Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a383130303a3a2f34302d3430203d3e203631353038.roa
File:                     323830333a663234303a383130303a3a2f34302d3430203d3e203631353038.roa (raw, json)
Hash identifier:          2etkhRtPxS3BoJ3/Dw4jSW0527Ew4BJe68DbeSt6CZ8=
Subject key identifier:   4F:83:59:C3:7C:5D:6D:F2:AA:E6:C9:18:A1:85:22:A2:2C:CE:FB:C6
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       2DAB158D8E8988A1DAF52CF2A64F0EE99B89F83E
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a383130303a3a2f34302d3430203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:55 +0000
ROA not before:           Tue 04 Feb 2025 18:23:55 +0000
ROA not after:            Tue 03 Feb 2026 18:28:55 +0000
asID:                     61508
IP address blocks:        2803:f240:8100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ab:15:8d:8e:89:88:a1:da:f5:2c:f2:a6:4f:0e:e9:9b:89:f8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:55 2025 GMT
            Not After : Feb  3 18:28:55 2026 GMT
        Subject: CN=4F8359C37C5D6DF2AAE6C918A18522A22CCEFBC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:40:bb:a9:8e:ef:18:34:88:41:28:34:f0:
                    76:65:f0:dc:e3:ca:3d:82:38:b8:b3:b4:5c:6a:bc:
                    3c:4f:98:2c:28:ff:4a:6d:2a:d5:e7:1e:d4:62:2a:
                    a4:d3:ae:db:61:01:9c:da:6f:58:58:9c:b7:38:1a:
                    55:a9:eb:32:57:ca:b1:77:36:04:81:ad:13:0e:12:
                    0a:a1:96:f8:c5:84:64:2a:b1:bb:5a:58:5c:ff:72:
                    e2:b1:86:1a:27:24:af:b6:ec:ed:6e:7b:fc:65:64:
                    d1:75:5b:bf:53:87:57:93:8d:6d:51:8b:40:33:2e:
                    a2:2b:0c:29:8a:de:cc:3e:16:22:0f:cb:98:5e:42:
                    98:22:73:a1:eb:18:1f:f3:3b:1d:1f:bd:5e:64:60:
                    c3:ea:a5:79:7e:a3:2d:2a:53:c2:96:ae:f3:d7:73:
                    d8:6e:8f:75:4f:21:c4:c0:7e:cc:9f:ff:f9:99:d9:
                    51:fe:05:1a:33:e3:90:4b:55:76:f2:22:f7:aa:05:
                    4f:e7:65:ce:ae:db:f3:98:70:78:78:61:78:b8:fa:
                    81:c9:6f:13:58:42:db:7d:dd:42:74:91:a3:d0:6c:
                    1a:6f:f2:c9:68:47:79:09:55:2f:16:20:6d:96:3e:
                    9f:3f:a9:68:2d:4e:52:ac:20:91:ac:8a:ef:f1:6a:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:83:59:C3:7C:5D:6D:F2:AA:E6:C9:18:A1:85:22:A2:2C:CE:FB:C6
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a383130303a3a2f34302d3430203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:01:5d:5a:59:a3:b4:70:4e:7d:0e:37:d4:f4:96:fb:84:ef:
         c1:f4:3f:7a:89:65:f5:e3:32:24:b1:59:48:7f:3c:a0:70:98:
