Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3438203d3e20323732383133.roa
File:                     323830333a383439303a3a2f33322d3438203d3e20323732383133.roa (raw, json)
Hash identifier:          k5T6OiHzHzSzR8EkO4IyG9cXx5hX5zX8RA9ArmfXjj0=
Subject key identifier:   D8:05:B2:AE:44:4C:21:4B:15:D7:97:E8:DC:54:81:08:DA:76:76:2E
Certificate issuer:       /CN=86C24568CB44048FC6A26BDF0F8E2B9E90B59F87
Certificate serial:       0FD64E5EC7E33240D8F5DF80F2DECA2C9DBE9569
Authority key identifier: 86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3438203d3e20323732383133.roa
Signing time:             Thu 06 Jun 2024 21:20:00 +0000
ROA not before:           Thu 06 Jun 2024 21:15:00 +0000
ROA not after:            Thu 05 Jun 2025 21:20:00 +0000
asID:                     272813
IP address blocks:        2803:8490::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d6:4e:5e:c7:e3:32:40:d8:f5:df:80:f2:de:ca:2c:9d:be:95:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86C24568CB44048FC6A26BDF0F8E2B9E90B59F87
        Validity
            Not Before: Jun  6 21:15:00 2024 GMT
            Not After : Jun  5 21:20:00 2025 GMT
        Subject: CN=D805B2AE444C214B15D797E8DC548108DA76762E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:21:04:5e:b5:2e:55:e9:36:5f:b9:71:52:
                    8b:ba:b8:4b:70:ce:b0:dd:fe:44:61:f6:f7:4d:8e:
                    3f:89:6b:fd:19:04:ee:79:a8:8f:2d:ac:fa:39:b6:
                    44:40:9f:34:ae:3a:f8:99:01:94:d1:f8:50:64:8c:
                    d5:77:43:61:33:32:84:69:79:ab:1d:cb:2e:d9:e8:
                    2d:1b:6b:79:ac:52:72:ce:bc:94:64:98:a6:30:e4:
                    33:0c:11:ff:69:6f:a8:a7:72:79:1c:45:48:cd:f5:
                    3d:a3:84:74:b1:77:21:c4:f5:95:18:0d:24:13:44:
                    76:e3:6e:37:fb:51:1e:82:ec:33:82:be:5f:9b:e7:
                    ab:d3:4d:53:88:5f:00:64:10:3c:3b:0b:08:f7:9f:
                    05:0e:6b:b2:f4:f9:b2:95:f4:48:cb:d3:3c:fa:9c:
                    93:79:da:75:ed:75:ad:d6:bb:2f:62:7f:52:99:ea:
                    08:4c:0f:37:df:6e:11:91:27:bb:02:78:ce:df:a0:
                    19:3a:c2:1c:aa:64:fb:51:a8:af:0d:69:ac:c7:3e:
                    ac:9b:3d:9b:bd:2d:0b:0a:fd:73:70:30:95:9c:bf:
                    4e:12:c9:d3:bd:27:41:ac:1c:e8:19:fc:81:66:19:
                    1d:26:d5:12:3a:af:ac:7a:16:d3:ee:36:8d:cd:e2:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:05:B2:AE:44:4C:21:4B:15:D7:97:E8:DC:54:81:08:DA:76:76:2E
            X509v3 Authority Key Identifier:
                keyid:86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/323830333a383439303a3a2f33322d3438203d3e20323732383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8490::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:98:7a:95:2b:03:a6:97:d2:c7:00:42:9b:93:72:9c:e7:
