Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/323830333a336530303a3a2f33322d3332203d3e203532343134.roa
File:                     323830333a336530303a3a2f33322d3332203d3e203532343134.roa (raw, json)
Hash identifier:          Xchtgz5C3bfQwzJaV6eOUwMSZU83ZJOt8Vc9ql8VEBc=
Subject key identifier:   19:24:F8:CC:F4:F5:F2:08:7E:9E:E7:37:79:C2:20:CD:4C:C5:F0:C8
Certificate issuer:       /CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
Certificate serial:       280117723D4781BC3564BD2DB08F8CA8E1084BF9
Authority key identifier: 93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/323830333a336530303a3a2f33322d3332203d3e203532343134.roa
Signing time:             Tue 04 Feb 2025 19:56:46 +0000
ROA not before:           Tue 04 Feb 2025 19:51:46 +0000
ROA not after:            Tue 03 Feb 2026 19:56:46 +0000
asID:                     52414
IP address blocks:        2803:3e00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:01:17:72:3d:47:81:bc:35:64:bd:2d:b0:8f:8c:a8:e1:08:4b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
        Validity
            Not Before: Feb  4 19:51:46 2025 GMT
            Not After : Feb  3 19:56:46 2026 GMT
        Subject: CN=1924F8CCF4F5F2087E9EE73779C220CD4CC5F0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:bb:17:bb:2d:09:cb:49:76:c4:ae:9c:be:
                    e6:34:09:f6:81:05:ca:5d:9c:7b:d2:7b:9a:e0:7a:
                    a3:51:9d:5d:3f:d2:9a:af:93:a4:97:74:53:84:3d:
                    a8:cb:3a:ea:dd:e0:7b:6c:66:eb:71:eb:87:4c:e7:
                    75:92:b4:2a:5b:d7:dc:44:67:a8:eb:50:23:50:6f:
                    6c:9f:5a:e1:b7:5a:0f:e5:b7:1e:84:7c:55:e0:26:
                    51:b0:ca:eb:15:bc:61:7e:a6:da:3d:97:3f:c8:26:
                    47:d4:b4:9d:d1:70:53:78:8f:d7:fa:07:0d:99:36:
                    5b:db:1d:27:12:db:40:71:b5:41:94:55:30:a4:ff:
                    0b:ea:d2:79:c8:71:2f:43:8e:eb:5c:16:14:83:fb:
                    f0:d1:4f:2f:c1:72:94:6d:65:c5:90:c7:5e:05:e9:
                    cc:4d:a2:99:08:c5:81:80:8b:eb:c9:3f:44:86:32:
                    40:80:8f:7f:ad:b7:67:eb:3e:46:b7:4c:67:b1:bc:
                    7d:2a:22:0c:11:5d:5d:11:a7:78:0c:34:e8:40:7e:
                    81:f3:87:ec:c2:45:00:b5:20:f4:86:82:72:f8:d4:
                    21:ed:a2:91:f1:4d:74:4b:03:a0:d5:e5:0e:31:8b:
                    f6:15:16:c9:59:d2:60:2d:0c:14:7a:c6:b9:08:01:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:24:F8:CC:F4:F5:F2:08:7E:9E:E7:37:79:C2:20:CD:4C:C5:F0:C8
            X509v3 Authority Key Identifier:
                keyid:93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/323830333a336530303a3a2f33322d3332203d3e203532343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:11:70:1e:ad:c7:5c:cd:51:27:68:4f:8d:9a:cd:a3:0f:5f:
         1a:cb:51:06:92:52:94:32:cb:38:c5:51:be:e4:43:d8:f7:e4:
         17:2d:e6:9d:21:c4:ed:79:11:3d:c3:53:e3:cc:5e:5b:3a:09:
         e9:04:2a:39:d5:ae:f2:ea:84:cd:3d:91:30:0e:24:b0:8d:df:
         7f:93:d7:da:14:50:52:5a:37:1a:db:fc:b9:43:7d:b5:d3:65:
         d7:7a:76:0a:a7:29:e6:ef:6b:74:50:4f:1b:f1:e0:c0:49:94:
         68:81:8d:52:44:1e:55:29:da:96:1d:97:f6:a1:2e:86:a3:ba:
         67:70:4c:64:b0:eb:6d:fc:fc:52:60:77:76:16:b1:04:d9:42:
         71:7b:68:23:78:50:b0:1f:d8:63:47:ec:f2:b8:3a:de:fe:35:
         d0:52:a1:50:60:10:97:64:30:94:f0:a1:01:a6:83:ea:90:e0:
         61:00:6f:49:77:54:c3:07:bb:e8:04:84:ce:5b:60:19:59:3b:
         42:a3:c9:a4:3a:cc:2c:a7:22:00:ae:d8:59:14:57:c9:c9:eb:
         31:e4:8f:27:b2:ab:46:16:9d:72:94:38:c0:fb:4f:25:fc:fb:
         6e:45:59:10:be:3c:46:3b:d2:b1:4f:b4:73:d4:93:a4:21:85:
         9f:c9:c5:46
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUKAEXcj1Hgbw1ZL0tsI+MqOEIS/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNENDFCMzk5MTU0MzMxQzRDMEFBMEM0RUJDMTk0QUEw
QTVERUVERTAeFw0yNTAyMDQxOTUxNDZaFw0yNjAyMDMxOTU2NDZaMDMxMTAvBgNV
BAMTKDE5MjRGOENDRjRGNUYyMDg3RTlFRTczNzc5QzIyMENENENDNUYwQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtrsXuy0Jy0l2xK6cvuY0CfaB
BcpdnHvSe5rgeqNRnV0/0pqvk6SXdFOEPajLOurd4HtsZutx64dM53WStCpb19xE
Z6jrUCNQb2yfWuG3Wg/ltx6EfFXgJlGwyusVvGF+pto9lz/IJkfUtJ3RcFN4j9f6
Bw2ZNlvbHScS20BxtUGUVTCk/wvq0nnIcS9DjutcFhSD+/DRTy/BcpRtZcWQx14F
6cxNopkIxYGAi+vJP0SGMkCAj3+tt2frPka3TGexvH0qIgwRXV0Rp3gMNOhAfoHz
h+zCRQC1IPSGgnL41CHtopHxTXRLA6DV5Q4xi/YVFslZ0mAtDBR6xrkIAf7NAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUGST4zPT18gh+nuc3ecIgzUzF8MgwHwYDVR0j
BBgwFoAUk9QbOZFUMxxMCqDE68GUqgpd7t4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80N0ZEMjE5NDE5RkU0RjU4MjBCNTFBNjNFM0JERDRFOUFF
QTQyNDAzOTE1MTBDRDY1M0ZENkIxMUVBQ0MxRUQwLzAvOTNENDFCMzk5MTU0MzMx
QzRDMEFBMEM0RUJDMTk0QUEwQTVERUVERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0Q0MUIzOTkxNTQzMzFDNEMw
QUEwQzRFQkMxOTRBQTBBNURFRURFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDdGRDIxOTQxOUZFNEY1ODIwQjUxQTYzRTNCREQ0RTlBRUE0MjQwMzkx
NTEwQ0Q2NTNGRDZCMTFFQUNDMUVEMC8wLzMyMzgzMDMzM2EzMzY1MzAzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNDMxMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAz4AMA0G
CSqGSIb3DQEBCwUAA4IBAQBnEXAercdczVEnaE+Nms2jD18ay1EGklKUMss4xVG+
5EPY9+QXLeadIcTteRE9w1PjzF5bOgnpBCo51a7y6oTNPZEwDiSwjd9/k9faFFBS
Wjca2/y5Q32102XXenYKpynm72t0UE8b8eDASZRogY1SRB5VKdqWHZf2oS6Go7pn
cExksOtt/PxSYHd2FrEE2UJxe2gjeFCwH9hjR+zyuDre/jXQUqFQYBCXZDCU8KEB
poPqkOBhAG9Jd1TDB7voBITOW2AZWTtCo8mkOswspyIArthZFFfJyesx5I8nsqtG
Fp1ylDjA+08l/PtuRVkQvjxGO9KxT7Rz1JOkIYWfycVG
-----END CERTIFICATE-----