Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/323830333a333731303a3a2f33322d3438203d3e203532343233.roa
File:                     323830333a333731303a3a2f33322d3438203d3e203532343233.roa (raw, json)
Hash identifier:          pJ5BAFAhNrI4uDsx+jzvO8kld5rixEbbaLRDwfT+V58=
Subject key identifier:   86:1E:97:B3:79:A0:93:8A:33:FD:E4:81:BF:16:8A:4E:7F:1E:9A:03
Certificate issuer:       /CN=1194051239F45F659AED4103422CF78311E1B146
Certificate serial:       49DE3B41B665B551D8F5E94FABB122DA408A138C
Authority key identifier: 11:94:05:12:39:F4:5F:65:9A:ED:41:03:42:2C:F7:83:11:E1:B1:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1194051239F45F659AED4103422CF78311E1B146.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/323830333a333731303a3a2f33322d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:39:30 +0000
ROA not before:           Tue 04 Feb 2025 18:34:30 +0000
ROA not after:            Tue 03 Feb 2026 18:39:30 +0000
asID:                     52423
IP address blocks:        2803:3710::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:de:3b:41:b6:65:b5:51:d8:f5:e9:4f:ab:b1:22:da:40:8a:13:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1194051239F45F659AED4103422CF78311E1B146
        Validity
            Not Before: Feb  4 18:34:30 2025 GMT
            Not After : Feb  3 18:39:30 2026 GMT
        Subject: CN=861E97B379A0938A33FDE481BF168A4E7F1E9A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:05:be:ba:c9:80:0b:f2:8d:4c:7c:6b:fe:72:
                    3f:87:78:42:4f:b6:89:2b:2e:5e:d3:25:5d:ae:52:
                    5f:57:4a:ba:b5:76:35:db:ec:b8:25:8c:82:29:f2:
                    1f:ee:02:94:75:2a:e5:e2:f5:4d:88:06:08:15:71:
                    e1:5e:9b:13:59:27:72:f2:0f:bc:40:84:fd:b3:bb:
                    14:87:b3:d6:94:7c:d7:bb:a8:75:30:05:7c:0e:84:
                    ae:89:23:ed:f9:a7:79:c1:fb:7f:72:d2:25:4f:54:
                    2c:f2:8f:13:39:90:bf:4d:25:df:65:a3:67:83:50:
                    85:ab:1d:eb:9f:6a:6d:71:20:0f:c0:20:f0:42:1b:
                    10:f6:53:c3:9a:f8:1c:00:07:e3:f3:07:93:d8:15:
                    be:14:ba:e1:1c:ff:df:05:c9:9b:b0:86:1a:dd:de:
                    3a:6b:23:d1:3f:92:4e:35:16:89:34:b9:55:e0:0d:
                    d0:1f:c0:12:c5:a2:60:a3:43:f8:c5:75:63:c4:7e:
                    ab:b2:80:a5:86:45:83:55:73:9c:dc:eb:37:65:db:
                    35:b4:05:28:c9:ed:15:b8:f4:ae:59:b0:b0:10:05:
                    ec:5b:6e:af:99:dd:77:46:36:9e:c6:49:0a:f7:ed:
                    6a:d6:d9:e3:97:c5:6d:26:8d:4f:3a:46:32:60:39:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1E:97:B3:79:A0:93:8A:33:FD:E4:81:BF:16:8A:4E:7F:1E:9A:03
            X509v3 Authority Key Identifier:
                keyid:11:94:05:12:39:F4:5F:65:9A:ED:41:03:42:2C:F7:83:11:E1:B1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/1194051239F45F659AED4103422CF78311E1B146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1194051239F45F659AED4103422CF78311E1B146.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/323830333a333731303a3a2f33322d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3710::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:08:5f:0d:04:53:0e:d6:51:ee:09:d5:6b:a9:32:ab:55:ac:
         d0:ab:9f:d8:9d:ea:38:e6:e6:43:2d:0d:e3:40:f0:08:35:b4:
         50:94:f1:2b:6a:76:fb:32:f7:8c:3c:92:ad:a4:c2:39:dc:68:
         49:d4:db:d8:08:ad:0b:9e:68:e3:e7:60:61:bc:70:e3:41:63:
         f2:f3:eb:6c:81:39:c6:f5:db:91:99:f6:cf:af:6d:14:1b:03:
         c5:08:d0:15:e7:62:b4:4e:a4:04:40:97:f8:15:47:62:2b:bd:
         9b:3a:87:fd:00:0d:7c:3f:06:f1:ea:78:0f:28:9b:5f:01:a0:
         79:e9:54:a4:69:47:8b:12:f8:39:9e:52:f0:58:c9:5e:3f:43:
         2e:c0:d5:02:9c:d6:ef:df:44:0c:f1:81:de:1c:1e:8b:d8:84:
         ed:17:95:a0:3a:9d:b6:2b:c5:54:0d:ce:26:46:81:92:78:02:
         6e:5e:6c:37:3b:ec:91:80:1d:89:c9:cd:04:58:43:d0:7a:e6:
         e1:25:27:74:61:1f:0c:1e:f2:6d:d8:19:87:65:df:54:c2:2f:
         c6:8a:2d:d9:e8:c8:7a:e2:75:b2:e7:ca:c3:88:54:b2:80:07:
         c9:4f:19:57:e7:e0:16:10:04:e6:c6:04:74:57:1b:0e:04:46:
         9e:55:10:a7
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUSd47QbZltVHY9elPq7Ei2kCKE4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE5NDA1MTIzOUY0NUY2NTlBRUQ0MTAzNDIyQ0Y3ODMx
MUUxQjE0NjAeFw0yNTAyMDQxODM0MzBaFw0yNjAyMDMxODM5MzBaMDMxMTAvBgNV
BAMTKDg2MUU5N0IzNzlBMDkzOEEzM0ZERTQ4MUJGMTY4QTRFN0YxRTlBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Bb66yYAL8o1MfGv+cj+HeEJP
tokrLl7TJV2uUl9XSrq1djXb7LgljIIp8h/uApR1KuXi9U2IBggVceFemxNZJ3Ly
D7xAhP2zuxSHs9aUfNe7qHUwBXwOhK6JI+35p3nB+39y0iVPVCzyjxM5kL9NJd9l
o2eDUIWrHeufam1xIA/AIPBCGxD2U8Oa+BwAB+PzB5PYFb4UuuEc/98FyZuwhhrd
3jprI9E/kk41Fok0uVXgDdAfwBLFomCjQ/jFdWPEfquygKWGRYNVc5zc6zdl2zW0
BSjJ7RW49K5ZsLAQBexbbq+Z3XdGNp7GSQr37WrW2eOXxW0mjU86RjJgObr7AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUhh6Xs3mgk4oz/eSBvxaKTn8emgMwHwYDVR0j
BBgwFoAUEZQFEjn0X2Wa7UEDQiz3gxHhsUYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTNFNzIwMEU2MEQzOTVENThBODc5ODI0QzM4M0IzN0ZE
RDRBREFGNzVCQUI5OUIxMUI1ODFFRDg5QkNFNDVELzAvMTE5NDA1MTIzOUY0NUY2
NTlBRUQ0MTAzNDIyQ0Y3ODMxMUUxQjE0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTk0MDUxMjM5RjQ1RjY1OUFF
RDQxMDM0MjJDRjc4MzExRTFCMTQ2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDUzRTcyMDBFNjBEMzk1RDU4QTg3OTgyNEMzODNCMzdGREQ0QURBRjc1
QkFCOTlCMTFCNTgxRUQ4OUJDRTQ1RC8wLzMyMzgzMDMzM2EzMzM3MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNDMyMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzcQMA0G
CSqGSIb3DQEBCwUAA4IBAQB5CF8NBFMO1lHuCdVrqTKrVazQq5/Yneo45uZDLQ3j
QPAINbRQlPEranb7MveMPJKtpMI53GhJ1NvYCK0Lnmjj52BhvHDjQWPy8+tsgTnG
9duRmfbPr20UGwPFCNAV52K0TqQEQJf4FUdiK72bOof9AA18Pwbx6ngPKJtfAaB5
6VSkaUeLEvg5nlLwWMleP0MuwNUCnNbv30QM8YHeHB6L2ITtF5WgOp22K8VUDc4m
RoGSeAJuXmw3O+yRgB2Jyc0EWEPQeubhJSd0YR8MHvJt2BmHZd9Uwi/Gii3Z6Mh6
4nWy58rDiFSygAfJTxlX5+AWEATmxgR0VxsOBEaeVRCn
-----END CERTIFICATE-----