         6f:57:0e:5b:3a:90:f9:30:0a:7d:06:de:6c:c9:8b:c0:38:a2:
         93:68:4d:8d:10:cb:84:20:f4:a1:22:63:0b:47:9b:e9:aa:e6:
         c4:8e:66:e6:ee:21:fa:17:84:cd:dc:6b:fa:1d:c2:51:51:7a:
         85:bd:ec:6e:02:f5:83:03:14:2d:18:de:86:41:e6:15:33:12:
         60:a0:42:4a:dd:f4:1b:e2:a9:ff:a6:3b:90:f0:6f:6e:07:c6:
         b6:2a:19:7b:b4:bc:d6:ad:59:01:dc:ec:7b:d6:da:68:83:56:
         bc:52:a2:98:cf:3c:2c:d0:26:55:a3:1f:88:68:cb:e8:b7:16:
         1c:d5:07:8d:93:15:cc:1e:b6:a4:eb:dc:74:67:3e:82:44:dc:
         30:33:01:03:4c:3c:fe:4c:ab:e3:6d:57:d9:f2:12:86:28:80:
         b4:fd:d0:27:a7:72:2f:2d:d7:2f:92:9b:b2:3c:53:9a:ea:2a:
         3f:32:a1:4d:34:6d:df:12:ef:61:8c:bc:a8:b0:7c:5c:4e:08:
         db:2c:88:d2:cb:2b:a2:73:55:f8:ab:94:82:68:14:fc:da:78:
         0b:55:bb:37
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIULasVjY6JiKHa9Szypk8O6ZuJ+D4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4RjVCNDRERDgxM0JBNEJDOEEwNEM3RDI1NTA0MkYx
QUU0QjJBRDAeFw0yNTAyMDQxODIzNTVaFw0yNjAyMDMxODI4NTVaMDMxMTAvBgNV
BAMTKDRGODM1OUMzN0M1RDZERjJBQUU2QzkxOEExODUyMkEyMkNDRUZCQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXlEC7qY7vGDSIQSg08HZl8Nzj
yj2COLiztFxqvDxPmCwo/0ptKtXnHtRiKqTTrtthAZzab1hYnLc4GlWp6zJXyrF3
NgSBrRMOEgqhlvjFhGQqsbtaWFz/cuKxhhonJK+27O1ue/xlZNF1W79Th1eTjW1R
i0AzLqIrDCmK3sw+FiIPy5heQpgic6HrGB/zOx0fvV5kYMPqpXl+oy0qU8KWrvPX
c9huj3VPIcTAfsyf//mZ2VH+BRoz45BLVXbyIveqBU/nZc6u2/OYcHh4YXi4+oHJ
bxNYQtt93UJ0kaPQbBpv8sloR3kJVS8WIG2WPp8/qWgtTlKsIJGsiu/xapJlAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUT4NZw3xdbfKq5skYoYUioizO+8YwHwYDVR0j
BBgwFoAUgY9bRN2BO6S8igTH0lUELxrksq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzI0NjdDRDU4NTQ1REIzQzkxQjlGRDU5NzAzQTQ4QkEw
RjFCQUNGM0Q1QzU2QUE3QzkwQ0JFNjkxQ0M2RjQ0LzAvODE4RjVCNDRERDgxM0JB
NEJDOEEwNEM3RDI1NTA0MkYxQUU0QjJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MThGNUI0NEREODEzQkE0QkM4
QTA0QzdEMjU1MDQyRjFBRTRCMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjcyNDY3Q0Q1ODU0NURCM0M5MUI5RkQ1OTcwM0E0OEJBMEYxQkFDRjNE
NUM1NkFBN0M5MENCRTY5MUNDNkY0NC8wLzMyMzgzMDMzM2E2NjMyMzQzMDNhMzgz
MTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNjMxMzUzMDM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPyQIEwDQYJKoZIhvcNAQELBQADggEBAEEBXVpZo7RwTn0ON9T0lvuE78H0
P3qJZfXjMiSxWUh/PKBwmG9XDls6kPkwCn0G3mzJi8A4opNoTY0Qy4Qg9KEiYwtH
m+mq5sSOZubuIfoXhM3ca/odwlFReoW97G4C9YMDFC0Y3oZB5hUzEmCgQkrd9Bvi
qf+mO5Dwb24HxrYqGXu0vNatWQHc7HvW2miDVrxSopjPPCzQJlWjH4hoy+i3FhzV
B42TFcwetqTr3HRnPoJE3DAzAQNMPP5Mq+NtV9nyEoYogLT90Cenci8t1y+Sm7I8
U5rqKj8yoU00bd8S72GMvKiwfFxOCNssiNLLK6JzVfirlIJoFPzaeAtVuzc=
-----END CERTIFICATE-----