Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/323830333a313365303a3a2f33322d3438203d3e20323730303732.roa
File:                     323830333a313365303a3a2f33322d3438203d3e20323730303732.roa (raw, json)
Hash identifier:          Tg/1ZV+fkQsZnY0JrsQxu+8/v5tvjyQ5wvLcHV4l6ek=
Subject key identifier:   F4:E1:6B:E2:11:B5:FF:77:28:0D:5D:55:07:83:1C:9B:54:33:4E:AB
Certificate issuer:       /CN=A46634976135DC79BB9C36E294FEF50F4ED507BD
Certificate serial:       55488960FB5AA57F7F5363CBCCFB66A1ED6FB848
Authority key identifier: A4:66:34:97:61:35:DC:79:BB:9C:36:E2:94:FE:F5:0F:4E:D5:07:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/323830333a313365303a3a2f33322d3438203d3e20323730303732.roa
Signing time:             Tue 04 Feb 2025 18:22:03 +0000
ROA not before:           Tue 04 Feb 2025 18:17:03 +0000
ROA not after:            Tue 03 Feb 2026 18:22:03 +0000
asID:                     270072
IP address blocks:        2803:13e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:48:89:60:fb:5a:a5:7f:7f:53:63:cb:cc:fb:66:a1:ed:6f:b8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A46634976135DC79BB9C36E294FEF50F4ED507BD
        Validity
            Not Before: Feb  4 18:17:03 2025 GMT
            Not After : Feb  3 18:22:03 2026 GMT
        Subject: CN=F4E16BE211B5FF77280D5D5507831C9B54334EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:40:86:33:03:f3:05:92:a3:c7:07:6b:09:
                    e9:c1:59:4a:c2:84:4e:35:64:24:5a:52:0e:f2:30:
                    0f:a1:f4:ef:25:dd:95:d8:e4:1e:25:c1:88:a7:85:
                    49:0b:36:1a:b8:64:df:8a:30:67:9d:95:cd:bb:55:
                    fc:38:59:1a:17:fa:7d:23:10:84:56:f6:c4:48:46:
                    cf:2b:9d:28:fd:37:13:a5:f9:79:9b:a1:a1:14:d2:
                    c2:bf:41:e5:b4:b3:6b:d2:74:05:3b:81:ef:b6:66:
                    23:8b:6e:ee:22:4a:c0:0a:7e:47:11:7e:eb:e0:d5:
                    c6:39:70:df:ae:ba:34:46:9a:1f:de:f6:d7:06:dc:
                    34:1b:1a:9d:fd:22:59:96:46:aa:69:21:39:2e:e9:
                    a6:2b:8c:d1:fd:06:8a:29:45:b4:de:b4:4f:1a:9e:
                    f4:1e:9c:66:53:54:26:39:3c:d8:c5:65:34:21:54:
                    7f:f9:bc:79:34:c5:dd:55:e0:8d:13:e9:99:a1:e8:
                    e1:bd:c0:c0:de:0b:b4:0a:94:85:8a:1f:7e:fe:33:
                    ce:de:fb:3a:55:e7:49:f9:9c:76:db:2b:34:7c:bd:
                    a1:9f:71:ec:3a:ff:d1:ba:49:d5:69:97:26:4c:f3:
                    7d:40:c8:81:99:c2:19:88:55:31:29:dd:89:26:1b:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E1:6B:E2:11:B5:FF:77:28:0D:5D:55:07:83:1C:9B:54:33:4E:AB
            X509v3 Authority Key Identifier:
                keyid:A4:66:34:97:61:35:DC:79:BB:9C:36:E2:94:FE:F5:0F:4E:D5:07:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/323830333a313365303a3a2f33322d3438203d3e20323730303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:13e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:39:95:0b:9c:65:b6:6b:f8:05:b4:85:66:70:4c:57:63:
         7d:38:56:39:14:e2:d9:2a:fc:5a:ad:81:94:46:ff:16:d8:ab:
         00:80:74:48:f3:5a:1d:0c:af:cd:b2:da:92:10:f7:a2:2c:55:
         09:1f:37:a5:a5:be:75:c1:0e:52:b6:09:7b:b1:40:dd:44:77:
         54:c9:fa:25:0b:cf:9e:d2:c7:8c:88:c2:e1:04:29:90:11:a9:
         d8:84:bf:e1:ef:ae:07:af:6e:9b:36:20:c4:10:1c:1d:c3:da:
         0e:6f:35:5b:88:ab:0b:e8:4d:26:a2:d9:03:95:83:72:0f:b2:
         82:e8:db:11:71:98:4e:d4:4d:c1:5a:97:74:54:c1:50:dc:e1:
         8c:b2:f0:2c:73:59:9a:47:c9:5b:4f:10:1b:80:0a:59:df:b8:
         fa:e8:cb:9f:10:6a:4e:ab:c8:85:78:1b:51:46:32:e1:df:71:
         44:04:c5:30:85:d0:fa:2f:d3:99:fe:7f:ec:85:bb:d1:3b:7d:
         9f:47:4c:85:e9:4b:76:7b:94:ee:c3:5f:c9:9b:a5:04:bc:80:
         ff:34:39:41:0b:2e:15:45:f9:44:d0:64:c6:4c:78:72:c0:b8:
         9e:26:91:7d:8e:7e:f9:45:40:38:68:08:07:4c:60:2d:fc:5f:
         ff:44:4d:58
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUVUiJYPtapX9/U2PLzPtmoe1vuEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ2NjM0OTc2MTM1REM3OUJCOUMzNkUyOTRGRUY1MEY0
RUQ1MDdCRDAeFw0yNTAyMDQxODE3MDNaFw0yNjAyMDMxODIyMDNaMDMxMTAvBgNV
BAMTKEY0RTE2QkUyMTFCNUZGNzcyODBENUQ1NTA3ODMxQzlCNTQzMzRFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJ0CGMwPzBZKjxwdrCenBWUrC
hE41ZCRaUg7yMA+h9O8l3ZXY5B4lwYinhUkLNhq4ZN+KMGedlc27Vfw4WRoX+n0j
EIRW9sRIRs8rnSj9NxOl+XmboaEU0sK/QeW0s2vSdAU7ge+2ZiOLbu4iSsAKfkcR
fuvg1cY5cN+uujRGmh/e9tcG3DQbGp39IlmWRqppITku6aYrjNH9BoopRbTetE8a
nvQenGZTVCY5PNjFZTQhVH/5vHk0xd1V4I0T6Zmh6OG9wMDeC7QKlIWKH37+M87e
+zpV50n5nHbbKzR8vaGfcew6/9G6SdVplyZM831AyIGZwhmIVTEp3YkmG9WdAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU9OFr4hG1/3coDV1VB4Mcm1QzTqswHwYDVR0j
BBgwFoAUpGY0l2E13Hm7nDbilP71D07VB70wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNTIyMjgxRUJEQ0M2MTA5QzE1RjNCMUVFNDgzMjA1MkEw
Qjc3MzczMzMwMDA2M0NGOUZDMEI5QkQ5MkNFQzAxLzAvQTQ2NjM0OTc2MTM1REM3
OUJCOUMzNkUyOTRGRUY1MEY0RUQ1MDdCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDY2MzQ5NzYxMzVEQzc5QkI5
QzM2RTI5NEZFRjUwRjRFRDUwN0JELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTUyMjI4MUVCRENDNjEwOUMxNUYzQjFFRTQ4MzIwNTJBMEI3NzM3MzMz
MDAwNjNDRjlGQzBCOUJEOTJDRUMwMS8wLzMyMzgzMDMzM2EzMTMzNjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMDMwMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDE+Aw
DQYJKoZIhvcNAQELBQADggEBAD4VOZULnGW2a/gFtIVmcExXY304VjkU4tkq/Fqt
gZRG/xbYqwCAdEjzWh0Mr82y2pIQ96IsVQkfN6WlvnXBDlK2CXuxQN1Ed1TJ+iUL
z57Sx4yIwuEEKZARqdiEv+Hvrgevbps2IMQQHB3D2g5vNVuIqwvoTSai2QOVg3IP
soLo2xFxmE7UTcFal3RUwVDc4Yyy8CxzWZpHyVtPEBuAClnfuProy58Qak6ryIV4
G1FGMuHfcUQExTCF0Pov05n+f+yFu9E7fZ9HTIXpS3Z7lO7DX8mbpQS8gP80OUEL
LhVF+UTQZMZMeHLAuJ4mkX2OfvlFQDhoCAdMYC38X/9ETVg=
-----END CERTIFICATE-----