Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030323a3a2f34382d3438203d3e20323733393334.roa
File:                     323830333a623065303a383030323a3a2f34382d3438203d3e20323733393334.roa (raw, json)
Hash identifier:          fyb4OfvddNoMwhUoQCfnquUrAw9sEgCsKx3PO5yE1pU=
Subject key identifier:   76:6E:90:21:90:24:B2:F2:11:80:A4:2C:23:EE:7B:E0:D2:17:27:44
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       1454662F469450EA7A5B561B835FE6B40CEDD32A
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030323a3a2f34382d3438203d3e20323733393334.roa
Signing time:             Thu 03 Oct 2024 16:35:00 +0000
ROA not before:           Thu 03 Oct 2024 16:30:00 +0000
ROA not after:            Thu 02 Oct 2025 16:35:00 +0000
asID:                     273934
IP address blocks:        2803:b0e0:8002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:54:66:2f:46:94:50:ea:7a:5b:56:1b:83:5f:e6:b4:0c:ed:d3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Oct  3 16:30:00 2024 GMT
            Not After : Oct  2 16:35:00 2025 GMT
        Subject: CN=766E90219024B2F21180A42C23EE7BE0D2172744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:33:a8:79:a0:b1:85:ff:ea:f0:3b:e5:ca:
                    5f:ab:f3:7e:dc:ae:74:14:60:f1:cd:d4:81:5a:51:
                    1e:59:bf:e8:83:c2:5b:27:8e:69:6c:09:6e:0b:7e:
                    59:a0:db:96:b8:3a:95:66:21:e1:c9:12:87:bd:b9:
                    cc:eb:14:55:22:92:d8:93:fd:e5:14:2c:81:39:fc:
                    89:95:70:72:6b:8d:40:af:8f:d5:fc:0f:21:ef:b8:
                    09:f0:46:4a:08:e9:bd:7c:95:81:a8:66:bc:9e:2a:
                    dc:4e:a1:0e:cd:99:10:1e:9a:b9:7b:bc:f0:69:af:
                    6f:99:a9:44:12:85:43:8d:31:55:c5:f1:91:06:6b:
                    37:85:53:26:a9:ed:a5:76:6f:9e:27:2e:80:df:f9:
                    3d:42:4e:a6:ae:0c:f8:24:31:c1:39:c7:17:69:3a:
                    ba:cc:82:20:32:5d:23:25:7d:08:cf:f1:64:ed:2e:
                    42:93:27:76:79:d0:c0:79:c2:4a:07:b7:db:a6:d9:
                    f9:fb:a7:37:58:37:c9:5a:13:4f:5e:3f:ae:23:72:
                    90:92:5e:1a:30:75:35:20:75:e7:0f:6c:67:1d:1c:
                    68:b8:96:b8:e2:f6:ce:e2:5d:85:6e:8b:39:01:20:
                    03:5b:69:54:1c:b6:58:c4:d1:1c:0c:11:7e:98:8e:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6E:90:21:90:24:B2:F2:11:80:A4:2C:23:EE:7B:E0:D2:17:27:44
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030323a3a2f34382d3438203d3e20323733393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:8b:08:97:4d:a2:23:8d:cd:46:d8:74:73:38:bc:06:7a:de:
         3d:df:43:ea:05:48:0d:22:a1:ae:46:e2:da:2b:33:7e:9d:61:
         01:b8:f9:3a:bf:1e:35:22:ad:d4:11:42:97:13:f5:94:18:d8:
         3d:10:2b:3a:ee:fa:36:62:ab:07:dd:f8:f6:cf:41:28:15:9f:
         72:de:57:78:d6:0c:73:58:93:f8:36:b6:8c:b0:6b:ef:9a:c2:
         cc:23:59:38:f3:73:df:17:bb:31:2a:83:49:a1:10:ac:d8:c8:
         a4:57:9a:12:f4:e2:93:1e:fe:79:7f:2a:f3:e3:db:c1:04:5e:
         be:cb:77:1b:42:01:1e:bf:ca:87:f6:e6:3d:bd:b6:81:fb:b8:
         fa:b6:ff:65:70:a5:45:4a:f4:6f:43:3b:ca:1c:7b:f0:dc:be:
         b6:96:02:31:60:d7:ae:7e:d6:fb:44:46:e7:a9:36:23:3a:f2:
         52:05:ba:2c:6f:1e:a2:01:6b:91:9a:ce:a0:c3:55:ff:02:21:
         54:fd:82:a4:d8:a6:de:fd:94:51:bb:fd:9b:ad:6d:1c:d4:ac:
         2c:99:53:08:18:a9:65:67:c6:52:1a:d2:f6:79:6d:6e:27:e6:
         01:60:2c:eb:ab:e1:28:72:2d:6c:a6:42:b1:bf:cc:ba:aa:fe:
         26:e2:42:1c
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUFFRmL0aUUOp6W1Ybg1/mtAzt0yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE
MjFGQzE5NTAeFw0yNDEwMDMxNjMwMDBaFw0yNTEwMDIxNjM1MDBaMDMxMTAvBgNV
BAMTKDc2NkU5MDIxOTAyNEIyRjIxMTgwQTQyQzIzRUU3QkUwRDIxNzI3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzjOoeaCxhf/q8Dvlyl+r837c
rnQUYPHN1IFaUR5Zv+iDwlsnjmlsCW4Lflmg25a4OpVmIeHJEoe9uczrFFUiktiT
/eUULIE5/ImVcHJrjUCvj9X8DyHvuAnwRkoI6b18lYGoZryeKtxOoQ7NmRAemrl7
vPBpr2+ZqUQShUONMVXF8ZEGazeFUyap7aV2b54nLoDf+T1CTqauDPgkMcE5xxdp
OrrMgiAyXSMlfQjP8WTtLkKTJ3Z50MB5wkoHt9um2fn7pzdYN8laE09eP64jcpCS
XhowdTUgdecPbGcdHGi4lrji9s7iXYVuizkBIANbaVQctljE0RwMEX6YjriVAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUdm6QIZAksvIRgKQsI+574NIXJ0QwHwYDVR0j
BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0
NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE
NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE
MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw
NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzMyMzgzMDMzM2E2MjMwNjUzMDNhMzgz
MDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzMzOTMzMzQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoA7DggAIwDQYJKoZIhvcNAQELBQADggEBAEyLCJdNoiONzUbYdHM4vAZ6
3j3fQ+oFSA0ioa5G4torM36dYQG4+Tq/HjUirdQRQpcT9ZQY2D0QKzru+jZiqwfd
+PbPQSgVn3LeV3jWDHNYk/g2toywa++awswjWTjzc98XuzEqg0mhEKzYyKRXmhL0
4pMe/nl/KvPj28EEXr7LdxtCAR6/yof25j29toH7uPq2/2VwpUVK9G9DO8oce/Dc
vraWAjFg165+1vtERuepNiM68lIFuixvHqIBa5GazqDDVf8CIVT9gqTYpt79lFG7
/ZutbRzUrCyZUwgYqWVnxlIa0vZ5bW4n5gFgLOur4ShyLWymQrG/zLqq/ibiQhw=
-----END CERTIFICATE-----