Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0382AAB4CEDFDC998AF4189EA573A463C85F2B595FC97AB5306917363D72741/0/323830333a313961303a3a2f33322d3334203d3e20323637373134.roa
File:                     323830333a313961303a3a2f33322d3334203d3e20323637373134.roa (raw, json)
Hash identifier:          6fzVBmaZhG1y2M0P8nRjO3LgcGkTyeKte+Byt9yCQdQ=
Subject key identifier:   89:16:B9:C4:99:8D:FA:5D:2C:06:5B:3C:4C:F1:F9:51:68:A7:59:AE
Certificate issuer:       /CN=82B40494FF7B74A02DEF61034E0D5C95D8414395
Certificate serial:       197CA8090C7253714A2BFC0E40EEFBA9A7F60E20
Authority key identifier: 82:B4:04:94:FF:7B:74:A0:2D:EF:61:03:4E:0D:5C:95:D8:41:43:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82B40494FF7B74A02DEF61034E0D5C95D8414395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0382AAB4CEDFDC998AF4189EA573A463C85F2B595FC97AB5306917363D72741/0/323830333a313961303a3a2f33322d3334203d3e20323637373134.roa
Signing time:             Sat 15 Feb 2025 09:09:53 +0000
ROA not before:           Sat 15 Feb 2025 09:04:53 +0000
ROA not after:            Sat 14 Feb 2026 09:09:53 +0000
asID:                     267714
IP address blocks:        2803:19a0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7c:a8:09:0c:72:53:71:4a:2b:fc:0e:40:ee:fb:a9:a7:f6:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B40494FF7B74A02DEF61034E0D5C95D8414395
        Validity
            Not Before: Feb 15 09:04:53 2025 GMT
            Not After : Feb 14 09:09:53 2026 GMT
        Subject: CN=8916B9C4998DFA5D2C065B3C4CF1F95168A759AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:c1:a8:c0:bc:50:db:40:75:c9:2b:0e:c8:
                    a7:9b:d6:a4:64:47:e9:58:b3:e2:89:f4:fc:6a:0a:
                    6c:20:6a:35:91:72:58:0d:ba:dd:09:b9:c0:ca:f0:
                    d9:d0:f3:17:c2:52:51:61:71:ea:52:6c:5f:4b:1f:
                    9e:ed:33:37:4d:6d:39:d6:6d:4f:f5:9c:b3:77:b4:
                    da:cf:ee:b5:e3:ba:04:06:d9:6e:6c:1b:18:96:63:
                    31:7b:e7:32:e3:ce:a1:cb:7e:ff:9c:99:0f:da:9a:
                    96:08:69:5b:81:1f:6a:9b:17:71:93:76:2d:41:60:
                    84:68:ab:9f:71:c4:b9:72:9c:d6:72:c7:48:df:ac:
                    fc:d2:c2:0e:1c:61:ee:58:63:c8:60:aa:a3:f9:9c:
                    24:9c:00:15:42:b6:92:0b:ec:b7:a6:b8:01:77:7b:
                    68:a8:20:85:42:5c:7c:ae:65:e1:50:19:4d:41:6d:
                    ad:dc:d8:11:0c:a3:5d:94:81:bf:2d:a9:f2:f1:30:
                    0f:58:47:4c:45:41:5f:93:09:2d:0f:5a:18:ac:b8:
                    de:83:2b:a0:32:6b:8b:e1:f2:ff:b6:32:b8:0f:76:
                    9d:f6:e9:bb:19:ab:20:45:ad:8d:da:d8:40:94:32:
                    1d:fb:2e:d8:f6:b7:4c:a0:ca:56:14:ba:3c:91:47:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:16:B9:C4:99:8D:FA:5D:2C:06:5B:3C:4C:F1:F9:51:68:A7:59:AE
            X509v3 Authority Key Identifier:
                keyid:82:B4:04:94:FF:7B:74:A0:2D:EF:61:03:4E:0D:5C:95:D8:41:43:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0382AAB4CEDFDC998AF4189EA573A463C85F2B595FC97AB5306917363D72741/0/82B40494FF7B74A02DEF61034E0D5C95D8414395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82B40494FF7B74A02DEF61034E0D5C95D8414395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0382AAB4CEDFDC998AF4189EA573A463C85F2B595FC97AB5306917363D72741/0/323830333a313961303a3a2f33322d3334203d3e20323637373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:19a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:15:cf:e8:30:00:cb:10:3c:30:77:30:14:c2:a7:99:dd:34:
         1d:9a:2f:19:09:e8:6b:25:73:96:f6:e3:33:da:66:76:5b:9a:
         cf:bb:7c:a9:43:41:6c:58:1c:8f:8c:7a:33:dc:cd:d1:2c:23:
         d8:2d:dc:ce:56:ee:48:4b:2e:0f:c3:c1:f5:89:2b:c1:61:14:
         81:08:7c:36:86:0d:6a:b5:86:a2:29:16:f7:dd:7c:51:b0:2d:
         dd:87:31:66:b7:f9:1a:09:b3:95:28:b0:47:27:4d:7d:1d:b1:
         1b:d3:71:39:42:2f:80:c4:27:bc:01:b4:f0:a0:af:33:39:bb:
         f7:19:d2:80:29:b0:39:79:c1:bc:6f:35:23:f5:55:00:e9:0c:
         b8:6a:9b:f1:f2:11:72:a2:d0:c6:47:ac:b0:ab:4b:e2:4d:79:
         2f:45:86:e6:1c:97:71:ab:4d:e0:31:e8:3d:b6:2a:8c:91:0a:
         e8:c4:77:0f:58:6d:48:94:6a:5b:95:42:70:04:b1:38:f8:82:
         f8:f9:94:24:4f:39:e9:1e:5b:ee:0e:7e:9a:de:ca:e1:f0:f0:
         87:b8:9b:b9:ac:85:db:a1:12:ce:be:ee:03:2d:8f:22:a4:66:
         53:1b:53:65:a7:83:48:b7:f9:7d:6e:9f:8c:5e:fb:06:d3:12:
         5e:c9:23:b4
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGXyoCQxyU3FKK/wOQO77qaf2DiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJCNDA0OTRGRjdCNzRBMDJERUY2MTAzNEUwRDVDOTVE
ODQxNDM5NTAeFw0yNTAyMTUwOTA0NTNaFw0yNjAyMTQwOTA5NTNaMDMxMTAvBgNV
BAMTKDg5MTZCOUM0OTk4REZBNUQyQzA2NUIzQzRDRjFGOTUxNjhBNzU5QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkm8GowLxQ20B1ySsOyKeb1qRk
R+lYs+KJ9PxqCmwgajWRclgNut0JucDK8NnQ8xfCUlFhcepSbF9LH57tMzdNbTnW
bU/1nLN3tNrP7rXjugQG2W5sGxiWYzF75zLjzqHLfv+cmQ/ampYIaVuBH2qbF3GT
di1BYIRoq59xxLlynNZyx0jfrPzSwg4cYe5YY8hgqqP5nCScABVCtpIL7LemuAF3
e2ioIIVCXHyuZeFQGU1Bba3c2BEMo12Ugb8tqfLxMA9YR0xFQV+TCS0PWhisuN6D
K6Aya4vh8v+2MrgPdp326bsZqyBFrY3a2ECUMh37Ltj2t0ygylYUujyRR8LlAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUiRa5xJmN+l0sBls8TPH5UWinWa4wHwYDVR0j
BBgwFoAUgrQElP97dKAt72EDTg1cldhBQ5UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMDM4MkFBQjRDRURGREM5OThBRjQxODlFQTU3M0E0NjND
ODVGMkI1OTVGQzk3QUI1MzA2OTE3MzYzRDcyNzQxLzAvODJCNDA0OTRGRjdCNzRB
MDJERUY2MTAzNEUwRDVDOTVEODQxNDM5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkI0MDQ5NEZGN0I3NEEwMkRF
RjYxMDM0RTBENUM5NUQ4NDE0Mzk1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTAzODJBQUI0Q0VERkRDOTk4QUY0MTg5RUE1NzNBNDYzQzg1RjJCNTk1
RkM5N0FCNTMwNjkxNzM2M0Q3Mjc0MS8wLzMyMzgzMDMzM2EzMTM5NjEzMDNhM2Ey
ZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzNzM3MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDGaAw
DQYJKoZIhvcNAQELBQADggEBABkVz+gwAMsQPDB3MBTCp5ndNB2aLxkJ6Gslc5b2
4zPaZnZbms+7fKlDQWxYHI+MejPczdEsI9gt3M5W7khLLg/DwfWJK8FhFIEIfDaG
DWq1hqIpFvfdfFGwLd2HMWa3+RoJs5UosEcnTX0dsRvTcTlCL4DEJ7wBtPCgrzM5
u/cZ0oApsDl5wbxvNSP1VQDpDLhqm/HyEXKi0MZHrLCrS+JNeS9FhuYcl3GrTeAx
6D22KoyRCujEdw9YbUiUaluVQnAEsTj4gvj5lCRPOekeW+4OfpreyuHw8Ie4m7ms
hduhEs6+7gMtjyKkZlMbU2Wng0i3+X1un4xe+wbTEl7JI7Q=
-----END CERTIFICATE-----