Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          6N8HHMAXepeFfoCObXdA6xSlTT67IMLbGJgYU1IWcVg=
Subject key identifier:   BC:DD:3A:12:C2:8E:70:12:77:2C:B1:EF:D2:9A:71:C4:9E:50:0B:2F
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       30D6D7598DE7F4F1A2FF46A40C8D61DBE0F9E1C0
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 04 Feb 2025 18:29:19 +0000
ROA not before:           Tue 04 Feb 2025 18:24:19 +0000
ROA not after:            Tue 03 Feb 2026 18:29:19 +0000
asID:                     273113
IP address blocks:        2803:6850::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d6:d7:59:8d:e7:f4:f1:a2:ff:46:a4:0c:8d:61:db:e0:f9:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Feb  4 18:24:19 2025 GMT
            Not After : Feb  3 18:29:19 2026 GMT
        Subject: CN=BCDD3A12C28E7012772CB1EFD29A71C49E500B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:b9:de:4a:c7:7c:fa:68:e0:ee:64:ad:42:
                    06:58:0e:9e:af:ba:a6:d5:fd:e2:49:1f:2e:6e:08:
                    54:b4:06:98:89:d5:fc:d7:28:4e:d2:45:e3:32:b8:
                    12:7a:c0:16:b4:53:07:bf:33:3e:1f:7e:8e:1f:1e:
                    25:67:43:23:35:49:83:7b:5d:09:fa:f2:ee:a8:3c:
                    22:54:31:9c:8e:fa:f4:e2:cd:8a:1f:5a:92:04:f2:
                    c3:f6:0a:c4:c5:9e:30:74:b4:6d:27:6a:f1:06:7c:
                    14:85:cf:2a:8b:08:7e:76:da:fa:35:b2:d5:1b:06:
                    36:38:28:dd:75:b9:db:23:ea:94:1a:fc:3a:bd:fc:
                    a8:1c:2b:3a:b6:f2:21:8b:ad:ad:05:25:ab:39:4c:
                    0c:8d:79:23:22:88:db:ad:9d:36:cb:1b:44:94:77:
                    fe:a6:e1:c2:06:7f:f0:b6:d3:0c:16:f9:6d:cf:d2:
                    67:a3:5b:86:91:4f:93:e1:5c:f1:f8:d3:c1:21:6f:
                    d1:b9:20:60:2e:43:b3:99:6c:8b:cd:67:b4:b2:59:
                    97:a5:63:c3:c2:a2:a3:cc:b8:3a:86:a1:72:59:b3:
                    05:69:3c:7e:62:fc:b8:14:1b:26:f3:50:99:f9:5d:
                    e1:e5:de:27:3c:d5:d7:5e:27:e8:b0:0d:0c:83:4e:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DD:3A:12:C2:8E:70:12:77:2C:B1:EF:D2:9A:71:C4:9E:50:0B:2F
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:1f:89:19:46:66:13:bd:a6:7a:d9:1f:04:96:89:03:c0:df:
         c2:40:4e:2f:d5:7c:70:1c:27:53:a7:1c:c9:41:f6:43:b6:03:
         4c:5d:84:10:5a:38:e3:89:70:83:a2:4a:1d:9e:ab:2c:f9:3c:
         d2:37:32:82:02:63:f6:59:3b:99:b9:e7:81:fe:46:a4:41:02:
         ae:27:5b:fd:b4:5d:f1:95:e1:f6:32:b3:5d:09:54:7d:54:1a:
         7e:13:3f:28:86:16:cf:64:f0:29:ba:b1:c7:26:42:7d:8c:97:
         9d:bb:49:0f:e1:46:ac:e3:50:c7:1a:f2:19:4d:d3:15:e4:29:
         3b:df:94:2a:ff:db:52:fd:5d:b1:23:e0:96:25:e6:a2:c5:1d:
         87:4a:5f:61:b1:56:03:c9:33:f7:dc:82:49:fa:e9:c0:b7:d6:
         c7:fc:b6:fd:8c:e2:86:04:8a:96:8b:3f:0b:06:20:b7:46:62:
         7a:58:14:19:f1:6b:fe:bd:37:42:87:70:11:dc:73:1c:84:c1:
         0a:e0:13:5d:bf:21:15:19:a7:94:33:ac:2a:bf:a6:24:43:d7:
         b8:18:c9:f4:6a:d1:90:53:04:5b:b2:dd:16:52:26:8a:5e:17:
         3b:d0:38:a1:c0:66:97:f2:1d:17:18:70:0e:4c:f9:92:26:3a:
         60:dd:ef:b0
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUMNbXWY3n9PGi/0akDI1h2+D54cAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MkE4RDZDMTRGOTQ1MDBFN0ZGNjExMURDQzVENTEw
NzE0Mzc5ODAeFw0yNTAyMDQxODI0MTlaFw0yNjAyMDMxODI5MTlaMDMxMTAvBgNV
BAMTKEJDREQzQTEyQzI4RTcwMTI3NzJDQjFFRkQyOUE3MUM0OUU1MDBCMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCes7neSsd8+mjg7mStQgZYDp6v
uqbV/eJJHy5uCFS0BpiJ1fzXKE7SReMyuBJ6wBa0Uwe/Mz4ffo4fHiVnQyM1SYN7
XQn68u6oPCJUMZyO+vTizYofWpIE8sP2CsTFnjB0tG0navEGfBSFzyqLCH522vo1
stUbBjY4KN11udsj6pQa/Dq9/KgcKzq28iGLra0FJas5TAyNeSMiiNutnTbLG0SU
d/6m4cIGf/C20wwW+W3P0mejW4aRT5PhXPH408Ehb9G5IGAuQ7OZbIvNZ7SyWZel
Y8PCoqPMuDqGoXJZswVpPH5i/LgUGybzUJn5XeHl3ic81ddeJ+iwDQyDTgx5AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUvN06EsKOcBJ3LLHv0ppxxJ5QCy8wHwYDVR0j
BBgwFoAUFkKo1sFPlFAOf/YRHcxdUQcUN5gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RTdFMzlFN0QzOTBDOEZDN0NBODExNDRCRkUwOEIxMjJC
NDI3QjBBMDUxMzMyNEQ3NDQ0NDdBNDNDNzZBM0E5LzAvMTY0MkE4RDZDMTRGOTQ1
MDBFN0ZGNjExMURDQzVENTEwNzE0Mzc5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjQyQThENkMxNEY5NDUwMEU3
RkY2MTExRENDNUQ1MTA3MTQzNzk4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEU3RTM5RTdEMzkwQzhGQzdDQTgxMTQ0QkZFMDhCMTIyQjQyN0IwQTA1
MTMzMjRENzQ0NDQ3QTQzQzc2QTNBOS8wLzMyMzgzMDMzM2EzNjM4MzUzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgDaFAA
ADANBgkqhkiG9w0BAQsFAAOCAQEAGh+JGUZmE72metkfBJaJA8DfwkBOL9V8cBwn
U6ccyUH2Q7YDTF2EEFo444lwg6JKHZ6rLPk80jcyggJj9lk7mbnngf5GpEECridb
/bRd8ZXh9jKzXQlUfVQafhM/KIYWz2TwKbqxxyZCfYyXnbtJD+FGrONQxxryGU3T
FeQpO9+UKv/bUv1dsSPgliXmosUdh0pfYbFWA8kz99yCSfrpwLfWx/y2/YzihgSK
los/CwYgt0ZielgUGfFr/r03QodwEdxzHITBCuATXb8hFRmnlDOsKr+mJEPXuBjJ
9GrRkFMEW7LdFlImil4XO9A4ocBml/IdFxhwDkz5kiY6YN3vsA==
-----END CERTIFICATE-----