         a3:9c:8f:41:34:8d:f8:60:ba:b3:0c:2d:5c:1a:0f:ba:a4:58:
         09:dc:d1:1f:1d:01:4c:a7:80:0f:d8:d4:c2:f1:74:1a:56:de:
         f0:39:08:b6:1a:3e:0b:aa:91:60:13:48:95:f8:97:a2:10:77:
         6a:d8:fd:c4:50:3d:4b:9c:79:d3:33:52:1c:ff:8f:ae:89:b2:
         f8:6b:99:fe:78:34:89:f2:f0:6c:59:35:fd:11:8e:d1:3f:47:
         85:c4:65:b6:c3:77:f9:c0:0c:67:7d:3b:af:04:e4:9e:4c:5c:
         ae:eb:54:94:cd:fd:3b:75:5b:d6:83:a7:36:10:9c:81:59:3f:
         f5:b8:1a:4e:de:39:34:b8:a7:53:2c:ec:a4:e2:46:20:ec:52:
         44:74:cd:e8:99:97:4c:02:d9:87:c2:60:a5:ad:b6:95:b1:3d:
         b4:74:0a:e9:2f:d2:24:34:99:35:57:4e:75:51:2b:28:de:d0:
         6a:ba:26:d7:7d:cc:1e:e4:95:fd:79:bd:00:34:e1:e3:55:7b:
         a8:9c:3b:6b:42:43:2a:80:2d:04:5d:46:79:31:15:18:62:66:
         1e:f7:bf:a2:cc:ad:65:61:a1:12:ae:bb:f7:29:1a:37:a8:e8:
         25:c5:71:b0
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUD9ZOXsfjMkDY9d+A8t7KLJ2+lWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZDMjQ1NjhDQjQ0MDQ4RkM2QTI2QkRGMEY4RTJCOUU5
MEI1OUY4NzAeFw0yNDA2MDYyMTE1MDBaFw0yNTA2MDUyMTIwMDBaMDMxMTAvBgNV
BAMTKEQ4MDVCMkFFNDQ0QzIxNEIxNUQ3OTdFOERDNTQ4MTA4REE3Njc2MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7yEEXrUuVek2X7lxUou6uEtw
zrDd/kRh9vdNjj+Ja/0ZBO55qI8trPo5tkRAnzSuOviZAZTR+FBkjNV3Q2EzMoRp
easdyy7Z6C0ba3msUnLOvJRkmKYw5DMMEf9pb6incnkcRUjN9T2jhHSxdyHE9ZUY
DSQTRHbjbjf7UR6C7DOCvl+b56vTTVOIXwBkEDw7Cwj3nwUOa7L0+bKV9EjL0zz6
nJN52nXtda3Wuy9if1KZ6ghMDzffbhGRJ7sCeM7foBk6whyqZPtRqK8NaazHPqyb
PZu9LQsK/XNwMJWcv04SydO9J0GsHOgZ/IFmGR0m1RI6r6x6FtPuNo3N4g2JAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU2AWyrkRMIUsV15fo3FSBCNp2di4wHwYDVR0j
BBgwFoAUhsJFaMtEBI/GomvfD44rnpC1n4cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTcwNTg4MEQxOUQwMjU1ODNGQTVFRDIxMjU3OTRCNzY5
Q0Y1NUI4MTdDQTIxREM3OUQxQjJGM0NFNDhDQTUwLzAvODZDMjQ1NjhDQjQ0MDQ4
RkM2QTI2QkRGMEY4RTJCOUU5MEI1OUY4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NkMyNDU2OENCNDQwNDhGQzZB
MjZCREYwRjhFMkI5RTkwQjU5Rjg3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3MDU4ODBEMTlEMDI1NTgzRkE1RUQyMTI1Nzk0Qjc2OUNGNTVCODE3
Q0EyMURDNzlEMUIyRjNDRTQ4Q0E1MC8wLzMyMzgzMDMzM2EzODM0MzkzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjM4MzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDhJAw
DQYJKoZIhvcNAQELBQADggEBAJ6tmHqVKwOml9LHAEKbk3Kc56Ocj0E0jfhgurMM
LVwaD7qkWAnc0R8dAUyngA/Y1MLxdBpW3vA5CLYaPguqkWATSJX4l6IQd2rY/cRQ
PUucedMzUhz/j66Jsvhrmf54NIny8GxZNf0RjtE/R4XEZbbDd/nADGd9O68E5J5M
XK7rVJTN/Tt1W9aDpzYQnIFZP/W4Gk7eOTS4p1Ms7KTiRiDsUkR0zeiZl0wC2YfC
YKWttpWxPbR0Cukv0iQ0mTVXTnVRKyje0Gq6Jtd9zB7klf15vQA04eNVe6icO2tC
QyqALQRdRnkxFRhiZh73v6LMrWVhoRKuu/cpGjeo6CXFcbA=
-----END CERTIFICATE-----