Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/323830333a613831303a3430363a3a2f34382d3438203d3e203134303830.roa
File:                     323830333a613831303a3430363a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          tExhkVqsHP6BMoE8IMEBnOKBcCXA0u9uKVmr8y6580o=
Subject key identifier:   E5:3A:EB:CB:FC:2E:26:28:CB:DF:8E:86:3D:AE:42:40:5B:16:A0:F2
Certificate issuer:       /CN=E3981097C6AD233FEB99DF81E5FA8E3CE87579C3
Certificate serial:       11F9B67E20FEC6600F447976126AB3F40D57833B
Authority key identifier: E3:98:10:97:C6:AD:23:3F:EB:99:DF:81:E5:FA:8E:3C:E8:75:79:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/323830333a613831303a3430363a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:22:24 +0000
ROA not before:           Tue 04 Feb 2025 18:17:24 +0000
ROA not after:            Tue 03 Feb 2026 18:22:24 +0000
asID:                     14080
IP address blocks:        2803:a810:406::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f9:b6:7e:20:fe:c6:60:0f:44:79:76:12:6a:b3:f4:0d:57:83:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3981097C6AD233FEB99DF81E5FA8E3CE87579C3
        Validity
            Not Before: Feb  4 18:17:24 2025 GMT
            Not After : Feb  3 18:22:24 2026 GMT
        Subject: CN=E53AEBCBFC2E2628CBDF8E863DAE42405B16A0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:ab:30:63:7d:40:57:08:b7:fd:2c:7a:33:
                    80:32:2f:c8:ec:74:94:de:3f:20:f1:41:ce:15:ce:
                    85:9d:d6:d4:9b:db:ef:d9:2e:f2:de:9c:d7:fd:3f:
                    23:88:ee:2f:ae:9a:99:2a:10:f4:56:1b:fd:b4:40:
                    9f:d6:3a:42:9e:af:f6:c1:c8:bf:1d:78:d0:3d:20:
                    b6:6c:5c:48:56:30:42:01:0f:db:7f:7d:08:3d:da:
                    57:13:96:b8:71:61:ca:e7:8c:de:b7:96:f9:68:d1:
                    e2:d5:70:35:b4:60:90:f7:b4:07:ae:9c:d2:64:ee:
                    2c:cf:c2:de:66:e8:5b:51:c1:0f:f9:fd:d7:3f:c8:
                    ae:95:76:53:38:2e:16:07:e8:17:61:22:13:28:15:
                    ca:b1:81:b7:5d:c9:b7:74:02:90:3a:29:4a:d2:44:
                    87:95:38:ec:84:de:c3:9d:af:22:3b:0d:4f:3f:39:
                    14:6a:f5:84:e4:3f:e3:08:06:e0:30:34:4d:05:50:
                    97:96:49:52:9e:08:70:2f:a8:7f:8b:92:a4:b4:00:
                    0b:86:a2:fa:7d:18:cb:d0:bb:8e:a4:6a:cc:35:b4:
                    1b:21:55:6c:b4:44:71:90:96:12:42:8f:95:38:8f:
                    6c:73:b1:d1:a1:c7:46:6a:df:d0:26:1b:e4:1c:8c:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:EB:CB:FC:2E:26:28:CB:DF:8E:86:3D:AE:42:40:5B:16:A0:F2
            X509v3 Authority Key Identifier:
                keyid:E3:98:10:97:C6:AD:23:3F:EB:99:DF:81:E5:FA:8E:3C:E8:75:79:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/323830333a613831303a3430363a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a810:406::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:53:53:1c:49:ea:e9:bf:28:28:df:4d:8d:e5:24:14:79:54:
