Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/323830333a3738303a3a2f33322d3332203d3e203238303037.roa
File:                     323830333a3738303a3a2f33322d3332203d3e203238303037.roa (raw, json)
Hash identifier:          61q10x1ytwdqKbMMxNEhCc+9le7Iprzx39GE50JyFMU=
Subject key identifier:   CC:2F:54:82:71:C2:E1:17:82:96:BE:6E:1A:C5:50:AD:71:17:49:E4
Certificate issuer:       /CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B
Certificate serial:       732BA4A7EC467B72306C2A2BCC7F6A9AC5807C09
Authority key identifier: B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/323830333a3738303a3a2f33322d3332203d3e203238303037.roa
Signing time:             Tue 04 Feb 2025 18:14:57 +0000
ROA not before:           Tue 04 Feb 2025 18:09:57 +0000
ROA not after:            Tue 03 Feb 2026 18:14:57 +0000
asID:                     28007
IP address blocks:        2803:780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2b:a4:a7:ec:46:7b:72:30:6c:2a:2b:cc:7f:6a:9a:c5:80:7c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B
        Validity
            Not Before: Feb  4 18:09:57 2025 GMT
            Not After : Feb  3 18:14:57 2026 GMT
        Subject: CN=CC2F548271C2E1178296BE6E1AC550AD711749E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:6d:50:bb:85:59:71:44:4d:8f:85:42:7f:
                    6d:59:62:b8:00:c9:8d:0d:49:48:7c:e9:5b:c1:9a:
                    33:a8:fd:2d:a7:27:d2:47:da:22:76:03:ee:f8:3d:
                    e5:2f:e1:9e:36:54:25:9b:90:a5:f2:ef:61:69:e9:
                    dd:7d:04:30:89:58:b5:29:55:4c:cb:b7:8b:43:9c:
                    2a:e1:16:fd:d7:fa:bc:d7:92:98:b1:fd:e5:36:aa:
                    0f:78:85:bf:9d:ff:b6:fc:b1:f9:13:3a:75:eb:7a:
                    d4:dd:92:91:2a:d1:a9:74:60:2a:28:86:6f:69:05:
                    69:4b:b9:ee:42:ee:cc:a8:ae:af:20:71:62:57:42:
                    34:ae:e8:55:1d:55:3e:f0:13:8a:ed:d8:8c:dc:7f:
                    22:c7:af:f2:fc:b0:a0:a5:2d:4a:ff:e7:6e:71:73:
                    b0:18:41:46:38:56:eb:58:3a:aa:12:c1:42:28:62:
                    1c:5b:6d:88:19:40:95:16:2d:f0:80:50:40:75:15:
                    14:4d:1e:6b:2c:45:68:fe:4a:e1:11:bd:01:48:2e:
                    81:1b:45:2c:55:42:fe:67:6e:c7:1c:49:71:b2:96:
                    b9:45:77:1b:4e:17:2e:c8:5a:a0:37:bd:3e:a1:5b:
                    0c:0e:5c:ae:24:80:ef:cb:77:e6:f5:55:40:d9:cb:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2F:54:82:71:C2:E1:17:82:96:BE:6E:1A:C5:50:AD:71:17:49:E4
            X509v3 Authority Key Identifier:
                keyid:B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/323830333a3738303a3a2f33322d3332203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:780::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:dd:b5:a7:40:10:17:de:ac:73:9f:7c:49:70:45:14:21:a9:
