Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/323830333a353963303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a353963303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          L0OVV0vjFFisWWoCqgeEFsrUdEiwHPMd7zm0pKZT7JY=
Subject key identifier:   E1:C1:A0:1F:75:94:9F:1C:A8:B8:27:83:9D:BC:2C:19:A9:EB:18:74
Certificate issuer:       /CN=754E4BD73AEBBA082CF44FF7380173AEE9E5BF86
Certificate serial:       70EDBEA67CE0A488A5A00579F894B1D883187EF2
Authority key identifier: 75:4E:4B:D7:3A:EB:BA:08:2C:F4:4F:F7:38:01:73:AE:E9:E5:BF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/323830333a353963303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:50:11 +0000
ROA not before:           Tue 04 Feb 2025 18:45:11 +0000
ROA not after:            Tue 03 Feb 2026 18:50:11 +0000
asID:                     264668
IP address blocks:        2803:59c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ed:be:a6:7c:e0:a4:88:a5:a0:05:79:f8:94:b1:d8:83:18:7e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754E4BD73AEBBA082CF44FF7380173AEE9E5BF86
        Validity
            Not Before: Feb  4 18:45:11 2025 GMT
            Not After : Feb  3 18:50:11 2026 GMT
        Subject: CN=E1C1A01F75949F1CA8B827839DBC2C19A9EB1874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:8b:d3:e3:77:50:50:10:16:45:12:94:3f:
                    a9:8b:52:d4:d5:e0:b7:62:ae:02:e1:ff:0d:b0:8a:
                    45:7e:2a:ca:cc:c4:54:d6:42:81:17:78:c9:af:ba:
                    83:5b:42:78:fb:90:af:6c:d3:ff:fa:b5:39:0b:bc:
                    a8:d3:fc:11:35:0f:42:42:a1:c1:12:e9:57:16:24:
                    89:7e:89:70:e9:92:3d:45:0c:76:04:bf:f9:86:9a:
                    b2:8d:87:c8:5f:37:95:87:84:ad:4d:f8:1f:77:a9:
                    e3:f3:18:b2:86:14:74:b1:2e:16:6b:b3:23:aa:cb:
                    eb:ac:41:4c:3a:40:c9:e0:e0:28:1b:ca:d3:e1:d2:
                    68:59:57:92:07:6b:d1:84:cc:a2:99:a6:dc:18:fa:
                    df:7b:c4:2a:22:15:80:28:1f:5d:d1:20:36:0d:a8:
                    57:86:cb:3b:bb:90:0e:52:63:7a:a8:b1:e7:7e:c1:
                    2e:93:1e:78:89:7c:0d:ad:62:da:97:40:5b:35:30:
                    fd:ba:a3:f3:1c:90:e4:56:51:6a:53:81:8d:d4:5b:
                    0a:e6:f7:0d:f9:bf:bc:32:00:fd:26:ac:7c:20:0d:
                    51:e3:76:85:7a:fd:99:88:15:67:5c:6f:4d:22:07:
                    71:a3:cc:56:b9:e9:3a:10:00:93:75:ee:9c:62:77:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C1:A0:1F:75:94:9F:1C:A8:B8:27:83:9D:BC:2C:19:A9:EB:18:74
            X509v3 Authority Key Identifier:
                keyid:75:4E:4B:D7:3A:EB:BA:08:2C:F4:4F:F7:38:01:73:AE:E9:E5:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/323830333a353963303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:59c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:0e:86:9b:ae:fe:f8:8c:b9:46:aa:04:6d:8c:55:27:85:
         70:22:4e:3a:cb:b9:6b:91:26:ba:7e:e8:4e:24:20:79:89:6f:
         1b:00:fb:96:9e:3f:ab:3a:d7:fc:c1:e5:df:54:f9:dd:13:59:
         13:c6:71:35:b3:bb:e0:dd:89:22:2c:b2:2d:5a:85:40:6f:18:
         73:ca:f9:65:a9:0b:96:56:30:b2:4b:26:3f:6c:19:51:db:b6:
         10:3a:1e:4c:bf:4f:57:81:0c:7a:07:51:0f:b0:1c:ae:e3:99:
         96:e7:c2:20:f9:89:40:ee:f4:95:f9:ca:5f:cf:93:be:03:33:
         a8:e2:67:8a:ba:60:fc:f7:23:6b:d8:53:8c:36:b7:bc:a9:2e:
         b8:d8:ea:98:0d:c4:58:17:37:9e:03:e8:fa:e0:28:df:34:f8:
         9a:f3:da:43:83:3a:c4:a9:dd:e3:b4:ec:af:b6:fc:bd:09:42:
         4d:a2:07:27:d6:70:57:ac:fc:38:76:84:a1:d1:6c:36:d6:26:
         7a:b5:24:ee:0f:9d:77:75:8b:f5:47:7f:b4:a8:00:4c:14:8e:
         2c:b7:c5:81:99:0d:3e:63:9f:5c:7f:b7:ff:d9:5d:72:17:a0:
         6d:c7:da:58:f3:91:4a:db:bf:3c:9e:d3:1c:2d:6b:ef:9b:64:
         6d:2f:08:de
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUcO2+pnzgpIiloAV5+JSx2IMYfvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU0RTRCRDczQUVCQkEwODJDRjQ0RkY3MzgwMTczQUVF
OUU1QkY4NjAeFw0yNTAyMDQxODQ1MTFaFw0yNjAyMDMxODUwMTFaMDMxMTAvBgNV
BAMTKEUxQzFBMDFGNzU5NDlGMUNBOEI4Mjc4MzlEQkMyQzE5QTlFQjE4NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0iovT43dQUBAWRRKUP6mLUtTV
4LdirgLh/w2wikV+KsrMxFTWQoEXeMmvuoNbQnj7kK9s0//6tTkLvKjT/BE1D0JC
ocES6VcWJIl+iXDpkj1FDHYEv/mGmrKNh8hfN5WHhK1N+B93qePzGLKGFHSxLhZr
syOqy+usQUw6QMng4CgbytPh0mhZV5IHa9GEzKKZptwY+t97xCoiFYAoH13RIDYN
qFeGyzu7kA5SY3qosed+wS6THniJfA2tYtqXQFs1MP26o/MckORWUWpTgY3UWwrm
9w35v7wyAP0mrHwgDVHjdoV6/ZmIFWdcb00iB3GjzFa56ToQAJN17pxidzobAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU4cGgH3WUnxyouCeDnbwsGanrGHQwHwYDVR0j
BBgwFoAUdU5L1zrruggs9E/3OAFzrunlv4YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMzhBRjM1QzVFOEVCNzNCRTkwMjRENzlGNTFCNTYwOUQx
RjI0MDk4QzhFMzIyREE1MzgyRkUxN0I2OTE1NUExLzAvNzU0RTRCRDczQUVCQkEw
ODJDRjQ0RkY3MzgwMTczQUVFOUU1QkY4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NTRFNEJENzNBRUJCQTA4MkNG
NDRGRjczODAxNzNBRUU5RTVCRjg2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzM4QUYzNUM1RThFQjczQkU5MDI0RDc5RjUxQjU2MDlEMUYyNDA5OEM4
RTMyMkRBNTM4MkZFMTdCNjkxNTVBMS8wLzMyMzgzMDMzM2EzNTM5NjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDWcAw
DQYJKoZIhvcNAQELBQADggEBAHsrDoabrv74jLlGqgRtjFUnhXAiTjrLuWuRJrp+
6E4kIHmJbxsA+5aeP6s61/zB5d9U+d0TWRPGcTWzu+DdiSIssi1ahUBvGHPK+WWp
C5ZWMLJLJj9sGVHbthA6Hky/T1eBDHoHUQ+wHK7jmZbnwiD5iUDu9JX5yl/Pk74D
M6jiZ4q6YPz3I2vYU4w2t7ypLrjY6pgNxFgXN54D6PrgKN80+Jrz2kODOsSp3eO0
7K+2/L0JQk2iByfWcFes/Dh2hKHRbDbWJnq1JO4PnXd1i/VHf7SoAEwUjiy3xYGZ
DT5jn1x/t//ZXXIXoG3H2ljzkUrbvzye0xwta++bZG0vCN4=
-----END CERTIFICATE-----