         02:9b:77:86:50:07:f9:b1:43:8a:96:14:d8:7c:8f:2f:9b:89:
         99:77:30:28:92:ba:9f:2e:d7:73:f6:70:b7:e1:de:f6:fa:e5:
         17:3c:ba:0c:15:69:72:33:c8:cb:d9:15:0d:50:3b:71:e1:f0:
         bb:21:af:2b:b6:9b:5c:5c:eb:fd:86:ff:54:70:00:ce:25:3a:
         d0:4b:35:a1:78:d4:db:80:ec:c5:51:df:24:00:e6:0f:90:89:
         58:b3:1d:3a:df:8d:65:2a:78:fc:db:87:99:61:ca:08:8c:ab:
         c3:20:d4:f8:2f:e2:a6:56:32:6c:39:00:60:1c:0d:63:91:bd:
         d2:db:c6:28:96:c3:6b:52:f0:e5:8b:af:2d:c4:eb:c1:38:17:
         83:74:4f:11:29:35:4a:a2:48:e0:cd:a5:37:28:83:45:9f:80:
         2a:a3:c8:53:12:05:e1:4c:83:bc:7e:b3:0a:20:90:0a:d3:16:
         9b:46:7e:a6:15:93:5f:68:ee:5e:f3:3a:72:19:ba:24:ca:d7:
         2b:2a:20:96:c6:cb:ef:4d:86:f3:d0:e2:fa:c4:96:f5:ea:0f:
         1d:df:69:1e:4a:2e:3e:4e:84:4f:be:0d:0b:1f:b4:7f:3f:8d:
         c3:22:bd:25
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUEfm2fiD+xmAPRHl2Emqz9A1XgzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM5ODEwOTdDNkFEMjMzRkVCOTlERjgxRTVGQThFM0NF
ODc1NzlDMzAeFw0yNTAyMDQxODE3MjRaFw0yNjAyMDMxODIyMjRaMDMxMTAvBgNV
BAMTKEU1M0FFQkNCRkMyRTI2MjhDQkRGOEU4NjNEQUU0MjQwNUIxNkEwRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvKswY31AVwi3/Sx6M4AyL8js
dJTePyDxQc4VzoWd1tSb2+/ZLvLenNf9PyOI7i+umpkqEPRWG/20QJ/WOkKer/bB
yL8deNA9ILZsXEhWMEIBD9t/fQg92lcTlrhxYcrnjN63lvlo0eLVcDW0YJD3tAeu
nNJk7izPwt5m6FtRwQ/5/dc/yK6VdlM4LhYH6BdhIhMoFcqxgbddybd0ApA6KUrS
RIeVOOyE3sOdryI7DU8/ORRq9YTkP+MIBuAwNE0FUJeWSVKeCHAvqH+LkqS0AAuG
ovp9GMvQu46kasw1tBshVWy0RHGQlhJCj5U4j2xzsdGhx0Zq39AmG+QcjE9JAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQU5Trry/wuJijL346GPa5CQFsWoPIwHwYDVR0j
BBgwFoAU45gQl8atIz/rmd+B5fqOPOh1ecMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDRDRjIxRUExMTMyMzI1MDFGOEYxOTZCM0VDRjIzQkJC
QkNFMDYzQkMxOUQ2NUJBMEUxNkEzRUVGNUNBQjlGLzAvRTM5ODEwOTdDNkFEMjMz
RkVCOTlERjgxRTVGQThFM0NFODc1NzlDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzk4MTA5N0M2QUQyMzNGRUI5
OURGODFFNUZBOEUzQ0U4NzU3OUMzLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQ0Q0YyMUVBMTEzMjMyNTAxRjhGMTk2QjNFQ0YyM0JCQkJDRTA2M0JD
MTlENjVCQTBFMTZBM0VFRjVDQUI5Ri8wLzMyMzgzMDMzM2E2MTM4MzEzMDNhMzQz
MDM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzgzMC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgDqBAEBjANBgkqhkiG9w0BAQsFAAOCAQEAj1NTHEnq6b8oKN9NjeUkFHlUApt3
hlAH+bFDipYU2HyPL5uJmXcwKJK6ny7Xc/Zwt+He9vrlFzy6DBVpcjPIy9kVDVA7
ceHwuyGvK7abXFzr/Yb/VHAAziU60Es1oXjU24DsxVHfJADmD5CJWLMdOt+NZSp4
/NuHmWHKCIyrwyDU+C/iplYybDkAYBwNY5G90tvGKJbDa1Lw5YuvLcTrwTgXg3RP
ESk1SqJI4M2lNyiDRZ+AKqPIUxIF4UyDvH6zCiCQCtMWm0Z+phWTX2juXvM6chm6
JMrXKyoglsbL702G89Di+sSW9eoPHd9pHkouPk6ET74NCx+0fz+NwyK9JQ==
-----END CERTIFICATE-----