Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          LbFSxFbuY+PXPk1KHuSgA6q+AyXk7S81eppVcnP2tac=
Subject key identifier:   78:75:8D:F3:B0:DE:08:5F:96:44:B3:34:35:0B:2B:F6:D9:23:10:9F
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       5C301CD1F703DCC6B367B2018DE59AF82A07FC97
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 04 Feb 2025 18:04:31 +0000
ROA not before:           Tue 04 Feb 2025 17:59:31 +0000
ROA not after:            Tue 03 Feb 2026 18:04:31 +0000
asID:                     264824
IP address blocks:        2803:e360:f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:30:1c:d1:f7:03:dc:c6:b3:67:b2:01:8d:e5:9a:f8:2a:07:fc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Feb  4 17:59:31 2025 GMT
            Not After : Feb  3 18:04:31 2026 GMT
        Subject: CN=78758DF3B0DE085F9644B334350B2BF6D923109F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8e:53:19:c0:25:01:b0:27:a3:70:c8:47:fb:
                    9e:36:15:5d:c2:e2:8c:c7:ac:8c:36:6b:d8:41:59:
                    db:bf:ed:e0:a9:5d:ee:ed:af:39:1d:c1:cc:8c:df:
                    3e:a8:37:bc:4a:90:ec:d4:bf:a8:ba:01:05:a7:51:
                    7a:91:7e:5c:11:38:1d:b0:f3:b9:cd:7d:3a:15:ee:
                    dc:51:df:c0:a4:1b:b5:55:53:46:91:42:73:c9:b8:
                    13:d5:c9:7b:94:b7:00:0f:a6:76:a6:b8:8d:4b:a4:
                    43:5d:15:7d:53:ba:87:b1:21:b7:ea:27:6a:e9:eb:
                    7b:8d:30:22:19:60:db:9f:82:3d:9b:74:f2:f5:1b:
                    e4:75:ce:35:9b:b9:1f:14:a5:35:4f:51:65:70:a5:
                    94:04:d8:9d:8f:0e:51:d2:2c:76:3a:50:59:6b:2a:
                    c6:e0:ff:22:c5:55:7d:08:13:29:eb:22:f0:fc:05:
                    18:c0:06:be:e7:15:8d:a4:f7:1d:16:a7:df:b9:cf:
                    7d:14:25:9e:de:14:23:2a:73:85:69:d8:29:16:a5:
                    37:a9:7f:a6:36:82:9f:2e:09:cf:ca:7a:14:50:e5:
                    00:15:d6:f8:10:ac:d3:48:ea:21:b9:03:8f:1d:ef:
                    e8:f3:2d:c7:8c:2e:39:47:58:f0:18:03:a8:e0:30:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:75:8D:F3:B0:DE:08:5F:96:44:B3:34:35:0B:2B:F6:D9:23:10:9F
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:af:7b:c2:bb:cd:83:67:b1:70:c8:bd:f0:c5:2d:a1:44:ca:
         01:f0:ca:90:fa:a7:0b:7c:cf:31:cb:fa:0c:8f:22:cf:f9:94:
         3c:06:fb:88:b6:2d:66:ba:bf:e2:5d:f2:68:27:e4:e3:f4:63:
         31:58:be:fc:03:9f:f4:6d:da:3a:66:97:ec:59:70:27:e4:27:
         15:64:13:d1:9c:1a:19:6d:25:f5:51:6f:9c:c0:31:b8:bf:f2:
         1c:18:5d:2e:3a:a9:17:18:98:cf:ba:35:8c:7f:26:03:69:32:
         f4:d4:56:f7:37:60:a1:a5:62:26:5c:7a:24:40:1b:cb:cd:15:
         7e:8f:e9:04:53:7a:65:38:00:b2:d6:a2:b0:b8:a9:3f:62:66:
         30:f7:57:5b:27:85:c6:4a:4e:f1:63:d1:60:a5:bf:6e:83:ab:
         de:4c:13:44:ee:5f:b7:ca:5d:1b:9e:3d:11:41:fc:b6:89:9f:
         a0:0b:7c:61:05:e3:16:f7:e4:b5:e2:ab:2c:c5:9b:16:57:f8:
         1d:95:56:2c:5a:26:04:f2:a8:0d:a9:05:d4:a5:8e:34:97:46:
         54:e2:07:90:50:5a:23:be:51:39:b9:27:cb:56:5e:ae:23:34:
         a3:6b:d4:2b:2c:88:d2:a3:0b:6f:39:b4:72:16:f3:3e:85:ba:
         bb:1c:d6:51
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUXDAc0fcD3MazZ7IBjeWa+CoH/JcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMwNkI2RkE2Q0IyQjgxMjJGQjU4REM1MjU0MzY3MTA5
M0IwNUZBQTAeFw0yNTAyMDQxNzU5MzFaFw0yNjAyMDMxODA0MzFaMDMxMTAvBgNV
BAMTKDc4NzU4REYzQjBERTA4NUY5NjQ0QjMzNDM1MEIyQkY2RDkyMzEwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkjlMZwCUBsCejcMhH+542FV3C
4ozHrIw2a9hBWdu/7eCpXe7trzkdwcyM3z6oN7xKkOzUv6i6AQWnUXqRflwROB2w
87nNfToV7txR38CkG7VVU0aRQnPJuBPVyXuUtwAPpnamuI1LpENdFX1TuoexIbfq
J2rp63uNMCIZYNufgj2bdPL1G+R1zjWbuR8UpTVPUWVwpZQE2J2PDlHSLHY6UFlr
Ksbg/yLFVX0IEynrIvD8BRjABr7nFY2k9x0Wp9+5z30UJZ7eFCMqc4Vp2CkWpTep
f6Y2gp8uCc/KehRQ5QAV1vgQrNNI6iG5A48d7+jzLceMLjlHWPAYA6jgMG15AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUeHWN87DeCF+WRLM0NQsr9tkjEJ8wHwYDVR0j
BBgwFoAULAa2+myyuBIvtY3FJUNnEJOwX6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTNCRDBDM0UzQTdCM0Q2NkU4NDEyQ0JDQjZCQjIxMjM2
MDI0NEZENDk1QkFGOUI1OTYxM0FEOEExRjVFMTYyLzAvMkMwNkI2RkE2Q0IyQjgx
MjJGQjU4REM1MjU0MzY3MTA5M0IwNUZBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzA2QjZGQTZDQjJCODEyMkZC
NThEQzUyNTQzNjcxMDkzQjA1RkFBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzkzQkQwQzNFM0E3QjNENjZFODQxMkNCQ0I2QkIyMTIzNjAyNDRGRDQ5
NUJBRjlCNTk2MTNBRDhBMUY1RTE2Mi8wLzMyMzgzMDMzM2E2NTMzMzYzMDNhNjYz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM0MzgzMjM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPjYA8wDQYJKoZIhvcNAQELBQADggEBAESve8K7zYNnsXDIvfDFLaFEygHw
ypD6pwt8zzHL+gyPIs/5lDwG+4i2LWa6v+Jd8mgn5OP0YzFYvvwDn/Rt2jpml+xZ
cCfkJxVkE9GcGhltJfVRb5zAMbi/8hwYXS46qRcYmM+6NYx/JgNpMvTUVvc3YKGl
YiZceiRAG8vNFX6P6QRTemU4ALLWorC4qT9iZjD3V1snhcZKTvFj0WClv26Dq95M
E0TuX7fKXRuePRFB/LaJn6ALfGEF4xb35LXiqyzFmxZX+B2VVixaJgTyqA2pBdSl
jjSXRlTiB5BQWiO+UTm5J8tWXq4jNKNr1CssiNKjC285tHIW8z6Fursc1lE=
-----END CERTIFICATE-----