Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/323830333a633263303a3a2f34382d3438203d3e20323634383336.roa
File:                     323830333a633263303a3a2f34382d3438203d3e20323634383336.roa (raw, json)
Hash identifier:          f4dB7xOerX0eCxVpTUj/gaHm5iCo3LK4DCsaYG9fvy4=
Subject key identifier:   5A:E7:C0:B9:E4:DF:09:54:1F:95:A9:46:22:9E:2F:9C:F9:36:55:40
Certificate issuer:       /CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
Certificate serial:       6DF3AB00DB0A57289292E8E8819B2A2A9E97D472
Authority key identifier: ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/323830333a633263303a3a2f34382d3438203d3e20323634383336.roa
Signing time:             Tue 05 Mar 2024 18:19:31 +0000
ROA not before:           Tue 05 Mar 2024 18:14:31 +0000
ROA not after:            Tue 04 Mar 2025 18:19:31 +0000
asID:                     264836
IP address blocks:        2803:c2c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f3:ab:00:db:0a:57:28:92:92:e8:e8:81:9b:2a:2a:9e:97:d4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
        Validity
            Not Before: Mar  5 18:14:31 2024 GMT
            Not After : Mar  4 18:19:31 2025 GMT
        Subject: CN=5AE7C0B9E4DF09541F95A946229E2F9CF9365540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:21:1e:88:7d:96:6b:67:a9:ba:b6:d5:fe:b3:
                    62:b8:7c:62:fd:aa:cb:31:9d:66:e4:8c:1e:d1:54:
                    e0:c9:7b:ed:32:40:54:d9:dd:c1:63:71:49:b1:4d:
                    71:75:19:96:af:9a:b4:b8:b6:43:a0:1e:b2:f7:44:
                    fd:3e:d2:8b:96:7e:9d:df:5b:ad:44:69:68:32:55:
                    e5:a4:a3:21:af:c9:e5:b6:0d:16:a5:1c:c0:35:4a:
                    4c:a1:a5:a7:5d:3f:aa:84:70:a0:2e:e0:fa:6e:4e:
                    62:2a:14:14:11:6a:41:fc:fd:c5:0f:4b:54:fe:09:
                    7f:70:ef:02:9a:b9:0b:63:0e:72:d9:98:44:d7:e5:
                    9e:93:84:01:77:2d:8a:85:c0:4f:4b:b5:8d:ae:bb:
                    9a:dc:89:d0:60:3b:6c:14:bb:80:18:33:8b:6d:c9:
                    00:68:ef:5e:a6:d5:22:78:6e:1d:d8:93:36:35:53:
                    84:76:59:d9:fb:e5:ce:02:06:bc:fd:74:ec:66:09:
                    ce:6f:16:ea:7a:68:dd:85:b3:2d:c3:a0:42:f4:99:
                    ef:85:fd:74:81:71:4b:34:1c:78:77:9f:cb:4b:a2:
                    65:6b:f3:a6:f5:6f:8e:2e:4f:0d:8a:b4:80:44:b5:
                    32:99:70:83:c7:24:d7:09:9d:1f:5c:9b:73:5e:fb:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E7:C0:B9:E4:DF:09:54:1F:95:A9:46:22:9E:2F:9C:F9:36:55:40
            X509v3 Authority Key Identifier:
                keyid:ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/323830333a633263303a3a2f34382d3438203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:49:1f:84:ad:f9:34:8e:f9:02:f3:94:0d:ab:3b:00:75:c1:
         6f:70:be:b9:05:8a:77:6e:39:a1:30:75:d5:3a:14:26:52:70:
         ec:dc:5d:e8:0c:25:62:89:d7:35:80:56:54:79:a9:7c:a2:38:
         34:8a:74:11:30:9a:41:f6:eb:5a:37:03:7b:9d:ec:75:b1:c5:
         cb:da:a6:70:fd:c1:04:ac:d5:ed:23:c5:0a:35:f4:1c:81:54:
         d0:ea:66:5a:3d:4f:c3:30:d0:d0:d4:8a:84:79:43:bc:e3:d4:
         38:ff:70:e5:f4:56:07:b3:a4:fd:c6:d0:35:f7:77:af:3e:f4:
         b6:f6:20:fd:23:c4:05:17:16:d3:ca:63:1a:a7:80:d8:19:f7:
         9d:b3:6e:c6:bb:cb:32:c7:91:24:40:ed:09:be:be:9a:22:7a:
         79:f6:6e:80:16:3d:fb:91:64:27:6a:f7:7c:bf:52:d0:42:f6:
         f4:2c:df:7f:55:e5:70:7d:b2:09:70:4b:0e:c1:da:56:59:f9:
         fe:c9:eb:08:92:62:fd:08:00:54:5a:19:15:74:1b:8b:ea:a7:
         5d:71:8e:a4:70:e5:48:40:b9:31:0f:60:4c:94:27:22:89:44:
         13:02:55:be:1a:0c:62:d9:2d:c8:f3:a0:53:10:1a:af:cd:b1:
         82:b0:4a:0f
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUbfOrANsKVyiSkujogZsqKp6X1HIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ3REZBQUQxRDNFNUQ4NDNBNkY0RUVCQ0FERTIwM0Y3
NjI5MDJEQjAeFw0yNDAzMDUxODE0MzFaFw0yNTAzMDQxODE5MzFaMDMxMTAvBgNV
BAMTKDVBRTdDMEI5RTRERjA5NTQxRjk1QTk0NjIyOUUyRjlDRjkzNjU1NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIR6IfZZrZ6m6ttX+s2K4fGL9
qssxnWbkjB7RVODJe+0yQFTZ3cFjcUmxTXF1GZavmrS4tkOgHrL3RP0+0ouWfp3f
W61EaWgyVeWkoyGvyeW2DRalHMA1SkyhpaddP6qEcKAu4PpuTmIqFBQRakH8/cUP
S1T+CX9w7wKauQtjDnLZmETX5Z6ThAF3LYqFwE9LtY2uu5rcidBgO2wUu4AYM4tt
yQBo716m1SJ4bh3YkzY1U4R2Wdn75c4CBrz9dOxmCc5vFup6aN2Fsy3DoEL0me+F
/XSBcUs0HHh3n8tLomVr86b1b44uTw2KtIBEtTKZcIPHJNcJnR9cm3Ne+8X7AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUWufAueTfCVQflalGIp4vnPk2VUAwHwYDVR0j
BBgwFoAU7X36rR0+XYQ6b07ryt4gP3YpAtswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENEMyMTA4MDM2QjZBNjE1NDc4RDI3ODRFMDNBQTQ0MTVG
OEMxOTIxRkZEQTMwODIwM0Y4NjU5RTU0NzA5MTE4LzAvRUQ3REZBQUQxRDNFNUQ4
NDNBNkY0RUVCQ0FERTIwM0Y3NjI5MDJEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDdERkFBRDFEM0U1RDg0M0E2
RjRFRUJDQURFMjAzRjc2MjkwMkRCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDRDMjEwODAzNkI2QTYxNTQ3OEQyNzg0RTAzQUE0NDE1RjhDMTkyMUZG
REEzMDgyMDNGODY1OUU1NDcwOTExOC8wLzMyMzgzMDMzM2E2MzMyNjMzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNDM4MzMzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgDwsAA
ADANBgkqhkiG9w0BAQsFAAOCAQEAiUkfhK35NI75AvOUDas7AHXBb3C+uQWKd245
oTB11ToUJlJw7Nxd6AwlYonXNYBWVHmpfKI4NIp0ETCaQfbrWjcDe53sdbHFy9qm
cP3BBKzV7SPFCjX0HIFU0OpmWj1PwzDQ0NSKhHlDvOPUOP9w5fRWB7Ok/cbQNfd3
rz70tvYg/SPEBRcW08pjGqeA2Bn3nbNuxrvLMseRJEDtCb6+miJ6efZugBY9+5Fk
J2r3fL9S0EL29Czff1XlcH2yCXBLDsHaVln5/snrCJJi/QgAVFoZFXQbi+qnXXGO
pHDlSEC5MQ9gTJQnIolEEwJVvhoMYtktyPOgUxAar82xgrBKDw==
-----END CERTIFICATE-----