Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/323830333a396636303a3a2f33322d3332203d3e20323730303730.roa
File:                     323830333a396636303a3a2f33322d3332203d3e20323730303730.roa (raw, json)
Hash identifier:          8mVwNlBfQa6sIyuvbEfafzwpC0AbrrRGBvwuKewEQoE=
Subject key identifier:   63:E8:D8:90:07:1B:C3:D2:47:F3:79:42:9E:8A:0C:1F:35:4C:D1:92
Certificate issuer:       /CN=C3210E1056A6F03E5EBAE928296A603EC46256F1
Certificate serial:       0FD0FBFB50FD43EB712B6863C486A7C375933419
Authority key identifier: C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/323830333a396636303a3a2f33322d3332203d3e20323730303730.roa
Signing time:             Tue 04 Feb 2025 18:17:06 +0000
ROA not before:           Tue 04 Feb 2025 18:12:06 +0000
ROA not after:            Tue 03 Feb 2026 18:17:06 +0000
asID:                     270070
IP address blocks:        2803:9f60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d0:fb:fb:50:fd:43:eb:71:2b:68:63:c4:86:a7:c3:75:93:34:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3210E1056A6F03E5EBAE928296A603EC46256F1
        Validity
            Not Before: Feb  4 18:12:06 2025 GMT
            Not After : Feb  3 18:17:06 2026 GMT
        Subject: CN=63E8D890071BC3D247F379429E8A0C1F354CD192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:89:3f:98:43:f6:94:d6:92:30:8d:0d:b2:
                    fe:d9:b8:c6:f2:07:0a:0d:88:4d:f4:2d:b1:88:fc:
                    12:c1:ff:b9:59:b1:56:30:da:89:a4:0a:44:ac:52:
                    35:b4:4c:d6:23:0d:e8:4e:fe:f2:e8:3b:82:28:64:
                    bf:e1:6c:3e:37:5a:6b:bf:64:ac:ab:e6:85:d8:0d:
                    c7:e1:6b:c3:f5:52:cd:07:e0:c3:f8:19:cc:a3:3d:
                    36:98:b9:83:37:e5:75:06:0f:59:97:3c:58:ac:a4:
                    50:20:0d:90:9e:ea:10:ac:cf:86:e8:3b:a7:14:93:
                    95:eb:6c:a5:91:d0:00:16:57:15:a7:3f:11:35:0c:
                    34:80:d8:91:59:97:c5:9e:cf:ca:8c:42:c5:1b:6b:
                    7f:da:d6:0a:c8:8c:93:2e:48:34:dd:a1:e0:5e:43:
                    e9:0b:dc:d4:a3:9e:5f:ed:9c:ee:9f:16:b8:54:d2:
                    0c:53:a8:f3:ca:fb:da:57:7c:e7:68:2a:30:ca:8f:
                    f4:9e:a2:c0:5f:9d:20:ca:e0:ac:69:ff:f7:a0:47:
                    e4:96:31:1f:0b:e1:eb:93:17:37:5e:1b:2f:61:cc:
                    2d:76:49:4c:4b:5a:63:c5:e4:1d:b9:7c:f4:eb:77:
                    9f:52:79:51:9c:e5:5a:b9:0b:62:db:7f:98:1d:9e:
                    1b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E8:D8:90:07:1B:C3:D2:47:F3:79:42:9E:8A:0C:1F:35:4C:D1:92
            X509v3 Authority Key Identifier:
                keyid:C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/323830333a396636303a3a2f33322d3332203d3e20323730303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:7a:29:8f:e1:b7:49:34:de:27:f9:d9:a7:dd:85:7c:72:67:
         8b:b6:aa:c1:e3:8c:d9:bb:a2:fc:96:bf:3d:1b:3a:66:f5:43:
         4c:71:d0:5d:71:0b:aa:f7:9d:1b:33:9f:cd:2c:c2:de:99:8a:
         bb:08:ee:2b:19:01:38:5c:5a:5a:03:8b:78:8f:d9:5f:ef:14:
         0f:66:1e:67:ef:04:af:30:01:f1:c0:c0:49:66:3c:27:da:a8:
         db:75:dd:3a:de:43:0b:22:f8:ac:c5:ac:3c:76:37:ec:65:5e:
         43:88:d7:08:2f:70:5c:13:68:a8:72:dd:53:29:0c:1e:1a:d7:
         58:73:00:ec:c7:3c:1d:c1:f9:aa:e9:cd:71:c2:1a:94:80:fe:
         bb:97:15:38:97:3d:92:68:df:8d:a7:ce:98:a2:cb:bf:75:ac:
         93:42:73:b3:95:88:e5:f0:3a:59:4e:f8:5d:98:a6:d1:79:c5:
         2c:2a:98:cd:33:d4:ce:46:37:0a:d5:1f:51:45:66:3d:d4:9c:
         b3:21:93:cf:9a:ab:cd:9e:f4:56:c3:5f:1d:4f:c3:36:6e:53:
         9f:c2:27:93:bb:00:a1:b2:f7:cc:93:a5:03:ea:3f:11:00:bd:
         aa:e2:21:a5:69:1a:59:02:4c:8e:0e:28:27:61:a7:59:c0:3e:
         52:a4:0f:92
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUD9D7+1D9Q+txK2hjxIanw3WTNBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMyMTBFMTA1NkE2RjAzRTVFQkFFOTI4Mjk2QTYwM0VD
NDYyNTZGMTAeFw0yNTAyMDQxODEyMDZaFw0yNjAyMDMxODE3MDZaMDMxMTAvBgNV
BAMTKDYzRThEODkwMDcxQkMzRDI0N0YzNzk0MjlFOEEwQzFGMzU0Q0QxOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrl4k/mEP2lNaSMI0Nsv7ZuMby
BwoNiE30LbGI/BLB/7lZsVYw2omkCkSsUjW0TNYjDehO/vLoO4IoZL/hbD43Wmu/
ZKyr5oXYDcfha8P1Us0H4MP4GcyjPTaYuYM35XUGD1mXPFispFAgDZCe6hCsz4bo
O6cUk5XrbKWR0AAWVxWnPxE1DDSA2JFZl8Wez8qMQsUba3/a1grIjJMuSDTdoeBe
Q+kL3NSjnl/tnO6fFrhU0gxTqPPK+9pXfOdoKjDKj/SeosBfnSDK4Kxp//egR+SW
MR8L4euTFzdeGy9hzC12SUxLWmPF5B25fPTrd59SeVGc5Vq5C2Lbf5gdnhshAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUY+jYkAcbw9JH83lCnooMHzVM0ZIwHwYDVR0j
BBgwFoAUwyEOEFam8D5euukoKWpgPsRiVvEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzU4RDE1QzlDMDRDMzlGMkRCQUNGQ0FFNkYyNDZCMDk3
RjJCRkQ4NDg5NkRFRTQ1RThBQjE4MDUyOTRDNzFGLzAvQzMyMTBFMTA1NkE2RjAz
RTVFQkFFOTI4Mjk2QTYwM0VDNDYyNTZGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzIxMEUxMDU2QTZGMDNFNUVC
QUU5MjgyOTZBNjAzRUM0NjI1NkYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTM1OEQxNUM5QzA0QzM5RjJEQkFDRkNBRTZGMjQ2QjA5N0YyQkZEODQ4
OTZERUU0NUU4QUIxODA1Mjk0QzcxRi8wLzMyMzgzMDMzM2EzOTY2MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzczMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDn2Aw
DQYJKoZIhvcNAQELBQADggEBACd6KY/ht0k03if52afdhXxyZ4u2qsHjjNm7ovyW
vz0bOmb1Q0xx0F1xC6r3nRszn80swt6ZirsI7isZAThcWloDi3iP2V/vFA9mHmfv
BK8wAfHAwElmPCfaqNt13TreQwsi+KzFrDx2N+xlXkOI1wgvcFwTaKhy3VMpDB4a
11hzAOzHPB3B+arpzXHCGpSA/ruXFTiXPZJo342nzpiiy791rJNCc7OViOXwOllO
+F2YptF5xSwqmM0z1M5GNwrVH1FFZj3UnLMhk8+aq82e9FbDXx1PwzZuU5/CJ5O7
AKGy98yTpQPqPxEAvariIaVpGlkCTI4OKCdhp1nAPlKkD5I=
-----END CERTIFICATE-----