Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3537383a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3537383a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          yueqM+UgevSVzwUyf68kB5i79hhHXGOy6+JovnHW0rA=
Subject key identifier:   77:EC:50:AB:A9:E5:70:3B:C0:7C:23:DF:34:BA:C1:70:5C:19:73:E4
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       48858FC09F0A6F37B38A2B1B459D78CA923D5218
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3537383a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:41 +0000
ROA not before:           Tue 04 Feb 2025 18:15:41 +0000
ROA not after:            Tue 03 Feb 2026 18:20:41 +0000
asID:                     52423
IP address blocks:        2803:6900:578::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:85:8f:c0:9f:0a:6f:37:b3:8a:2b:1b:45:9d:78:ca:92:3d:52:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:41 2025 GMT
            Not After : Feb  3 18:20:41 2026 GMT
        Subject: CN=77EC50ABA9E5703BC07C23DF34BAC1705C1973E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:18:9d:5a:81:24:49:4e:30:1f:29:4c:cb:
                    15:1f:af:ab:b8:24:cf:67:78:8a:69:b6:19:ba:0f:
                    ea:ec:0d:80:1f:d4:22:48:e3:41:4c:f1:01:86:ac:
                    e8:e0:92:3e:7a:d2:bf:22:b4:66:d3:ee:e1:c5:11:
                    96:d3:7c:ce:5b:e9:8f:65:ac:da:c2:6d:f0:e6:27:
                    81:30:0b:71:2c:8a:4f:25:e8:5d:11:7a:d1:99:5b:
                    d8:31:14:2f:e9:ae:a6:cc:bd:29:0d:76:68:c6:45:
                    c3:30:7b:c9:c3:0e:ae:ed:30:97:de:a8:e5:74:01:
                    d5:77:11:ea:b9:70:73:c6:23:d6:51:9e:e0:08:4a:
                    d1:9d:84:e2:5e:87:a3:e5:8a:dd:a2:20:16:ef:d7:
                    97:73:9e:74:2d:2d:42:f7:d8:42:36:ad:10:e6:3a:
                    ad:19:fb:86:07:a5:2f:e4:fd:fd:3b:d7:60:71:08:
                    43:b4:11:46:c0:86:54:b1:c1:ea:ad:91:be:61:05:
                    d3:90:bd:b2:da:2b:2f:e0:4c:5f:12:99:51:94:cf:
                    25:dc:1a:f4:cd:70:82:a4:04:97:42:60:ba:ac:d7:
                    5f:d5:a3:c4:1c:86:76:84:dc:8b:c5:94:68:64:39:
                    7b:28:dd:d0:9b:4a:ea:32:95:19:3e:f5:f9:a2:ea:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EC:50:AB:A9:E5:70:3B:C0:7C:23:DF:34:BA:C1:70:5C:19:73:E4
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3537383a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:578::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:04:bb:b9:fd:67:e8:a5:7e:c9:9d:c2:4e:d4:af:09:83:5c:
         82:73:2e:45:6b:cf:f0:48:ab:62:b3:6d:fa:92:2a:2c:cd:14:
         3d:91:9b:03:09:3d:f9:8f:1d:40:68:26:3c:da:2b:98:78:37:
         21:79:55:98:bc:2d:7d:ae:35:df:77:a6:3a:f4:33:5f:68:78:
         2a:3c:71:3a:32:c8:d5:27:1c:fb:3f:0a:9f:27:17:df:8e:5c:
         2e:d4:fe:25:bd:75:e2:8d:3f:ae:48:08:1d:dd:cc:d5:1a:9b:
         da:61:25:13:de:44:54:4b:62:f1:d0:af:5e:ec:f6:59:ce:ae:
         1f:31:e7:18:47:05:1f:90:6e:d3:9a:05:d6:10:2f:b7:b2:bf:
         1e:5e:a5:e0:99:97:e6:37:0b:31:c2:a2:03:a7:cd:be:0e:86:
         61:fc:98:0f:17:cb:46:57:73:26:9c:05:f2:04:5c:80:6a:cc:
         e0:fc:f3:38:d5:13:f4:ee:3f:39:59:d6:80:ea:aa:ad:55:73:
         26:18:72:f3:3f:f2:b3:2c:d2:ac:d3:0f:30:66:8d:83:f1:c2:
         15:00:6e:94:4c:8f:61:64:07:2e:04:e7:5b:2e:d6:1b:ab:21:
         02:c9:d6:45:1d:5c:f3:a7:7e:c3:16:36:e7:42:60:9c:7e:d3:
         60:64:79:d3
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUSIWPwJ8KbzeziisbRZ14ypI9UhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIyQTE5MDQxRjdBRDhEMEI0Rjk3RDZEREFGQzk5QzI1
OTAyNzZBQjAeFw0yNTAyMDQxODE1NDFaFw0yNjAyMDMxODIwNDFaMDMxMTAvBgNV
BAMTKDc3RUM1MEFCQTlFNTcwM0JDMDdDMjNERjM0QkFDMTcwNUMxOTczRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QxidWoEkSU4wHylMyxUfr6u4
JM9neIppthm6D+rsDYAf1CJI40FM8QGGrOjgkj560r8itGbT7uHFEZbTfM5b6Y9l
rNrCbfDmJ4EwC3Esik8l6F0RetGZW9gxFC/prqbMvSkNdmjGRcMwe8nDDq7tMJfe
qOV0AdV3Eeq5cHPGI9ZRnuAIStGdhOJeh6Plit2iIBbv15dznnQtLUL32EI2rRDm
Oq0Z+4YHpS/k/f0712BxCEO0EUbAhlSxweqtkb5hBdOQvbLaKy/gTF8SmVGUzyXc
GvTNcIKkBJdCYLqs11/Vo8QchnaE3IvFlGhkOXso3dCbSuoylRk+9fmi6tEtAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUd+xQq6nlcDvAfCPfNLrBcFwZc+QwHwYDVR0j
BBgwFoAUUioZBB962NC0+X1t2vyZwlkCdqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MDcyQ0M3QUM5OTM1QTk2QUVDREMzQjE1NkYwQkUyODVB
QzBEMkYzRTJCMjY0NjZGODdEN0MzOTYzOUZFN0M5LzAvNTIyQTE5MDQxRjdBRDhE
MEI0Rjk3RDZEREFGQzk5QzI1OTAyNzZBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjJBMTkwNDFGN0FEOEQwQjRG
OTdENkREQUZDOTlDMjU5MDI3NkFCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTA3MkNDN0FDOTkzNUE5NkFFQ0RDM0IxNTZGMEJFMjg1QUMwRDJGM0Uy
QjI2NDY2Rjg3RDdDMzk2MzlGRTdDOS8wLzMyMzgzMDMzM2EzNjM5MzAzMDNhMzUz
NzM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjM0MzIzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDaQAFeDANBgkqhkiG9w0BAQsFAAOCAQEAEgS7uf1n6KV+yZ3CTtSvCYNcgnMu
RWvP8EirYrNt+pIqLM0UPZGbAwk9+Y8dQGgmPNormHg3IXlVmLwtfa4133emOvQz
X2h4KjxxOjLI1Scc+z8KnycX345cLtT+Jb114o0/rkgIHd3M1Rqb2mElE95EVEti
8dCvXuz2Wc6uHzHnGEcFH5Bu05oF1hAvt7K/Hl6l4JmX5jcLMcKiA6fNvg6GYfyY
DxfLRldzJpwF8gRcgGrM4PzzONUT9O4/OVnWgOqqrVVzJhhy8z/ysyzSrNMPMGaN
g/HCFQBulEyPYWQHLgTnWy7WG6shAsnWRR1c86d+wxY250JgnH7TYGR50w==
-----END CERTIFICATE-----