Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/323830333a3661303a3a2f33322d3332203d3e20323636383834.roa
File:                     323830333a3661303a3a2f33322d3332203d3e20323636383834.roa (raw, json)
Hash identifier:          qYhb8x8oqlQ6pvcLzqdt0ZcUfZUCw9q7dAj5kJxa0+I=
Subject key identifier:   C8:76:F8:90:88:15:74:6D:FC:BB:EC:21:50:FE:44:0A:F1:8C:C5:7E
Certificate issuer:       /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial:       7939B49DF9AAB7788390E8B1D38BB2F25D13F013
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/323830333a3661303a3a2f33322d3332203d3e20323636383834.roa
Signing time:             Tue 04 Feb 2025 18:27:27 +0000
ROA not before:           Tue 04 Feb 2025 18:22:27 +0000
ROA not after:            Tue 03 Feb 2026 18:27:27 +0000
asID:                     266884
IP address blocks:        2803:6a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:39:b4:9d:f9:aa:b7:78:83:90:e8:b1:d3:8b:b2:f2:5d:13:f0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
        Validity
            Not Before: Feb  4 18:22:27 2025 GMT
            Not After : Feb  3 18:27:27 2026 GMT
        Subject: CN=C876F8908815746DFCBBEC2150FE440AF18CC57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:e5:17:03:54:cb:c9:c3:bf:e8:ae:5d:a5:
                    3b:9a:c4:df:d0:12:11:52:67:98:db:e1:0c:8d:0e:
                    76:fc:8c:d6:5e:73:19:c9:96:9f:5f:ee:fc:e4:e7:
                    d9:eb:f9:f7:17:b7:be:ac:b9:b0:dc:4f:22:dc:b9:
                    18:a5:ad:c0:f3:c4:d1:95:31:ab:a5:58:49:22:90:
                    19:cd:a8:c3:1f:95:ed:01:3b:e8:33:35:fd:2c:a5:
                    85:38:28:7b:19:81:45:a2:33:b8:9f:d1:dc:d0:71:
                    40:8f:7a:9b:db:c8:21:5f:0d:83:22:db:8d:15:60:
                    8a:fa:e7:89:9b:cc:66:1a:c5:d3:1a:40:16:54:b1:
                    29:59:da:8b:4f:65:11:5a:c7:af:2f:21:f4:68:cc:
                    cc:36:4a:99:bf:27:17:81:d5:f8:d7:87:01:bb:1b:
                    d7:af:6b:07:76:50:f7:1f:4d:3c:bf:7c:35:d8:c6:
                    22:c4:a6:34:0b:2d:77:c1:c0:0a:be:2c:2e:7a:b9:
                    e6:f2:29:47:0c:bf:86:f7:84:ab:41:ca:5e:75:6f:
                    2a:bc:68:0f:0d:f7:32:c6:24:b1:08:2c:8c:54:0c:
                    aa:ff:b2:6c:3e:e4:71:d9:af:6c:4f:a5:8a:74:dc:
                    69:18:da:e1:c1:d3:a6:53:bf:e5:5f:c7:da:fa:a4:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:76:F8:90:88:15:74:6D:FC:BB:EC:21:50:FE:44:0A:F1:8C:C5:7E
            X509v3 Authority Key Identifier:
                keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/323830333a3661303a3a2f33322d3332203d3e20323636383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:15:6b:e8:ed:cb:98:73:b9:5f:0e:df:1b:2c:7e:5d:d7:
         68:b5:50:75:27:53:ac:26:61:13:47:ef:6f:5a:0e:e8:d4:86:
         fb:91:43:e4:30:74:c7:0c:a8:b1:99:6b:d3:bc:90:d4:9f:58:
         4f:f4:5a:9f:87:50:10:54:e5:bc:c5:26:4d:10:cf:5d:04:61:
         7c:dd:eb:d7:50:33:c8:8c:bb:6e:1f:1d:d6:36:e4:81:4a:ac:
         f4:21:62:82:41:a3:d4:31:98:6f:56:15:f1:42:05:67:08:d6:
         a5:ce:67:88:20:bf:39:38:ba:06:1f:64:0b:85:6e:e0:c7:39:
         04:f9:5c:f5:c5:c7:f2:f5:c5:23:5e:1f:4d:94:bc:94:6b:98:
         55:95:a3:b8:44:46:ab:c1:88:3c:61:72:cf:dc:b5:a7:e3:10:
         61:b8:a0:5a:b7:7e:28:e8:a1:74:59:20:26:19:d6:73:13:b5:
         cd:2d:a9:8e:7c:f3:1e:c4:97:67:26:6f:ab:c7:c3:1b:d4:1a:
         82:83:40:e7:cc:bc:89:23:96:16:75:7e:a0:b1:57:02:01:2e:
         67:bd:66:2a:8f:e9:55:b7:db:1f:da:aa:03:8c:1e:9e:f5:5b:
         dc:73:82:3d:d8:20:3f:c6:af:3d:33:24:b8:68:49:44:53:00:
         0c:c7:c6:54
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUeTm0nfmqt3iDkOix04uy8l0T8BMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBOTFFOThDOTBDMjVEMTgyMjJFMjlBOTJDNERBOUNB
MDBEQTQyMTAeFw0yNTAyMDQxODIyMjdaFw0yNjAyMDMxODI3MjdaMDMxMTAvBgNV
BAMTKEM4NzZGODkwODgxNTc0NkRGQ0JCRUMyMTUwRkU0NDBBRjE4Q0M1N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwy+UXA1TLycO/6K5dpTuaxN/Q
EhFSZ5jb4QyNDnb8jNZecxnJlp9f7vzk59nr+fcXt76subDcTyLcuRilrcDzxNGV
MaulWEkikBnNqMMfle0BO+gzNf0spYU4KHsZgUWiM7if0dzQcUCPepvbyCFfDYMi
240VYIr654mbzGYaxdMaQBZUsSlZ2otPZRFax68vIfRozMw2Spm/JxeB1fjXhwG7
G9evawd2UPcfTTy/fDXYxiLEpjQLLXfBwAq+LC56uebyKUcMv4b3hKtByl51byq8
aA8N9zLGJLEILIxUDKr/smw+5HHZr2xPpYp03GkY2uHB06ZTv+Vfx9r6pIE7AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUyHb4kIgVdG38u+whUP5ECvGMxX4wHwYDVR0j
BBgwFoAUh6kemMkMJdGCIuKaksTanKANpCEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTg4MUYwOTkyNDM5M0E3QjlEODk5NzEwMUIwQUVEMzc3
QkJCOEQ2MUREMDg1NzE5RTNCQTJGMzhFMzczN0E5LzAvODdBOTFFOThDOTBDMjVE
MTgyMjJFMjlBOTJDNERBOUNBMDBEQTQyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84N0E5MUU5OEM5MEMyNUQxODIy
MkUyOUE5MkM0REE5Q0EwMERBNDIxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4ODFGMDk5MjQzOTNBN0I5RDg5OTcxMDFCMEFFRDM3N0JCQjhENjFE
RDA4NTcxOUUzQkEyRjM4RTM3MzdBOS8wLzMyMzgzMDMzM2EzNjYxMzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzYzODM4MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwagMA0G
CSqGSIb3DQEBCwUAA4IBAQCKlRVr6O3LmHO5Xw7fGyx+XddotVB1J1OsJmETR+9v
Wg7o1Ib7kUPkMHTHDKixmWvTvJDUn1hP9Fqfh1AQVOW8xSZNEM9dBGF83evXUDPI
jLtuHx3WNuSBSqz0IWKCQaPUMZhvVhXxQgVnCNalzmeIIL85OLoGH2QLhW7gxzkE
+Vz1xcfy9cUjXh9NlLyUa5hVlaO4REarwYg8YXLP3LWn4xBhuKBat34o6KF0WSAm
GdZzE7XNLamOfPMexJdnJm+rx8Mb1BqCg0DnzLyJI5YWdX6gsVcCAS5nvWYqj+lV
t9sf2qoDjB6e9Vvcc4I92CA/xq89MyS4aElEUwAMx8ZU
-----END CERTIFICATE-----