Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/323830333a616361303a3a2f33322d3332203d3e20323636383037.roa
File:                     323830333a616361303a3a2f33322d3332203d3e20323636383037.roa (raw, json)
Hash identifier:          32yCRhVUF9/ZwZ+nfr29ggiyjzU8xrPQcmX3DYx3D/c=
Subject key identifier:   F2:1B:9F:18:2B:BB:C0:3D:A8:E6:16:96:9E:F6:A4:6E:83:7F:0D:48
Certificate issuer:       /CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
Certificate serial:       2E3A683D5B15E7BA231D38CAF9122054E6A97BAF
Authority key identifier: 00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/323830333a616361303a3a2f33322d3332203d3e20323636383037.roa
Signing time:             Tue 30 Apr 2024 12:45:00 +0000
ROA not before:           Tue 30 Apr 2024 12:40:00 +0000
ROA not after:            Tue 29 Apr 2025 12:45:00 +0000
asID:                     266807
IP address blocks:        2803:aca0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3a:68:3d:5b:15:e7:ba:23:1d:38:ca:f9:12:20:54:e6:a9:7b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
        Validity
            Not Before: Apr 30 12:40:00 2024 GMT
            Not After : Apr 29 12:45:00 2025 GMT
        Subject: CN=F21B9F182BBBC03DA8E616969EF6A46E837F0D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:39:d8:34:0f:cf:43:52:fc:36:77:88:85:
                    08:e0:b2:69:e2:90:e9:c8:f7:41:91:6d:30:d1:5c:
                    27:a9:c8:bf:b5:af:74:1a:62:f8:eb:5a:00:94:89:
                    d0:ae:e2:6a:27:13:af:9d:29:e7:0c:4a:90:cb:52:
                    e0:bf:7c:76:2d:13:bf:2d:67:d8:6e:0a:e2:67:71:
                    e2:63:17:c3:05:21:90:17:5f:09:63:c4:89:6c:8e:
                    26:16:a9:b0:8d:2e:f9:e7:7b:33:3b:c1:88:22:72:
                    2f:8a:57:f5:08:71:8c:6d:e6:be:1e:5d:05:0a:8f:
                    73:ca:2b:d4:9d:87:fe:c7:12:be:e6:bc:be:61:ea:
                    dc:13:ba:cb:97:ba:7e:3c:c7:45:61:10:bc:09:8c:
                    e6:ba:12:79:c8:20:19:1b:ea:b3:58:49:29:69:16:
                    71:60:16:fe:6b:0e:b1:a3:51:b4:ff:3d:d6:62:c9:
                    9c:97:75:70:73:da:42:10:66:c0:d7:2e:be:5e:e1:
                    da:8e:70:ff:7c:f3:12:3d:bb:24:25:65:56:f4:21:
                    a1:80:be:04:6e:19:22:a0:25:09:fe:1f:ab:85:9e:
                    49:71:e0:c1:d3:89:a5:5d:59:70:af:33:f4:97:b0:
                    38:0e:b0:b9:1c:e3:a9:bd:49:ac:88:b1:a3:2d:01:
                    80:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1B:9F:18:2B:BB:C0:3D:A8:E6:16:96:9E:F6:A4:6E:83:7F:0D:48
            X509v3 Authority Key Identifier:
                keyid:00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/323830333a616361303a3a2f33322d3332203d3e20323636383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:82:5c:c5:30:00:74:84:20:e3:3a:1b:e5:b5:40:1e:5e:15:
         75:08:7d:83:bf:76:f9:7c:8d:8a:cc:d6:0c:00:ba:d4:0b:17:
         c5:f6:b5:06:d5:5e:76:94:51:bc:00:4c:9b:2a:c6:37:92:75:
         b9:eb:db:fa:aa:92:b8:26:26:1d:dd:bd:5a:83:a3:82:d3:be:
         54:31:0f:0a:28:70:e5:49:f8:fd:22:57:b9:3d:62:18:94:91:
         1e:4c:5d:fb:62:be:dc:a4:07:63:e6:a8:d5:18:4e:3e:32:84:
         34:0b:34:9c:11:65:55:51:4b:54:91:58:8e:bc:c6:95:da:14:
         e8:87:35:e2:20:f3:08:5a:f8:bf:08:17:1a:34:38:ac:ba:1e:
         fb:1a:4c:dd:20:5e:4d:de:a2:5c:f9:a6:cd:6b:85:9b:51:62:
         46:ea:b9:7a:77:b3:a8:57:ae:25:32:c2:2e:59:83:6d:47:db:
         86:ba:91:5d:04:08:1f:f2:de:68:25:d7:37:3e:42:cd:14:b9:
         6d:61:17:68:66:04:3d:3a:e3:03:74:40:94:31:ec:1c:bd:96:
         66:f6:09:8e:a7:a5:f7:60:cc:b3:58:3d:39:55:fc:fd:9c:e1:
         34:a1:56:db:bf:34:93:b3:ad:c7:9a:28:9e:02:9a:75:a6:3f:
         f9:12:e4:2a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIULjpoPVsV57ojHTjK+RIgVOape68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBENjZCQzk1ODlCOTA2QjZBNTJBMzFENzE4N0ZFNjY4
NjExOERGQTAeFw0yNDA0MzAxMjQwMDBaFw0yNTA0MjkxMjQ1MDBaMDMxMTAvBgNV
BAMTKEYyMUI5RjE4MkJCQkMwM0RBOEU2MTY5NjlFRjZBNDZFODM3RjBENDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tjnYNA/PQ1L8NneIhQjgsmni
kOnI90GRbTDRXCepyL+1r3QaYvjrWgCUidCu4monE6+dKecMSpDLUuC/fHYtE78t
Z9huCuJnceJjF8MFIZAXXwljxIlsjiYWqbCNLvnnezM7wYgici+KV/UIcYxt5r4e
XQUKj3PKK9Sdh/7HEr7mvL5h6twTusuXun48x0VhELwJjOa6EnnIIBkb6rNYSSlp
FnFgFv5rDrGjUbT/PdZiyZyXdXBz2kIQZsDXLr5e4dqOcP988xI9uyQlZVb0IaGA
vgRuGSKgJQn+H6uFnklx4MHTiaVdWXCvM/SXsDgOsLkc46m9SayIsaMtAYCnAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU8hufGCu7wD2o5haWnvakboN/DUgwHwYDVR0j
BBgwFoAUANZryVibkGtqUqMdcYf+ZoYRjfowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNDdDMTJFOENGQjEzMzIyODE2OUQ2RjBBNDg0RURBMEQ4
MTk2NzBCRTdFQjI0QjgwQTMzNDc3M0E0NjdDRTRELzAvMDBENjZCQzk1ODlCOTA2
QjZBNTJBMzFENzE4N0ZFNjY4NjExOERGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEQ2NkJDOTU4OUI5MDZCNkE1
MkEzMUQ3MTg3RkU2Njg2MTE4REZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTQ3QzEyRThDRkIxMzMyMjgxNjlENkYwQTQ4NEVEQTBEODE5NjcwQkU3
RUIyNEI4MEEzMzQ3NzNBNDY3Q0U0RC8wLzMyMzgzMDMzM2E2MTYzNjEzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM4MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDrKAw
DQYJKoZIhvcNAQELBQADggEBAF6CXMUwAHSEIOM6G+W1QB5eFXUIfYO/dvl8jYrM
1gwAutQLF8X2tQbVXnaUUbwATJsqxjeSdbnr2/qqkrgmJh3dvVqDo4LTvlQxDwoo
cOVJ+P0iV7k9YhiUkR5MXftivtykB2PmqNUYTj4yhDQLNJwRZVVRS1SRWI68xpXa
FOiHNeIg8wha+L8IFxo0OKy6HvsaTN0gXk3eolz5ps1rhZtRYkbquXp3s6hXriUy
wi5Zg21H24a6kV0ECB/y3mgl1zc+Qs0UuW1hF2hmBD064wN0QJQx7By9lmb2CY6n
pfdgzLNYPTlV/P2c4TShVtu/NJOzrceaKJ4CmnWmP/kS5Co=
-----END CERTIFICATE-----