Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3539333a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3539333a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          FeCRYgv5yrYHe8nUvfo7W5wPehiPY3ODEB1KFcU/TZo=
Subject key identifier:   BF:2E:32:87:A4:07:C9:36:32:A9:DC:37:EC:87:B6:72:EB:1B:20:B2
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       2035AB23451BC19E273F1A9FC45196FCBC46B8F8
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3539333a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:45 +0000
ROA not before:           Tue 04 Feb 2025 18:15:45 +0000
ROA not after:            Tue 03 Feb 2026 18:20:45 +0000
asID:                     52423
IP address blocks:        2803:6900:593::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:35:ab:23:45:1b:c1:9e:27:3f:1a:9f:c4:51:96:fc:bc:46:b8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:45 2025 GMT
            Not After : Feb  3 18:20:45 2026 GMT
        Subject: CN=BF2E3287A407C93632A9DC37EC87B672EB1B20B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:2f:40:d2:2f:37:5b:9a:e2:65:ca:12:ac:
                    13:94:63:23:59:69:ff:57:77:a0:27:a8:70:cf:39:
                    34:fb:22:34:7a:03:8c:eb:51:38:23:ec:21:f8:17:
                    99:7d:57:b8:7c:7a:3f:39:44:61:f3:f6:23:66:b0:
                    3e:8f:f8:1a:90:27:90:f4:e4:65:ca:49:34:47:db:
                    7e:f2:8d:5a:ed:b5:50:b2:e9:53:a3:bf:c1:c2:9c:
                    c5:29:4a:9b:96:8a:bd:ae:43:4b:de:d9:1d:7b:62:
                    13:ed:a2:78:89:97:c0:3a:d5:2b:d1:2b:c3:5c:91:
                    64:0f:91:e9:82:20:b7:21:5e:6a:dc:3d:52:56:10:
                    72:08:ef:18:29:72:c2:3d:68:d1:4e:1f:cf:05:bc:
                    ee:b2:62:b3:1e:ef:22:ca:f5:e3:db:81:ee:36:62:
                    5d:23:d6:2e:2a:43:cd:19:e0:29:58:3c:d1:a2:39:
                    c9:27:63:06:1c:b4:f4:93:6b:c6:7c:ee:c9:92:89:
                    46:1b:9a:db:85:e2:6f:c2:19:05:39:54:13:42:92:
                    28:bb:e5:ef:fa:e5:f1:89:21:3a:82:8b:22:8c:46:
                    07:92:29:8f:f2:83:da:50:9f:57:fd:af:f7:46:e0:
                    e0:10:b6:2c:8a:e9:b4:a0:3f:ae:f6:72:52:7a:33:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2E:32:87:A4:07:C9:36:32:A9:DC:37:EC:87:B6:72:EB:1B:20:B2
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3539333a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:593::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:5f:88:34:6f:22:0c:d6:e0:32:5f:eb:03:fa:fb:75:ba:18:
         69:b4:99:bb:a1:fd:df:ce:d2:7a:ae:03:61:ed:6c:29:3c:71:
