Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030323a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a373030323a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          iOeFZQazdMwSw/Tc149wH5qo7vX9cvE07KDpGFgwhTw=
Subject key identifier:   B8:83:1A:A9:AC:EC:14:D3:A4:58:3D:E0:0D:EF:95:8C:F9:36:92:0A
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       3E4036653E0689FC4FB3C510FD25B00C0A53E9B1
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030323a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 28 May 2024 21:00:02 +0000
ROA not before:           Tue 28 May 2024 20:55:02 +0000
ROA not after:            Tue 27 May 2025 21:00:02 +0000
asID:                     272979
IP address blocks:        2803:b0e0:7002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:40:36:65:3e:06:89:fc:4f:b3:c5:10:fd:25:b0:0c:0a:53:e9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: May 28 20:55:02 2024 GMT
            Not After : May 27 21:00:02 2025 GMT
        Subject: CN=B8831AA9ACEC14D3A4583DE00DEF958CF936920A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:c6:db:dd:99:00:7f:0a:97:c0:60:37:80:
                    fc:41:a7:6d:89:eb:3a:26:d2:b1:d0:51:b7:ac:20:
                    12:3b:a2:bb:02:8b:78:10:14:ab:32:64:83:66:b7:
                    1a:49:01:d3:b8:f0:33:00:e3:02:6b:d2:50:c2:bd:
                    84:9f:d7:7e:06:9a:92:ee:09:1e:61:c3:f0:23:3a:
                    94:57:7a:c7:4e:e2:4b:25:85:49:af:32:12:4c:36:
                    44:97:d2:1f:c7:e7:99:65:08:4a:44:82:07:db:29:
                    86:16:e0:be:a3:9a:14:d9:8c:c7:a1:3a:0f:48:b0:
                    59:3b:9c:be:8d:d5:1d:28:17:96:99:a1:6b:68:c3:
                    2d:b8:cb:b3:6b:e1:de:e9:c2:90:7d:82:fd:22:87:
                    39:4d:57:01:f8:4d:16:94:ea:70:1c:be:e3:a5:5b:
                    b8:4d:51:66:8f:60:c2:ad:35:9f:fb:7d:82:b1:65:
                    5a:87:ae:52:f3:75:7f:b5:0d:20:b5:ba:64:ab:0a:
                    74:c8:a6:bb:bc:d8:1c:7f:48:0a:a1:a6:bf:04:da:
                    95:75:a6:00:73:f3:ec:20:c4:af:87:d0:3d:28:a4:
                    9e:99:b4:29:87:37:49:97:96:dd:fa:de:de:07:19:
                    cd:55:57:85:49:21:74:b2:51:21:6d:e5:0b:a1:4f:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:83:1A:A9:AC:EC:14:D3:A4:58:3D:E0:0D:EF:95:8C:F9:36:92:0A
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a373030323a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:4e:fc:8e:c8:8e:a0:6b:03:45:a3:64:d2:b6:1d:64:87:6e:
         40:85:6b:01:ef:27:33:08:37:ed:a7:75:45:7b:3d:a7:dc:f9:
         ef:2f:f4:98:ab:45:a3:6f:93:28:eb:f7:84:59:3f:8c:a1:47:
         38:3a:3a:5d:f5:e3:5a:2b:cb:b7:5f:44:6e:e6:57:d1:8a:63:
         8b:3c:39:a4:1d:33:d0:21:68:2b:12:96:dd:d2:7f:38:6e:c1:
         5a:0b:3c:13:6e:cc:1d:86:c3:62:be:6e:d3:17:76:2d:ad:bd:
         a6:3a:78:d4:79:74:6e:62:54:4e:97:49:82:57:3d:1d:b6:fa:
         c0:af:79:6e:47:60:97:14:eb:33:7e:ff:e6:51:a5:6d:30:f3:
         ae:5e:f5:c0:ad:62:16:48:86:05:2a:ab:39:34:58:63:03:8e:
         aa:b8:56:8e:e9:08:fe:d8:ae:25:a3:f0:e3:50:63:a4:95:63:
         80:cd:9f:ba:64:3d:f0:63:89:62:a9:2b:b6:1f:be:e9:99:11:
         a9:9a:50:97:2e:c5:fd:75:30:ab:c9:70:e8:5f:1c:f8:ab:f7:
         89:e9:25:9e:6b:74:93:84:ec:bb:d9:e6:71:d2:e2:96:b2:ed:
         75:5e:d8:ff:44:7a:25:25:84:f4:95:85:6a:6a:bf:30:b0:2f:
         c3:84:2a:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----