Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030363a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a383030363a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          S7rYqmSJSC74a49H93nbdFfv8Iw5SJT+lrXKDaXdC6Q=
Subject key identifier:   FF:1F:D5:FA:7D:1C:20:37:4E:07:0C:AC:27:A2:87:75:84:65:3B:17
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       4B7194501030DF0911C307C421D06C4E9C1D41B2
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030363a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Tue 28 May 2024 21:00:03 +0000
ROA not before:           Tue 28 May 2024 20:55:03 +0000
ROA not after:            Tue 27 May 2025 21:00:03 +0000
asID:                     272979
IP address blocks:        2803:b0e0:8006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:71:94:50:10:30:df:09:11:c3:07:c4:21:d0:6c:4e:9c:1d:41:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: May 28 20:55:03 2024 GMT
            Not After : May 27 21:00:03 2025 GMT
        Subject: CN=FF1FD5FA7D1C20374E070CAC27A2877584653B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:10:eb:62:28:93:0a:df:ab:1a:b8:8c:93:
                    e6:88:0c:10:3d:31:ee:0b:e5:29:69:1b:39:b3:72:
                    fa:c0:c6:b2:51:e7:76:12:49:72:46:65:95:c2:b3:
                    84:24:9d:0f:08:9e:e0:d8:c5:7b:72:63:5e:01:8b:
                    78:ce:0a:3e:60:08:c1:8c:c2:d9:e0:b6:5a:4c:9c:
                    8f:2e:8c:4c:e8:ea:bc:fb:cc:ba:e7:7f:6e:d5:4c:
                    ac:95:fb:c9:8e:f6:ce:4c:6a:f5:37:d6:06:54:51:
                    85:a6:13:17:d6:48:2f:ec:7c:ad:09:7e:ef:38:b4:
                    ae:a3:84:b8:33:d0:14:2d:a9:b9:ce:e3:d0:d4:09:
                    a7:21:5c:d2:d3:16:4f:59:73:f3:c5:7f:90:5a:a5:
                    44:18:a4:32:f8:80:86:23:b8:fb:29:09:b9:94:0c:
                    69:40:7a:81:19:9b:59:2e:05:4a:dd:e6:db:0a:7e:
                    50:46:51:d6:88:15:8b:84:d2:43:4b:46:09:82:73:
                    df:95:a9:84:d0:31:f4:1c:17:09:ef:98:54:32:9a:
                    ac:9d:1e:bb:99:1d:ad:78:56:1f:93:b8:70:0d:68:
                    a6:67:39:34:fe:11:7d:28:53:81:e4:0b:73:35:7c:
                    2b:ee:aa:fe:65:3c:45:3d:d6:ce:72:fd:7a:26:dc:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1F:D5:FA:7D:1C:20:37:4E:07:0C:AC:27:A2:87:75:84:65:3B:17
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383030363a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:66:40:f4:70:3a:f7:8e:17:f7:55:f3:c2:8d:b1:99:74:
         d2:4b:78:57:03:6b:9c:87:42:77:05:5a:52:f7:66:bb:6e:59:
         e7:d0:11:0c:20:6c:ff:aa:8a:9d:91:ff:56:e7:07:9a:c5:e4:
         f4:d2:c7:a9:ac:25:14:38:bf:05:f2:1c:2e:3d:d2:ac:01:5b:
         b3:05:cc:09:e5:f3:2b:cf:9d:6a:ae:8e:c1:b4:15:8d:c9:be:
         8d:25:8c:d8:db:75:bc:ea:56:d5:27:7e:98:b4:86:9f:02:54:
         9c:cb:26:84:9e:f7:bb:fb:18:0a:3b:00:b2:79:13:d4:f0:dc:
         a3:d4:fe:89:4b:4f:65:95:bb:6a:1c:ad:91:5e:28:1a:87:fc:
         30:85:9a:dd:30:86:d6:7a:49:ea:a0:40:1c:45:01:ab:3b:7a:
         7f:69:59:2d:d7:f0:78:47:7c:09:d9:9a:57:54:e5:49:cc:8a:
         df:9c:4a:7a:a5:04:d4:2f:c0:81:58:23:8d:20:c6:4f:48:3c:
         04:1a:50:af:4d:b1:72:fa:26:cb:24:a5:98:2e:25:ac:e8:15:
         fc:e3:ea:fe:e6:bb:bb:72:6d:a5:6b:d2:b0:f9:fa:3d:dd:0e:
         8d:b5:3c:4b:5a:91:af:4f:90:c1:cd:c9:95:9b:56:67:a3:14:
         a4:9b:78:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----