         6f:b9:d6:1e:91:1f:a6:5c:de:a6:08:dd:16:45:fa:eb:60:61:
         2f:7d:64:8d:1f:b2:1b:0a:5c:4f:54:fe:05:d9:a6:7b:68:c1:
         a4:38:f1:32:06:bb:80:de:59:39:08:20:46:29:1f:e5:eb:ee:
         f8:ad:3e:76:6b:9a:42:97:a2:b3:61:3d:27:1d:35:95:a9:a3:
         78:5f:74:c5:50:13:7a:cf:fe:f0:ee:56:99:e0:34:94:c7:cc:
         e9:7c:4d:d6:4c:3b:65:f8:31:9c:5f:55:34:8b:d2:46:b5:f2:
         54:3f:2c:98:04:a8:c7:fc:70:91:7d:c1:0a:54:f2:cb:8b:d1:
         b0:bb:e8:2e:6e:27:ce:b0:39:24:9f:8d:99:1a:44:3f:c9:ae:
         7e:e3:fb:2f:65:97:78:a8:0c:d4:d3:db:48:d9:fa:22:7f:59:
         42:d0:b3:67:b0:c3:19:13:c8:66:8d:6a:e3:58:6d:4d:f5:ff:
         5e:3f:94:e0:6b:71:6f:7d:1c:6c:fa:b9:42:d8:bb:a6:a9:7d:
         54:f1:3a:95:34:26:14:be:62:9e:9d:23:d5:36:fe:60:d7:85:
         08:e8:3e:71:19:6e:8c:4e:22:33:62:45:d4:26:cf:9b:20:a2:
         a3:50:c3:33
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUcyukp+xGe3IwbCorzH9qmsWAfAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFFRDhDMkI0MzZGODQ1NkE5RkZCN0E4MDM3NzBFNTc2
MEEyNTg5QjAeFw0yNTAyMDQxODA5NTdaFw0yNjAyMDMxODE0NTdaMDMxMTAvBgNV
BAMTKENDMkY1NDgyNzFDMkUxMTc4Mjk2QkU2RTFBQzU1MEFENzExNzQ5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABm1Qu4VZcURNj4VCf21ZYrgA
yY0NSUh86VvBmjOo/S2nJ9JH2iJ2A+74PeUv4Z42VCWbkKXy72Fp6d19BDCJWLUp
VUzLt4tDnCrhFv3X+rzXkpix/eU2qg94hb+d/7b8sfkTOnXretTdkpEq0al0YCoo
hm9pBWlLue5C7syorq8gcWJXQjSu6FUdVT7wE4rt2IzcfyLHr/L8sKClLUr/525x
c7AYQUY4VutYOqoSwUIoYhxbbYgZQJUWLfCAUEB1FRRNHmssRWj+SuERvQFILoEb
RSxVQv5nbsccSXGylrlFdxtOFy7IWqA3vT6hWwwOXK4kgO/Ld+b1VUDZy/OdAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUzC9UgnHC4ReClr5uGsVQrXEXSeQwHwYDVR0j
BBgwFoAUse2MK0NvhFap/7eoA3cOV2CiWJswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Q0JFQzEyN0E4MEMzRTFGMUEzNEU1NTNCODc4QjU4NTdB
QUMwRkJDREI1NDJFOUQ4OEY5RkUyRUNCQTczNjlGLzAvQjFFRDhDMkI0MzZGODQ1
NkE5RkZCN0E4MDM3NzBFNTc2MEEyNTg5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMUVEOEMyQjQzNkY4NDU2QTlG
RkI3QTgwMzc3MEU1NzYwQTI1ODlCLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUNCRUMxMjdBODBDM0UxRjFBMzRFNTUzQjg3OEI1ODU3QUFDMEZCQ0RC
NTQyRTlEODhGOUZFMkVDQkE3MzY5Ri8wLzMyMzgzMDMzM2EzNzM4MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM4MzAzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMHgDANBgkq
hkiG9w0BAQsFAAOCAQEAHd21p0AQF96sc598SXBFFCGpb7nWHpEfplzepgjdFkX6
62BhL31kjR+yGwpcT1T+Bdmme2jBpDjxMga7gN5ZOQggRikf5evu+K0+dmuaQpei
s2E9Jx01lamjeF90xVATes/+8O5WmeA0lMfM6XxN1kw7ZfgxnF9VNIvSRrXyVD8s
mASox/xwkX3BClTyy4vRsLvoLm4nzrA5JJ+NmRpEP8mufuP7L2WXeKgM1NPbSNn6
In9ZQtCzZ7DDGRPIZo1q41htTfX/Xj+U4Gtxb30cbPq5Qti7pql9VPE6lTQmFL5i
np0j1Tb+YNeFCOg+cRlujE4iM2JF1CbPmyCio1DDMw==
-----END CERTIFICATE-----