Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/323830333a3536303a3a2f33322d3332203d3e20323639373534.roa
File:                     323830333a3536303a3a2f33322d3332203d3e20323639373534.roa (raw, json)
Hash identifier:          sxt+H9aHBT7P8kHCf28ZjJumZkjM/4tFfeKJJ/DV/QI=
Subject key identifier:   78:1E:A5:18:AD:80:68:23:A3:33:E2:E3:35:40:7F:15:87:F2:2B:F9
Certificate issuer:       /CN=816ABAE0A046154DBADCE37DF11279B86BBF7CBA
Certificate serial:       3A1F6912E13FC836EE63E2B1181B309A635572D7
Authority key identifier: 81:6A:BA:E0:A0:46:15:4D:BA:DC:E3:7D:F1:12:79:B8:6B:BF:7C:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816ABAE0A046154DBADCE37DF11279B86BBF7CBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/323830333a3536303a3a2f33322d3332203d3e20323639373534.roa
Signing time:             Tue 04 Feb 2025 18:35:44 +0000
ROA not before:           Tue 04 Feb 2025 18:30:44 +0000
ROA not after:            Tue 03 Feb 2026 18:35:44 +0000
asID:                     269754
IP address blocks:        2803:560::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1f:69:12:e1:3f:c8:36:ee:63:e2:b1:18:1b:30:9a:63:55:72:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816ABAE0A046154DBADCE37DF11279B86BBF7CBA
        Validity
            Not Before: Feb  4 18:30:44 2025 GMT
            Not After : Feb  3 18:35:44 2026 GMT
        Subject: CN=781EA518AD806823A333E2E335407F1587F22BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:79:54:83:b8:42:2d:bd:49:5c:15:7b:4b:
                    79:6f:d0:b7:df:75:4d:0d:0a:74:19:b5:d2:79:bb:
                    9a:77:f6:98:fe:d3:6a:be:92:ab:2d:cd:1b:9f:3b:
                    31:18:c4:12:15:a8:c7:27:8e:2a:17:f1:a8:2b:63:
                    e3:6e:24:d5:b5:f0:bd:b7:5f:2e:5d:77:ec:e2:48:
                    4b:70:17:e2:1e:ec:bd:6a:23:c3:0f:9e:79:b0:42:
                    d3:4a:d7:5b:43:18:33:c9:91:0b:07:39:d0:99:81:
                    f8:2e:1c:0c:43:cc:5a:6d:fd:bb:3a:bd:6e:4a:5d:
                    3b:f4:cb:25:1d:e3:96:5e:00:67:f9:24:ff:ef:ae:
                    25:d1:b0:f8:3a:ae:4c:5b:e3:7f:34:2a:97:6e:0d:
                    d3:b5:a5:fd:87:b5:b7:09:5c:6c:84:09:f2:db:7a:
                    a5:73:11:19:91:9c:81:2b:01:cd:1f:96:c5:2f:7a:
                    23:b1:43:7d:e5:0c:f1:b6:d7:47:60:56:be:f7:38:
                    37:1c:07:71:c2:de:60:c5:db:0e:24:75:e7:ff:6f:
                    ed:4d:b1:29:e9:e1:52:fe:f6:06:69:f8:45:3e:a5:
                    19:03:b0:e1:a0:61:41:f8:a3:f3:77:6d:a9:c7:55:
                    e7:57:94:e4:37:a8:0f:a2:ea:95:d7:5e:23:2f:23:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1E:A5:18:AD:80:68:23:A3:33:E2:E3:35:40:7F:15:87:F2:2B:F9
            X509v3 Authority Key Identifier:
                keyid:81:6A:BA:E0:A0:46:15:4D:BA:DC:E3:7D:F1:12:79:B8:6B:BF:7C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/816ABAE0A046154DBADCE37DF11279B86BBF7CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816ABAE0A046154DBADCE37DF11279B86BBF7CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4D0E940B20E1FF7A6923F4271C4DEEDB9AB4443EBC3D82BD4088D697087A15A/0/323830333a3536303a3a2f33322d3332203d3e20323639373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:560::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:9d:f8:a6:4a:fd:ce:58:d6:bd:39:d4:a0:3f:30:24:8f:b7:
         5b:5e:9e:a7:a2:72:fb:15:4f:c1:3a:6a:a2:60:ff:de:6e:a4:
         96:1c:3d:41:48:f5:d3:cc:89:da:d0:a3:77:bd:6d:cc:3f:26:
         86:65:cd:a5:64:26:da:8d:92:54:92:4e:7a:23:6a:c0:b6:a1:
         51:23:38:37:92:90:ce:db:61:af:b5:89:44:44:7f:ff:d4:64:
         54:2c:25:d7:42:24:f3:f9:68:46:ed:ef:1a:6b:3a:ab:9d:c0:
         8f:e2:09:f7:2c:83:fb:a4:f0:a2:3f:93:c6:bd:c0:1c:0c:ed:
         7a:33:20:d0:5c:eb:f0:90:53:c2:fc:e4:3f:9c:e9:eb:2e:99:
         da:1a:b7:17:c2:77:58:87:30:78:c3:0a:dd:ef:88:da:fd:63:
         f6:66:bd:80:9c:19:6f:14:ed:9a:33:bd:2b:77:09:50:01:46:
         ca:c4:5f:71:1b:78:6d:be:40:d9:5c:da:06:58:6f:50:23:a2:
         27:39:68:63:cd:d5:3c:ae:f3:82:81:59:b3:5b:21:49:df:c0:
         73:cc:93:80:b3:a1:4f:a8:e5:ac:af:d3:4e:5a:cc:0a:22:da:
         81:69:78:2a:66:0f:24:f8:b3:c6:4e:35:47:a6:dc:00:53:24:
         c3:00:2e:94
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUOh9pEuE/yDbuY+KxGBswmmNVctcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE2QUJBRTBBMDQ2MTU0REJBRENFMzdERjExMjc5Qjg2
QkJGN0NCQTAeFw0yNTAyMDQxODMwNDRaFw0yNjAyMDMxODM1NDRaMDMxMTAvBgNV
BAMTKDc4MUVBNTE4QUQ4MDY4MjNBMzMzRTJFMzM1NDA3RjE1ODdGMjJCRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVHlUg7hCLb1JXBV7S3lv0Lff
dU0NCnQZtdJ5u5p39pj+02q+kqstzRufOzEYxBIVqMcnjioX8agrY+NuJNW18L23
Xy5dd+ziSEtwF+Ie7L1qI8MPnnmwQtNK11tDGDPJkQsHOdCZgfguHAxDzFpt/bs6
vW5KXTv0yyUd45ZeAGf5JP/vriXRsPg6rkxb4380KpduDdO1pf2HtbcJXGyECfLb
eqVzERmRnIErAc0flsUveiOxQ33lDPG210dgVr73ODccB3HC3mDF2w4kdef/b+1N
sSnp4VL+9gZp+EU+pRkDsOGgYUH4o/N3banHVedXlOQ3qA+i6pXXXiMvIxf3AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUeB6lGK2AaCOjM+LjNUB/FYfyK/kwHwYDVR0j
BBgwFoAUgWq64KBGFU263ON98RJ5uGu/fLowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNEQwRTk0MEIyMEUxRkY3QTY5MjNGNDI3MUM0REVFREI5
QUI0NDQzRUJDM0Q4MkJENDA4OEQ2OTcwODdBMTVBLzAvODE2QUJBRTBBMDQ2MTU0
REJBRENFMzdERjExMjc5Qjg2QkJGN0NCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MTZBQkFFMEEwNDYxNTREQkFE
Q0UzN0RGMTEyNzlCODZCQkY3Q0JBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjREMEU5NDBCMjBFMUZGN0E2OTIzRjQyNzFDNERFRURCOUFCNDQ0M0VC
QzNEODJCRDQwODhENjk3MDg3QTE1QS8wLzMyMzgzMDMzM2EzNTM2MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzkzNzM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwVgMA0G
CSqGSIb3DQEBCwUAA4IBAQCenfimSv3OWNa9OdSgPzAkj7dbXp6nonL7FU/BOmqi
YP/ebqSWHD1BSPXTzIna0KN3vW3MPyaGZc2lZCbajZJUkk56I2rAtqFRIzg3kpDO
22GvtYlERH//1GRULCXXQiTz+WhG7e8aazqrncCP4gn3LIP7pPCiP5PGvcAcDO16
MyDQXOvwkFPC/OQ/nOnrLpnaGrcXwndYhzB4wwrd74ja/WP2Zr2AnBlvFO2aM70r
dwlQAUbKxF9xG3htvkDZXNoGWG9QI6InOWhjzdU8rvOCgVmzWyFJ38BzzJOAs6FP
qOWsr9NOWswKItqBaXgqZg8k+LPGTjVHptwAUyTDAC6U
-----END CERTIFICATE-----