkaU
mjuWSd+cYwjsXpKS8xTREH2jdRXrdiZTn1WrpPZwL+KFUBwQ8CM7ONKIa7QEt+Xs
ieSD8lugacxHjHrPRdaEsxH5G6uNE6/eVazr9StC7jw2F3d6w0Sjn6OhaF4KzuGY
jZcX6Nni5Hti/MHRzfRKa5n1ZJQKX2FEORmNjAbUonUx69g9eAAoct3xmG3VVKRf
q2TUx+XC94xHpSyiQobzZx6HZAO0QShZys0ZmB48CICl1dXdGmYHwWkD0461AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUOXK5Wt6arzjglPfrBwQd2+wWFm0wHwYDVR0j
BBgwFoAUnSggiU9tQZQRFjlrGSzPgBdhj0QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjBENjU1Q0UxNjA5QzI0NkU4OUJEQzEwNDJFNTFDNDY3
ODAxQTdEMENFNjdDOUZEQURDNjMwN0Q3MzI1QjYyLzAvOUQyODIwODk0RjZENDE5
NDExMTYzOTZCMTkyQ0NGODAxNzYxOEY0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDI4MjA4OTRGNkQ0MTk0MTEx
NjM5NkIxOTJDQ0Y4MDE3NjE4RjQ0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjIwRDY1NUNFMTYwOUMyNDZFODlCREMxMDQyRTUxQzQ2NzgwMUE3RDBD
RTY3QzlGREFEQzYzMDdENzMyNUI2Mi8wLzMyMzgzMDMzM2E2MzYyMzgzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTM3MzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDy4Aw
DQYJKoZIhvcNAQELBQADggEBAM+V20gHMNLS38X9y9tLDtUjun6WzZuDz613GgUF
qcK90BGX9hlEMBVbdwetUB1wSB8+qvISzYV1X1AFhXAUcywdgxdmmCJZ4UxQwl+D
2qtFLGBcass1Xn+TSTH5SBxmR9wnRb56MQEFnZPyRYiiwPh3EIpIICwOOoG8kjZ8
20OeTgIB8DxrZT/SURsuGBDBt1FFjNzAD5SeGvqZcaahgIi9Jtg7/Kmzz+Ipsf7V
VuED5bjB86Io3tpuZv4PVFAHOlJ6DUl/YVVRJJGRFMrL8JW2Rmh2VvmZGTw8HSPN
uesm/7ATJp+eXY1e+NhhZy10p0BZTzCuCLyFcpnN/9O9c8w=
-----END CERTIFICATE-----