Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/323830333a363434303a3a2f33322d3332203d3e20323633373535.roa
File:                     323830333a363434303a3a2f33322d3332203d3e20323633373535.roa (raw, json)
Hash identifier:          7BRQ7YgQfu9gu4exqcAK0HtED2NsiT/oIhG63apaYW0=
Subject key identifier:   5C:E3:30:56:33:E6:7B:FD:03:F6:1B:E4:54:DE:EF:74:3F:02:B2:2B
Certificate issuer:       /CN=64EBE7741095629A165538B55C948F9A0C4FB045
Certificate serial:       26070112A637CD232CA7ED3417F27F7DA672E54B
Authority key identifier: 64:EB:E7:74:10:95:62:9A:16:55:38:B5:5C:94:8F:9A:0C:4F:B0:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64EBE7741095629A165538B55C948F9A0C4FB045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/323830333a363434303a3a2f33322d3332203d3e20323633373535.roa
Signing time:             Tue 04 Feb 2025 18:42:15 +0000
ROA not before:           Tue 04 Feb 2025 18:37:15 +0000
ROA not after:            Tue 03 Feb 2026 18:42:15 +0000
asID:                     263755
IP address blocks:        2803:6440::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:07:01:12:a6:37:cd:23:2c:a7:ed:34:17:f2:7f:7d:a6:72:e5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EBE7741095629A165538B55C948F9A0C4FB045
        Validity
            Not Before: Feb  4 18:37:15 2025 GMT
            Not After : Feb  3 18:42:15 2026 GMT
        Subject: CN=5CE3305633E67BFD03F61BE454DEEF743F02B22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:22:b6:94:29:cf:91:97:7d:27:a5:57:ea:06:
                    95:41:e9:33:88:9c:23:92:9c:17:c9:51:73:92:fd:
                    73:0b:28:66:33:24:34:22:9e:62:97:68:f0:31:94:
                    83:cb:5b:40:0d:21:68:28:d4:39:50:39:ff:06:70:
                    ff:5c:d5:1d:70:da:6e:70:cf:81:1e:04:ef:49:6a:
                    24:d1:42:fe:f7:ad:37:d0:74:b6:2f:ab:5b:40:e8:
                    ee:cb:09:93:83:7e:08:f3:38:be:ba:13:60:4b:13:
                    c7:d3:24:4f:6d:22:b6:5c:f0:8a:e9:a8:01:46:c3:
                    ac:46:81:94:c4:a1:7c:0e:e3:5b:ba:a6:b9:93:a4:
                    a1:54:ae:fd:fe:de:1f:c8:15:83:97:e9:17:bf:30:
                    9c:1d:ba:99:f0:79:4a:b0:1f:31:08:43:04:7f:38:
                    b4:9a:6c:d9:07:46:b8:1b:ac:a1:a0:6c:a8:8d:71:
                    0d:65:32:15:ce:bd:8c:a9:92:08:d9:c3:ab:2f:73:
                    56:21:7c:6c:c7:26:b1:75:45:a4:93:68:ec:8b:80:
                    48:6a:10:2b:e3:df:12:37:9c:ad:b6:13:1e:7c:25:
                    65:bb:e5:1c:91:33:2e:a5:3d:a7:54:57:66:ff:cb:
                    e9:53:d7:9c:bd:dd:77:78:67:67:16:da:e5:80:a8:
                    d7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E3:30:56:33:E6:7B:FD:03:F6:1B:E4:54:DE:EF:74:3F:02:B2:2B
            X509v3 Authority Key Identifier:
                keyid:64:EB:E7:74:10:95:62:9A:16:55:38:B5:5C:94:8F:9A:0C:4F:B0:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/64EBE7741095629A165538B55C948F9A0C4FB045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64EBE7741095629A165538B55C948F9A0C4FB045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/323830333a363434303a3a2f33322d3332203d3e20323633373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6440::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:fb:64:43:38:3d:2d:51:fe:ea:ee:7e:79:e1:08:21:a6:
         df:78:39:34:83:51:af:2c:0e:2a:f5:59:e1:2c:07:17:7b:eb:
         cf:de:42:05:64:65:c0:d1:8f:0a:bd:fa:e1:c9:c3:f8:6f:63:
         f4:e0:1b:78:90:d6:e9:e3:8d:c1:12:ae:41:0d:6d:08:f3:ed:
         cc:71:ff:ad:27:ef:4e:84:46:8f:a3:bb:2d:4f:ac:df:9c:c9:
         19:a3:1c:3c:4a:0b:af:0a:bb:a4:22:96:7d:dd:ad:dc:f1:12:
         78:a0:d4:2c:6e:67:4e:04:bf:4d:a2:91:74:4a:34:7a:49:8a:
         9c:08:b4:36:a4:4b:77:e2:03:2a:84:30:a7:5d:54:ef:79:55:
         c1:58:d4:fd:d4:10:93:43:ea:a1:ac:a3:aa:d8:9e:9f:27:67:
         6d:a5:d1:7b:98:e5:95:af:04:a3:36:fe:fd:73:67:16:6f:78:
         e6:f7:0e:df:88:4d:b0:f3:20:07:ab:bb:5e:26:7d:79:09:ba:
         16:69:07:f5:ac:85:04:26:24:32:35:d1:0d:2c:00:98:22:a8:
         11:e2:1e:e8:42:24:90:16:43:8a:c8:e1:cc:01:cf:3f:25:51:
         5b:a5:27:94:2a:bd:86:cc:92:4c:1c:60:f8:c5:90:62:5e:13:
         5d:33:e8:23
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUJgcBEqY3zSMsp+00F/J/faZy5UswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFQkU3NzQxMDk1NjI5QTE2NTUzOEI1NUM5NDhGOUEw
QzRGQjA0NTAeFw0yNTAyMDQxODM3MTVaFw0yNjAyMDMxODQyMTVaMDMxMTAvBgNV
BAMTKDVDRTMzMDU2MzNFNjdCRkQwM0Y2MUJFNDU0REVFRjc0M0YwMkIyMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcIraUKc+Rl30npVfqBpVB6TOI
nCOSnBfJUXOS/XMLKGYzJDQinmKXaPAxlIPLW0ANIWgo1DlQOf8GcP9c1R1w2m5w
z4EeBO9JaiTRQv73rTfQdLYvq1tA6O7LCZODfgjzOL66E2BLE8fTJE9tIrZc8Irp
qAFGw6xGgZTEoXwO41u6prmTpKFUrv3+3h/IFYOX6Re/MJwdupnweUqwHzEIQwR/
OLSabNkHRrgbrKGgbKiNcQ1lMhXOvYypkgjZw6svc1YhfGzHJrF1RaSTaOyLgEhq
ECvj3xI3nK22Ex58JWW75RyRMy6lPadUV2b/y+lT15y93Xd4Z2cW2uWAqNe1AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUXOMwVjPme/0D9hvkVN7vdD8CsiswHwYDVR0j
BBgwFoAUZOvndBCVYpoWVTi1XJSPmgxPsEUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMkNGODQ4RTk0NTM0QTNDRDc2QzkyMEU5MzQ5Q0VENTEw
RkVBQTRENzdDMjE5NDBCNERDMTA4RTVBQzI5MjBGLzAvNjRFQkU3NzQxMDk1NjI5
QTE2NTUzOEI1NUM5NDhGOUEwQzRGQjA0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NEVCRTc3NDEwOTU2MjlBMTY1
NTM4QjU1Qzk0OEY5QTBDNEZCMDQ1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzJDRjg0OEU5NDUzNEEzQ0Q3NkM5MjBFOTM0OUNFRDUxMEZFQUE0RDc3
QzIxOTQwQjREQzEwOEU1QUMyOTIwRi8wLzMyMzgzMDMzM2EzNjM0MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM3MzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDZEAw
DQYJKoZIhvcNAQELBQADggEBAFjY+2RDOD0tUf7q7n554Qghpt94OTSDUa8sDir1
WeEsBxd768/eQgVkZcDRjwq9+uHJw/hvY/TgG3iQ1unjjcESrkENbQjz7cxx/60n
706ERo+juy1PrN+cyRmjHDxKC68Ku6Qiln3drdzxEnig1CxuZ04Ev02ikXRKNHpJ
ipwItDakS3fiAyqEMKddVO95VcFY1P3UEJND6qGso6rYnp8nZ22l0XuY5ZWvBKM2
/v1zZxZveOb3Dt+ITbDzIAeru14mfXkJuhZpB/WshQQmJDI10Q0sAJgiqBHiHuhC
JJAWQ4rI4cwBzz8lUVulJ5QqvYbMkkwcYPjFkGJeE10z6CM=
-----END CERTIFICATE-----