Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383731303a3a2f34342d3438203d3e20323732383036.roa
File:                     323830333a636436303a383731303a3a2f34342d3438203d3e20323732383036.roa (raw, json)
Hash identifier:          vcHCoeqaPsicUdczZKo2GLZlh0/JNxxva8aIJbbfAho=
Subject key identifier:   7F:CF:D9:8B:A4:FD:6C:41:94:5E:64:43:A5:CC:BF:6D:A2:14:F8:C8
Certificate issuer:       /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
Certificate serial:       40BF0E05DE01836984BAC05E5E770CD4A7F2F317
Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383731303a3a2f34342d3438203d3e20323732383036.roa
Signing time:             Fri 31 Jan 2025 16:55:00 +0000
ROA not before:           Fri 31 Jan 2025 16:50:00 +0000
ROA not after:            Fri 30 Jan 2026 16:55:00 +0000
asID:                     272806
IP address blocks:        2803:cd60:8710::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bf:0e:05:de:01:83:69:84:ba:c0:5e:5e:77:0c:d4:a7:f2:f3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
        Validity
            Not Before: Jan 31 16:50:00 2025 GMT
            Not After : Jan 30 16:55:00 2026 GMT
        Subject: CN=7FCFD98BA4FD6C41945E6443A5CCBF6DA214F8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:aa:2d:e0:5e:ea:0b:27:7f:b3:41:9d:a5:
                    ae:c7:28:19:35:60:71:50:e2:1d:67:12:5a:68:95:
                    0e:8a:fc:86:17:ea:79:2c:32:9f:b3:fe:20:11:f8:
                    ad:87:a1:e3:b1:4c:10:06:a7:b3:e1:6d:5f:66:b3:
                    c9:78:2c:d8:eb:c7:64:93:f7:02:b7:5a:9a:31:59:
                    d9:f2:0f:a0:5e:ee:0e:e6:f3:b6:99:5f:da:ee:d5:
                    e4:82:71:63:fd:3d:24:0d:d4:f5:74:e2:d6:0e:b4:
                    e4:3b:ec:84:72:1f:f3:c5:37:fd:8c:99:7b:49:9b:
                    06:7b:87:df:c4:75:0f:03:c0:ef:c9:6b:5a:a9:2f:
                    7f:df:86:fd:52:cd:b3:aa:b7:9f:d2:e5:26:af:56:
                    df:df:7b:c6:8c:b4:1e:09:08:d8:9b:02:57:b2:aa:
                    44:d5:51:ff:ea:9a:eb:95:d2:35:28:1c:9c:fd:a6:
                    43:0d:ae:12:a9:44:ef:4b:4a:99:e2:fa:1c:18:75:
                    e1:12:8b:36:31:df:fe:63:7f:45:dc:df:4a:56:dc:
                    b8:59:c4:fc:03:53:dc:40:2a:74:d0:ce:aa:08:79:
                    8a:46:82:f8:c9:e8:62:f3:ed:d9:22:d9:36:01:ac:
                    fd:3f:7d:2e:8b:1e:bb:41:d0:5e:12:7d:ab:78:66:
                    36:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CF:D9:8B:A4:FD:6C:41:94:5E:64:43:A5:CC:BF:6D:A2:14:F8:C8
            X509v3 Authority Key Identifier:
                keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383731303a3a2f34342d3438203d3e20323732383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd60:8710::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:ce:f2:a1:1d:d8:f5:1c:fd:55:9d:9b:56:c9:3f:b5:fd:aa:
         22:de:66:e4:b8:ec:f5:ac:67:7e:02:fb:90:bd:f2:ae:ad:8e:
         b3:f7:29:d6:3a:9e:d8:6a:07:03:56:f4:2a:59:c3:48:64:2a:
         81:06:57:35:28:d4:e2:16:ae:b1:cf:70:30:d0:25:fd:09:67:
         12:20:cf:56:bb:c4:ef:2d:2d:e9:fa:5c:3f:d9:be:84:4d:e1:
         3a:de:63:f4:d3:cb:64:75:e0:8f:84:17:73:e5:2d:ac:84:2a:
         c8:ff:f9:6d:4f:94:2f:07:62:8c:b0:4c:5f:4c:49:fc:4b:a3:
         39:56:0b:50:8a:e1:80:38:7e:48:fb:a3:30:24:1e:e9:4f:0d:
         84:1f:0d:d3:48:0c:1c:1e:c0:0a:8a:cf:71:87:c3:73:2e:08:
         28:ce:a2:de:63:81:41:36:4b:4e:a5:f0:a1:1b:21:b4:37:2d:
         06:42:4f:70:e6:aa:ef:26:d8:76:50:2a:b1:06:b1:2e:eb:b6:
         83:02:2f:d6:6f:5b:13:a7:92:2b:a8:3a:68:f4:c1:b8:d4:d2:
         dc:a9:51:af:d7:73:07:cd:1a:f8:ed:18:3c:55:3f:5e:56:70:
         d4:f9:38:ce:52:58:fd:0d:f2:2d:f0:43:db:61:0a:d3:3c:3e:
         41:15:09:af
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUQL8OBd4Bg2mEusBeXncM1Kfy8xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFERDkxMzhGRTBGNjgwOEIwOTk4NTI2NzcxMTI5QkEz
Q0RGNzIyMzAeFw0yNTAxMzExNjUwMDBaFw0yNjAxMzAxNjU1MDBaMDMxMTAvBgNV
BAMTKDdGQ0ZEOThCQTRGRDZDNDE5NDVFNjQ0M0E1Q0NCRjZEQTIxNEY4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTd6ot4F7qCyd/s0Gdpa7HKBk1
YHFQ4h1nElpolQ6K/IYX6nksMp+z/iAR+K2HoeOxTBAGp7PhbV9ms8l4LNjrx2ST
9wK3WpoxWdnyD6Be7g7m87aZX9ru1eSCcWP9PSQN1PV04tYOtOQ77IRyH/PFN/2M
mXtJmwZ7h9/EdQ8DwO/Ja1qpL3/fhv1SzbOqt5/S5SavVt/fe8aMtB4JCNibAley
qkTVUf/qmuuV0jUoHJz9pkMNrhKpRO9LSpni+hwYdeESizYx3/5jf0Xc30pW3LhZ
xPwDU9xAKnTQzqoIeYpGgvjJ6GLz7dki2TYBrP0/fS6LHrtB0F4Sfat4ZjafAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUf8/Zi6T9bEGUXmRDpcy/baIU+MgwHwYDVR0j
BBgwFoAUCt2ROP4PaAiwmYUmdxEpujzfciMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjU1MDZEODExRTVEQUJCMEQxRDE1NDY3RUNBODIwQTYz
RTQ5RTU3RTIxNThCQUY2OEM1OTUwQzlGODI4QkI2LzAvMEFERDkxMzhGRTBGNjgw
OEIwOTk4NTI2NzcxMTI5QkEzQ0RGNzIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUREOTEzOEZFMEY2ODA4QjA5
OTg1MjY3NzExMjlCQTNDREY3MjIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI1NTA2RDgxMUU1REFCQjBEMUQxNTQ2N0VDQTgyMEE2M0U0OUU1N0Uy
MTU4QkFGNjhDNTk1MEM5RjgyOEJCNi8wLzMyMzgzMDMzM2E2MzY0MzYzMDNhMzgz
NzMxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjM3MzIzODMwMzYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQoA81ghxAwDQYJKoZIhvcNAQELBQADggEBAAvO8qEd2PUc/VWdm1bJP7X9
qiLeZuS47PWsZ34C+5C98q6tjrP3KdY6nthqBwNW9CpZw0hkKoEGVzUo1OIWrrHP
cDDQJf0JZxIgz1a7xO8tLen6XD/ZvoRN4TreY/TTy2R14I+EF3PlLayEKsj/+W1P
lC8HYoywTF9MSfxLozlWC1CK4YA4fkj7ozAkHulPDYQfDdNIDBwewAqKz3GHw3Mu
CCjOot5jgUE2S06l8KEbIbQ3LQZCT3Dmqu8m2HZQKrEGsS7rtoMCL9ZvWxOnkiuo
Omj0wbjU0typUa/XcwfNGvjtGDxVP15WcNT5OM5SWP0N8i3wQ9thCtM8PkEVCa8=
-----END CERTIFICATE-----