         05:2f:c5:82:af:f8:79:a1:de:bb:e3:f2:a1:1c:bb:8c:ed:0d:
         25:d2:ed:92:4f:3d:ed:69:a1:4b:72:5e:61:53:6c:a3:87:96:
         24:37:26:a7:85:70:1c:18:1f:68:8c:a7:e1:4c:da:7e:29:7c:
         af:a3:56:ba:65:3b:6f:50:65:4b:b8:41:b1:9f:9a:95:59:92:
         69:63:7d:b1:54:2b:0b:93:1e:c8:ec:9b:6d:b5:7f:92:2d:d8:
         77:4b:e7:ac:43:46:11:57:e0:3c:ee:c1:72:6e:ff:62:ab:17:
         09:bb:ce:7f:9a:ba:f2:e0:7d:8b:2a:38:15:f4:c6:84:59:d5:
         bc:60:93:95:90:7b:fe:82:c8:bb:4a:b3:e0:17:2e:72:ad:36:
         92:21:01:42:20:4f:49:67:23:31:d0:c2:5a:0e:5f:f3:48:06:
         b5:83:6a:69:50:f9:13:e6:21:51:93:d7:5b:7b:b2:a7:9b:b1:
         9a:3d:87:72:9c:84:08:2f:05:75:00:28:71:06:1b:56:d5:8f:
         2d:1d:63:21:eb:51:d9:8a:82:e4:ed:4c:a1:34:a9:5e:cf:dd:
         aa:90:84:a4
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUIDWrI0UbwZ4nPxqfxFGW/LxGuPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIyQTE5MDQxRjdBRDhEMEI0Rjk3RDZEREFGQzk5QzI1
OTAyNzZBQjAeFw0yNTAyMDQxODE1NDVaFw0yNjAyMDMxODIwNDVaMDMxMTAvBgNV
BAMTKEJGMkUzMjg3QTQwN0M5MzYzMkE5REMzN0VDODdCNjcyRUIxQjIwQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgC9A0i83W5riZcoSrBOUYyNZ
af9Xd6AnqHDPOTT7IjR6A4zrUTgj7CH4F5l9V7h8ej85RGHz9iNmsD6P+BqQJ5D0
5GXKSTRH237yjVrttVCy6VOjv8HCnMUpSpuWir2uQ0ve2R17YhPtoniJl8A61SvR
K8NckWQPkemCILchXmrcPVJWEHII7xgpcsI9aNFOH88FvO6yYrMe7yLK9ePbge42
Yl0j1i4qQ80Z4ClYPNGiOcknYwYctPSTa8Z87smSiUYbmtuF4m/CGQU5VBNCkii7
5e/65fGJITqCiyKMRgeSKY/yg9pQn1f9r/dG4OAQtiyK6bSgP672clJ6M4VJAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUvy4yh6QHyTYyqdw37Ie2cusbILIwHwYDVR0j
BBgwFoAUUioZBB962NC0+X1t2vyZwlkCdqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MDcyQ0M3QUM5OTM1QTk2QUVDREMzQjE1NkYwQkUyODVB
QzBEMkYzRTJCMjY0NjZGODdEN0MzOTYzOUZFN0M5LzAvNTIyQTE5MDQxRjdBRDhE
MEI0Rjk3RDZEREFGQzk5QzI1OTAyNzZBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjJBMTkwNDFGN0FEOEQwQjRG
OTdENkREQUZDOTlDMjU5MDI3NkFCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTA3MkNDN0FDOTkzNUE5NkFFQ0RDM0IxNTZGMEJFMjg1QUMwRDJGM0Uy
QjI2NDY2Rjg3RDdDMzk2MzlGRTdDOS8wLzMyMzgzMDMzM2EzNjM5MzAzMDNhMzUz
OTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjM0MzIzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDaQAFkzANBgkqhkiG9w0BAQsFAAOCAQEARF+ING8iDNbgMl/rA/r7dboYabSZ
u6H9387Seq4DYe1sKTxxBS/Fgq/4eaHeu+PyoRy7jO0NJdLtkk897WmhS3JeYVNs
o4eWJDcmp4VwHBgfaIyn4Uzafil8r6NWumU7b1BlS7hBsZ+alVmSaWN9sVQrC5Me
yOybbbV/ki3Yd0vnrENGEVfgPO7Bcm7/YqsXCbvOf5q68uB9iyo4FfTGhFnVvGCT
lZB7/oLIu0qz4Bcucq02kiEBQiBPSWcjMdDCWg5f80gGtYNqaVD5E+YhUZPXW3uy
p5uxmj2HcpyECC8FdQAocQYbVtWPLR1jIetR2YqC5O1MoTSpXs/dqpCEpA==
-----END CERTIFICATE-----